Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32342d3234203d3e20323731353636.roa
File:                     3137392e36332e3137322e302f32342d3234203d3e20323731353636.roa (raw, json)
Hash identifier:          84inV9m+FMTtT4Ni+5ThRN4MszN3TtmCl6tnZepuhHg=
Subject key identifier:   89:EF:3A:02:BF:2E:F7:F7:26:A2:88:67:2D:86:EF:B9:AE:86:14:81
Certificate issuer:       /CN=BD5D2F7AD342417A0B2914691BEBD646104DE6B5
Certificate serial:       4CDDB4B36A3F396B783C66D8D735DDC72CE53FC4
Authority key identifier: BD:5D:2F:7A:D3:42:41:7A:0B:29:14:69:1B:EB:D6:46:10:4D:E6:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD5D2F7AD342417A0B2914691BEBD646104DE6B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32342d3234203d3e20323731353636.roa
Signing time:             Mon 24 Jul 2023 14:49:49 +0000
ROA not before:           Mon 24 Jul 2023 14:44:49 +0000
ROA not after:            Mon 22 Jul 2024 14:49:49 +0000
asID:                     271566
IP address blocks:        179.63.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:dd:b4:b3:6a:3f:39:6b:78:3c:66:d8:d7:35:dd:c7:2c:e5:3f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5D2F7AD342417A0B2914691BEBD646104DE6B5
        Validity
            Not Before: Jul 24 14:44:49 2023 GMT
            Not After : Jul 22 14:49:49 2024 GMT
        Subject: CN=89EF3A02BF2EF7F726A288672D86EFB9AE861481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:e2:83:43:bf:19:36:cd:ac:97:1d:be:d2:
                    21:4f:a1:31:fb:76:f7:c9:02:f3:cf:f9:2e:9e:07:
                    4e:34:8a:df:8c:1e:33:15:56:5b:22:f4:6b:4e:4c:
                    a6:a0:f1:56:2c:62:b3:8f:10:69:be:59:51:6b:28:
                    8a:a0:6b:6e:f1:52:04:5b:1d:f0:2d:9a:49:30:83:
                    88:aa:a0:7e:42:48:7f:a0:5f:ea:17:93:5b:95:8e:
                    93:12:ef:66:f9:4c:33:97:30:c5:19:ae:4c:47:03:
                    02:03:76:4f:b9:50:5c:a9:fd:25:a1:00:32:d7:73:
                    77:37:13:1d:ae:a7:0a:42:b8:70:9f:11:0f:71:37:
                    8e:ad:e6:bf:21:f5:a6:16:95:e9:dc:5c:3c:ed:1a:
                    cf:7d:22:0c:6c:b0:b7:7d:92:ea:ad:b4:f4:15:8e:
                    a7:16:46:db:80:c5:df:d0:89:ac:bd:64:46:f5:46:
                    05:9b:29:c5:b7:ad:f3:9c:c1:16:a8:27:1f:a1:2d:
                    28:b3:3c:48:a8:8c:22:ea:63:1b:95:52:08:d1:2d:
                    bf:2c:3a:a8:54:58:97:45:98:4b:a9:ef:03:b4:a5:
                    bb:0b:ca:38:14:13:37:a5:2c:a4:2f:e1:91:0f:99:
                    90:7e:16:c5:29:12:04:d5:a6:fc:fc:43:11:c1:64:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EF:3A:02:BF:2E:F7:F7:26:A2:88:67:2D:86:EF:B9:AE:86:14:81
            X509v3 Authority Key Identifier:
                keyid:BD:5D:2F:7A:D3:42:41:7A:0B:29:14:69:1B:EB:D6:46:10:4D:E6:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/BD5D2F7AD342417A0B2914691BEBD646104DE6B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD5D2F7AD342417A0B2914691BEBD646104DE6B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137322e302f32342d3234203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:4c:be:fe:dc:c9:b2:c1:da:e6:da:5b:96:27:e2:93:86:c2:
         14:43:86:d0:2c:62:67:96:10:db:78:11:e2:90:fe:67:36:e1:
         64:7f:08:c8:db:d3:36:d5:70:fc:d4:62:69:a5:a5:c8:8c:0a:
         48:8d:c0:ae:2b:e4:11:de:47:d3:b9:59:c9:eb:10:a6:c1:be:
         a3:1e:59:16:d0:0b:84:5f:d1:9e:db:75:25:88:8d:cb:e4:86:
         fa:0a:a7:5d:11:2c:f7:30:0f:91:d9:b4:6a:cd:a6:1d:08:bd:
         a3:2e:49:8c:48:55:19:91:c2:3c:18:c5:61:c2:c7:5a:f4:bc:
         d1:ac:98:4f:73:3b:0e:76:92:18:f2:32:14:61:a9:35:5f:7f:
         99:b4:fe:cc:02:02:19:b7:a4:08:a4:60:d3:2a:a0:8f:98:a4:
         cf:6d:50:40:d0:e8:2a:b8:81:68:86:5c:f4:4c:09:ff:0b:bd:
         24:0d:d8:1a:cd:c8:0e:96:27:c6:82:d7:06:30:e8:01:d7:3a:
         1a:24:4f:65:f9:45:58:57:05:da:0c:b4:6f:8e:65:f2:2d:0f:
         ee:4b:b7:aa:04:9b:e0:6d:29:c3:5c:5c:83:09:b3:f4:08:35:
         84:da:36:eb:8a:ad:12:a0:d8:5e:cf:51:1f:96:46:7f:8a:df:
         4c:c5:1b:f2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTN20s2o/OWt4PGbY1zXdxyzlP8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ1RDJGN0FEMzQyNDE3QTBCMjkxNDY5MUJFQkQ2NDYx
MDRERTZCNTAeFw0yMzA3MjQxNDQ0NDlaFw0yNDA3MjIxNDQ5NDlaMDMxMTAvBgNV
BAMTKDg5RUYzQTAyQkYyRUY3RjcyNkEyODg2NzJEODZFRkI5QUU4NjE0ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjOKDQ78ZNs2slx2+0iFPoTH7
dvfJAvPP+S6eB040it+MHjMVVlsi9GtOTKag8VYsYrOPEGm+WVFrKIqga27xUgRb
HfAtmkkwg4iqoH5CSH+gX+oXk1uVjpMS72b5TDOXMMUZrkxHAwIDdk+5UFyp/SWh
ADLXc3c3Ex2upwpCuHCfEQ9xN46t5r8h9aYWlencXDztGs99IgxssLd9kuqttPQV
jqcWRtuAxd/Qiay9ZEb1RgWbKcW3rfOcwRaoJx+hLSizPEiojCLqYxuVUgjRLb8s
OqhUWJdFmEup7wO0pbsLyjgUEzelLKQv4ZEPmZB+FsUpEgTVpvz8QxHBZPfrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUie86Ar8u9/cmoohnLYbvua6GFIEwHwYDVR0j
BBgwFoAUvV0vetNCQXoLKRRpG+vWRhBN5rUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjZRTUVBU2NvUmZFc1ZkTFlvQlcyWFFrWFVBbjE5RmlSUjN5dHZ4aWhT
Z2gvMC9CRDVEMkY3QUQzNDI0MTdBMEIyOTE0NjkxQkVCRDY0NjEwNERFNkI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JENUQyRjdBRDM0MjQxN0Ew
QjI5MTQ2OTFCRUJENjQ2MTA0REU2QjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y2UU1FQVNjb1JmRXNWZExZb0JXMlhRa1hVQW4xOUZpUlIzeXR2eGloU2doLzAv
MzEzNzM5MmUzNjMzMmUzMTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNTM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzP6wwDQYJKoZIhvcNAQELBQADggEBABBMvv7c
ybLB2ubaW5Yn4pOGwhRDhtAsYmeWENt4EeKQ/mc24WR/CMjb0zbVcPzUYmmlpciM
CkiNwK4r5BHeR9O5WcnrEKbBvqMeWRbQC4Rf0Z7bdSWIjcvkhvoKp10RLPcwD5HZ
tGrNph0IvaMuSYxIVRmRwjwYxWHCx1r0vNGsmE9zOw52khjyMhRhqTVff5m0/swC
Ahm3pAikYNMqoI+YpM9tUEDQ6Cq4gWiGXPRMCf8LvSQN2BrNyA6WJ8aC1wYw6AHX
OhokT2X5RVhXBdoMtG+OZfItD+5Lt6oEm+BtKcNcXIMJs/QINYTaNuuKrRKg2F7P
UR+WRn+K30zFG/I=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:37 2023 by rpki-client on console.sobornost.net