Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130302e302f32342d3234203d3e203631363732.roa
File:                     3137372e31312e3130302e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          DpwsyYZsh/eql9nhHGZaZN4zMf/3nBLtyA+wbKPd2Vs=
Subject key identifier:   36:A3:A5:63:D8:1C:C7:9C:B4:A0:3A:E0:92:E3:52:FC:76:34:A9:CE
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       420A65D9FF22E31A99B0AF76CDBA2BFD9566F77C
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130302e302f32342d3234203d3e203631363732.roa
Signing time:             Thu 27 Jul 2023 14:03:41 +0000
ROA not before:           Thu 27 Jul 2023 13:58:41 +0000
ROA not after:            Thu 25 Jul 2024 14:03:41 +0000
asID:                     61672
IP address blocks:        177.11.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0a:65:d9:ff:22:e3:1a:99:b0:af:76:cd:ba:2b:fd:95:66:f7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Jul 27 13:58:41 2023 GMT
            Not After : Jul 25 14:03:41 2024 GMT
        Subject: CN=36A3A563D81CC79CB4A03AE092E352FC7634A9CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:db:eb:71:d9:ed:ac:bd:9a:ce:13:68:aa:
                    56:24:ef:2a:d5:72:50:bd:0c:f9:c6:c3:b6:f2:b5:
                    59:1c:09:cb:c4:5f:50:5a:cf:04:73:04:91:e2:5e:
                    76:c6:6f:33:cb:4b:b7:a6:d1:36:5f:4f:d2:cd:23:
                    c5:5e:2b:52:d7:ab:e9:a5:6c:3c:0f:4a:89:d4:00:
                    3b:01:fa:b3:f9:7f:a9:68:f7:58:75:5d:0e:62:41:
                    c7:ba:ea:1c:67:d0:c2:4c:6d:4d:58:4d:2a:a9:f8:
                    b6:1a:33:4d:50:e0:de:7a:69:26:39:9d:2f:a3:60:
                    1c:e5:86:f3:0a:bd:9a:a8:cb:a6:0f:9d:8c:2b:49:
                    90:9e:de:38:2a:8c:99:52:85:8c:c3:a2:8f:bd:1a:
                    86:3b:66:14:c4:49:09:88:07:68:72:97:68:a2:3b:
                    c6:1f:11:5f:45:29:43:40:dc:46:30:b9:3d:cf:3d:
                    e9:2e:91:2d:a0:4a:64:9f:19:0c:26:2b:ee:98:2c:
                    18:2c:b4:a5:cc:18:d4:8f:67:c6:a1:7a:a2:64:fc:
                    92:b6:52:aa:aa:d9:e2:39:93:c5:4c:30:44:91:2c:
                    fc:43:93:9e:3d:83:21:95:a5:cb:7e:1d:0e:01:85:
                    9b:04:f9:bc:79:78:ca:da:e1:92:38:ee:b7:72:2b:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A3:A5:63:D8:1C:C7:9C:B4:A0:3A:E0:92:E3:52:FC:76:34:A9:CE
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130302e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:49:e4:8d:3d:98:3e:85:dd:7a:8c:95:4e:9b:19:23:77:65:
         bd:fa:35:4e:43:c8:20:f9:f8:bc:35:8b:88:bd:aa:a7:52:d7:
         e9:3f:93:b7:87:88:86:36:89:b6:e5:27:82:42:d7:a1:21:db:
         14:78:79:9a:df:aa:31:74:0e:54:88:9c:e7:e0:48:e1:ab:f9:
         46:21:bb:88:6b:aa:b3:af:d1:9d:2c:75:f0:69:72:e6:e7:bf:
         b9:cb:58:db:9a:dc:59:2d:ca:bf:42:f1:f0:60:b1:64:35:50:
         61:9d:56:da:00:39:fc:3b:8e:3d:16:e1:e6:d0:2c:dc:c7:36:
         2a:76:27:98:d8:94:4f:df:f6:5e:60:c5:10:32:55:53:09:94:
         33:d3:23:6e:35:46:59:01:9b:a5:25:14:95:8d:ba:db:f4:fb:
         ac:c4:a7:87:18:bc:53:19:f7:f1:3f:1f:23:a7:da:5e:02:73:
         71:98:6b:33:a1:2e:b2:b3:f7:d9:fb:0d:94:f7:e5:c7:07:67:
         3e:1d:50:3f:14:47:f7:fc:34:ad:c7:53:67:d9:08:ae:64:6f:
         44:5d:a8:fd:eb:4d:d5:1b:8e:88:a2:60:51:67:b6:b2:f0:58:
         ca:21:39:74:63:9f:91:d2:13:42:d1:81:98:a6:7e:57:87:22:
         e9:13:30:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org