Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32332e36342e302f32312d3231203d3e20323632383931.roa
File:                     3137372e32332e36342e302f32312d3231203d3e20323632383931.roa (raw, json)
Hash identifier:          0aosw7iKcH9H85PdfTeQfG7szcCH+DFWE2uCDi4J9k4=
Subject key identifier:   6F:E7:E6:B2:B6:B5:8B:1F:AE:F4:B7:A0:47:DD:98:C5:9C:F2:59:CB
Certificate issuer:       /CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
Certificate serial:       62BC88947D628D767B7E3D9742E7277348B77391
Authority key identifier: CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32332e36342e302f32312d3231203d3e20323632383931.roa
Signing time:             Thu 20 Jul 2023 22:00:00 +0000
ROA not before:           Thu 20 Jul 2023 21:55:00 +0000
ROA not after:            Thu 18 Jul 2024 22:00:00 +0000
asID:                     262891
IP address blocks:        177.23.64.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bc:88:94:7d:62:8d:76:7b:7e:3d:97:42:e7:27:73:48:b7:73:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
        Validity
            Not Before: Jul 20 21:55:00 2023 GMT
            Not After : Jul 18 22:00:00 2024 GMT
        Subject: CN=6FE7E6B2B6B58B1FAEF4B7A047DD98C59CF259CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:1b:de:81:05:db:76:be:0f:ec:f6:3a:6f:
                    21:8d:fd:3c:40:01:41:b7:5e:c6:fa:82:64:83:5f:
                    15:62:07:0c:cb:17:f9:de:d3:0a:9a:7e:1c:cb:fd:
                    fc:a0:17:ba:eb:b3:1d:d9:04:7c:e0:e1:34:f3:8e:
                    b5:7b:69:88:58:f3:50:f9:ac:0e:28:d4:4c:bc:90:
                    ed:b9:a1:00:9a:24:1a:4e:cf:79:52:25:04:97:2f:
                    05:d5:47:79:e6:6d:bc:c9:65:b1:e7:2a:ec:6c:d0:
                    db:e1:9f:2b:b7:b9:22:22:fb:6c:41:8a:72:6b:a8:
                    56:f7:55:5f:c6:84:97:92:d3:2b:03:da:de:da:30:
                    5b:c0:be:3f:fe:b1:5f:9a:d7:52:b3:56:0e:09:c3:
                    a2:20:e8:1d:cc:1c:d2:a7:6f:79:63:c3:9c:51:44:
                    5f:25:77:85:a8:3f:f4:c1:22:cb:77:f1:ae:ac:37:
                    ac:a5:b0:ef:e4:0b:7d:9a:a5:43:a7:28:07:e6:11:
                    72:4e:b4:ac:f2:72:21:80:8e:33:7f:ec:06:91:ae:
                    91:0c:c7:a4:2d:be:82:74:02:8a:fb:f1:c4:e7:19:
                    73:8d:b0:8a:20:48:ff:d9:54:46:00:4a:bf:b4:7d:
                    49:e7:be:46:d5:0d:cb:3a:f2:a9:1d:b1:29:75:39:
                    57:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E7:E6:B2:B6:B5:8B:1F:AE:F4:B7:A0:47:DD:98:C5:9C:F2:59:CB
            X509v3 Authority Key Identifier:
                keyid:CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32332e36342e302f32312d3231203d3e20323632383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:52:c1:22:e4:f7:f2:12:10:6f:b8:cd:59:59:50:c9:4a:d2:
         f9:52:92:65:f3:a7:bf:8c:f6:91:29:86:62:47:0a:d1:55:83:
         a9:52:96:d5:8e:23:5c:6b:20:ea:c7:ed:ac:27:57:5d:05:13:
         02:34:e2:91:2b:c7:b7:0a:03:6c:30:fe:b5:d5:11:eb:98:71:
         42:5e:02:b1:21:81:d3:12:bc:7a:08:7c:7e:6e:16:40:e0:7e:
         27:7b:9a:99:ed:32:37:ed:26:07:7c:2c:cd:fe:16:95:eb:22:
         3b:25:f4:8b:51:2e:9e:98:b9:1c:d3:e8:53:1f:44:23:b0:7f:
         63:d1:fe:e0:f1:cc:cd:71:65:64:65:d5:a0:b7:89:5b:df:6e:
         65:d5:a9:90:65:d2:3b:99:7d:19:b8:e9:b6:49:d9:c0:36:e7:
         ac:1e:46:7c:ef:71:03:99:e3:3f:11:8f:f0:df:5c:0c:de:ee:
         51:64:c7:4f:a5:64:b9:1f:dc:f9:c4:fe:13:dc:50:4d:51:4d:
         39:a9:c2:35:c0:f4:17:34:cf:d0:6c:12:a0:79:84:f3:0a:2f:
         05:d5:bc:0c:47:e0:37:c3:a2:49:48:76:9f:3d:2d:41:b2:2b:
         2c:04:6c:f7:d6:d3:a0:47:e7:a8:5a:84:9a:e7:97:8c:e2:83:
         1f:13:49:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org