Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/0/3137372e38362e3134332e302f32342d3234203d3e203532363038.roa
File:                     3137372e38362e3134332e302f32342d3234203d3e203532363038.roa (raw, json)
Hash identifier:          WppAgQ9ys2lk37sBKEZJ7paU3c4U5loVVtc1yrnMSUA=
Subject key identifier:   E3:9E:99:09:CE:35:30:A2:70:AC:90:B3:11:61:53:1E:CE:B9:43:AC
Certificate issuer:       /CN=7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30
Certificate serial:       1C3A68FD0C5E723BEB444E1E78CC3E6C71D58639
Authority key identifier: 74:82:D8:11:F2:8F:CA:AE:42:D7:FF:B4:8B:32:48:AF:FC:CD:FB:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/0/3137372e38362e3134332e302f32342d3234203d3e203532363038.roa
Signing time:             Thu 01 Feb 2024 14:20:02 +0000
ROA not before:           Thu 01 Feb 2024 14:15:02 +0000
ROA not after:            Thu 30 Jan 2025 14:20:02 +0000
asID:                     52608
IP address blocks:        177.86.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3a:68:fd:0c:5e:72:3b:eb:44:4e:1e:78:cc:3e:6c:71:d5:86:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30
        Validity
            Not Before: Feb  1 14:15:02 2024 GMT
            Not After : Jan 30 14:20:02 2025 GMT
        Subject: CN=E39E9909CE3530A270AC90B31161531ECEB943AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a4:35:d8:d9:51:61:e7:be:eb:7f:14:c6:87:
                    18:5b:cf:90:43:2a:77:9f:6e:d6:91:1d:d4:3d:c8:
                    f2:57:ab:b2:bf:d8:28:44:68:af:50:aa:3d:53:9a:
                    c7:9f:ec:d9:63:4b:0d:09:4d:29:93:11:0f:34:84:
                    a9:ff:1d:3c:78:fa:f8:fa:ad:7f:7c:6a:1f:dc:9e:
                    ef:4f:13:4d:54:5f:67:9b:9e:ac:48:4b:a2:b5:a4:
                    aa:65:eb:70:9d:26:39:0c:19:03:97:0e:a8:2d:f7:
                    2b:9f:29:d1:73:7f:9d:3e:ed:31:94:cc:ec:99:0f:
                    81:52:86:b2:2d:ef:e3:01:4a:02:c7:be:b6:f5:55:
                    77:97:86:83:bd:73:7b:13:66:a2:9a:b9:ce:da:42:
                    2d:cb:88:83:65:d4:98:8d:69:41:6f:a6:52:15:1a:
                    3b:3f:80:55:f0:ee:27:c4:da:ec:30:2a:05:62:c4:
                    eb:47:cd:38:36:cd:07:31:b2:74:9d:f1:bd:c4:7f:
                    59:d3:83:e5:73:1f:bd:d0:d0:9c:28:da:6c:27:0b:
                    ac:21:f4:e3:ab:bb:be:45:43:0e:1c:ae:b0:cd:6e:
                    42:1f:09:37:fb:ee:21:75:89:c3:a5:c6:1b:c1:f6:
                    e1:ec:9b:0d:27:f1:2f:ab:bd:d5:5f:df:89:1c:db:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9E:99:09:CE:35:30:A2:70:AC:90:B3:11:61:53:1E:CE:B9:43:AC
            X509v3 Authority Key Identifier:
                keyid:74:82:D8:11:F2:8F:CA:AE:42:D7:FF:B4:8B:32:48:AF:FC:CD:FB:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/0/7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7482D811F28FCAAE42D7FFB48B3248AFFCCDFB30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/0/3137372e38362e3134332e302f32342d3234203d3e203532363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:1b:76:28:f1:a5:d4:3b:24:8a:01:c4:b8:bb:4e:2b:46:49:
         b5:a7:b4:49:a7:49:d3:ed:6c:ac:81:d8:3c:f2:be:ae:53:18:
         41:48:3f:8c:1d:a7:22:1c:3a:08:17:0c:85:ee:d3:d6:6b:4a:
         65:f3:03:9a:42:13:4a:a8:26:eb:73:2d:93:d9:7f:f2:5e:01:
         44:37:9a:1d:24:82:91:47:7e:0d:5f:37:33:b2:80:e6:62:b8:
         d9:39:76:d8:e9:2e:0d:52:a0:ef:42:f8:9b:4f:ad:17:46:a2:
         89:31:91:59:f2:1d:e6:a0:f8:35:e6:00:d1:a3:5a:76:da:a7:
         f4:d1:79:77:92:77:1c:2e:ae:90:77:e2:3b:14:8a:3b:b4:e2:
         71:24:cd:73:e9:9d:79:23:ee:36:66:25:1f:66:65:16:d7:e2:
         1f:4b:21:dd:68:15:93:c5:8c:fb:e2:59:f9:14:3d:b7:63:76:
         a1:62:cc:e2:d6:2a:19:40:d1:cc:c8:f6:f8:3d:32:3f:96:61:
         ea:0c:75:e0:27:b8:20:ed:77:2f:23:75:c0:39:f2:d0:02:be:
         23:53:fb:d7:1c:af:d4:75:8b:98:c5:42:19:60:50:c2:f9:1b:
         be:3a:40:70:6e:db:f4:c1:29:e7:77:58:d7:c4:24:63:e9:18:
         54:96:5c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org