Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3235302e302f32332d3233203d3e20323632383636.roa
File:                     3137372e31322e3235302e302f32332d3233203d3e20323632383636.roa (raw, json)
Hash identifier:          dWV54UnrTI18CR3x67UuYSbobJ5QGDYMRSM4mIVbzn8=
Subject key identifier:   2F:4B:60:9B:21:D8:1B:BA:09:5C:15:C8:B4:30:20:0F:EB:0D:DD:3C
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       4272EBE43C68D946D5D3F342D31D487AF9F1DDD5
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3235302e302f32332d3233203d3e20323632383636.roa
Signing time:             Fri 12 Jan 2024 18:11:19 +0000
ROA not before:           Fri 12 Jan 2024 18:06:19 +0000
ROA not after:            Fri 10 Jan 2025 18:11:19 +0000
asID:                     262866
IP address blocks:        177.12.250.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:72:eb:e4:3c:68:d9:46:d5:d3:f3:42:d3:1d:48:7a:f9:f1:dd:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Jan 12 18:06:19 2024 GMT
            Not After : Jan 10 18:11:19 2025 GMT
        Subject: CN=2F4B609B21D81BBA095C15C8B430200FEB0DDD3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d3:27:80:52:5a:ef:c6:2a:bf:38:b1:76:9a:
                    f3:68:60:1f:d4:38:36:4f:ab:4c:a6:66:bf:19:10:
                    32:49:b7:42:40:36:81:ce:59:56:7c:7e:09:f9:41:
                    7e:e1:db:bd:aa:73:cb:8c:5f:7b:0d:50:70:86:60:
                    7b:68:86:bf:bf:23:40:fb:3c:c1:3a:26:ac:16:76:
                    bd:a6:98:bc:29:3b:4e:b2:20:d2:86:f6:fc:39:6b:
                    21:49:60:00:51:4f:5f:01:15:bc:83:ef:64:cd:ac:
                    92:d5:d9:47:7e:31:7b:7a:00:75:51:57:d2:84:25:
                    01:cf:8f:9c:4a:2b:23:9c:50:1a:00:43:f8:8b:a0:
                    93:ae:02:70:77:65:cf:31:3c:20:11:bb:7f:b4:e7:
                    9d:b5:2d:a5:f5:6e:9f:32:c2:e5:22:09:8f:ae:bc:
                    c4:2b:02:af:5d:f6:5f:ed:ae:62:74:81:dd:5c:4c:
                    ef:17:1d:65:ec:8d:0b:c1:86:d7:b5:be:bd:14:cf:
                    3b:36:45:4d:23:f0:e2:b1:5c:62:6f:97:22:14:cf:
                    9c:c6:c4:dd:38:2d:65:b2:36:14:54:e2:c7:31:e3:
                    f8:13:f0:12:3d:25:f4:70:02:30:c8:29:c7:94:a8:
                    4f:ed:77:28:a8:8f:47:90:7e:74:4a:08:e9:0f:0d:
                    dd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4B:60:9B:21:D8:1B:BA:09:5C:15:C8:B4:30:20:0F:EB:0D:DD:3C
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3235302e302f32332d3233203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:0b:09:06:80:86:28:3f:ac:3f:e8:ce:17:cc:68:1e:2a:b1:
         c8:86:a2:b6:ae:15:ad:23:94:4f:a3:a4:5d:c6:43:4f:a0:d1:
         5c:74:09:e8:8c:05:38:09:fe:2a:51:72:1b:9f:0a:ce:fb:73:
         cc:9b:57:2a:cd:89:5c:53:77:6b:23:0b:ec:e5:12:5d:a3:7a:
         84:98:cf:d4:ed:cb:ea:c7:8f:be:c5:df:7b:5d:25:09:3e:05:
         d8:03:db:ab:12:f2:57:29:b4:0f:76:e5:b2:94:e1:ed:fa:49:
         14:a6:be:13:10:0e:52:0b:22:62:4b:93:9a:c4:bd:52:bb:25:
         b6:60:7a:8d:69:7e:21:03:e5:0f:d7:2d:9f:7c:56:90:d3:f4:
         54:20:65:dd:a3:fb:ae:4c:ed:49:b1:0c:2d:08:0b:d4:d1:13:
         19:59:45:59:a8:4c:ed:ac:56:bf:c6:54:f8:7e:fb:b5:29:b1:
         7f:fe:1d:c9:6f:d2:11:a2:a9:2a:f3:4c:0f:49:c0:9d:b3:be:
         b1:7c:77:58:33:72:1f:54:b2:85:35:e2:56:77:00:e4:60:dd:
         db:86:30:92:60:02:77:fe:2f:e3:db:e1:e3:65:a5:53:67:35:
         6b:22:bc:e9:6c:24:cd:0a:60:2e:c6:54:c6:5c:c4:78:6b:10:
         02:b7:7e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org