Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234362e302f32332d3233203d3e20323632383636.roa
File:                     3137372e31322e3234362e302f32332d3233203d3e20323632383636.roa (raw, json)
Hash identifier:          RBSB3GeMdGOElFUmbDOnuKQm9O0RKtZb0cEJqxJx8IY=
Subject key identifier:   4B:CC:44:B5:67:5A:F4:A5:6A:64:52:A0:78:9A:DD:67:F8:B6:C0:F6
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       04E4E68FE0FAD2FB7CE99C1DBD373395A333712E
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234362e302f32332d3233203d3e20323632383636.roa
Signing time:             Thu 12 Oct 2023 15:34:26 +0000
ROA not before:           Thu 12 Oct 2023 15:29:26 +0000
ROA not after:            Thu 10 Oct 2024 15:34:26 +0000
asID:                     262866
IP address blocks:        177.12.246.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e4:e6:8f:e0:fa:d2:fb:7c:e9:9c:1d:bd:37:33:95:a3:33:71:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Oct 12 15:29:26 2023 GMT
            Not After : Oct 10 15:34:26 2024 GMT
        Subject: CN=4BCC44B5675AF4A56A6452A0789ADD67F8B6C0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:60:88:04:98:23:aa:ed:71:67:7e:a6:3b:
                    45:a0:df:f9:c0:31:d6:2c:8d:7e:29:f1:44:89:9b:
                    d2:90:76:71:08:f2:01:20:30:1d:13:c5:cb:10:c1:
                    50:37:7d:de:9e:22:6e:17:ba:72:ef:5a:e0:ce:51:
                    e1:a2:38:4f:0e:dc:32:dd:0a:d4:8f:20:49:b6:e2:
                    46:4d:58:69:be:a2:35:d3:50:1a:37:d1:58:50:74:
                    cc:ad:94:94:9c:ef:5a:ae:3a:e5:f3:7c:a7:89:94:
                    61:14:90:71:c4:21:50:08:bc:72:2d:67:36:94:29:
                    67:fe:20:6d:71:91:54:31:3b:88:fa:70:bb:25:91:
                    cd:0b:f3:6f:c5:d5:f4:eb:cc:5d:96:73:d7:75:96:
                    16:f7:03:ec:4a:10:5b:cd:a8:65:97:cf:3e:41:4a:
                    9d:4c:59:e9:6f:e8:f3:c8:dd:0d:f9:e3:d8:ad:3a:
                    92:16:a4:27:88:86:c2:61:33:56:c8:99:a0:bf:05:
                    07:29:81:56:ec:f5:81:48:28:9e:72:64:31:25:85:
                    67:63:7c:6f:4c:ea:df:e4:d2:cd:66:32:5a:64:2f:
                    93:17:af:5c:4c:a4:82:12:eb:f8:ce:c0:1d:41:36:
                    60:74:22:8a:3b:5c:e2:42:94:81:58:01:5a:84:27:
                    9a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CC:44:B5:67:5A:F4:A5:6A:64:52:A0:78:9A:DD:67:F8:B6:C0:F6
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234362e302f32332d3233203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:a0:79:a7:80:ef:ae:b3:8e:35:8c:02:70:76:3d:8a:dc:3c:
         82:59:9a:b4:42:03:61:8d:2b:14:02:e0:44:43:1f:8b:71:c3:
         f9:57:fc:aa:ea:76:5c:2e:70:00:cc:cc:bf:ce:14:11:5b:90:
         0f:3a:d8:05:fc:6b:ff:09:63:ac:6a:88:e5:1c:32:d0:a4:6d:
         06:e7:cb:30:89:92:65:d4:79:d3:74:16:13:27:a3:0e:e7:14:
         8b:a5:9b:0b:a6:c9:3a:e4:9d:f6:a0:7a:fa:fb:5f:62:1b:dc:
         fd:31:d2:1c:11:84:1d:3f:48:f8:b0:1e:44:84:7f:4d:99:11:
         16:8a:25:bd:ea:13:ad:ad:a3:94:45:6e:e1:c8:96:7e:dc:d0:
         fb:24:1e:2c:ef:81:69:70:55:b3:61:02:ec:47:59:b7:ae:28:
         be:8b:44:25:3c:87:58:b7:3b:1e:b4:57:54:28:02:8a:c5:c7:
         51:c6:bd:f0:fb:57:58:37:bf:38:ae:96:94:a6:a0:45:3b:ec:
         af:ae:2f:49:14:85:54:2d:7a:7a:a1:5e:7a:7f:ac:5e:24:57:
         a0:17:47:db:53:a9:25:68:ae:87:f9:34:7b:2f:b8:a1:82:4c:
         a0:d2:90:48:53:26:c0:58:a3:f2:33:88:a7:d4:44:72:eb:35:
         23:52:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org