Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3137362e302f32302d3234203d3e203532353339.roa
File:                     3137392e3130362e3137362e302f32302d3234203d3e203532353339.roa (raw, json)
Hash identifier:          E25pfy2miIAKFDeXkPtPmR7QYYsw9mDhTqbwiFZuRZQ=
Subject key identifier:   F6:1B:AF:35:C0:60:28:03:94:91:EF:AB:A0:57:BE:F4:70:8F:84:00
Certificate issuer:       /CN=DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7
Certificate serial:       635EBBD209780846DC09A3AC8CA90BD5E443BA48
Authority key identifier: DC:7A:AF:B8:09:04:AF:EE:F9:CE:19:A5:09:1B:DF:D6:E0:D1:84:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3137362e302f32302d3234203d3e203532353339.roa
Signing time:             Thu 20 Jul 2023 18:48:00 +0000
ROA not before:           Thu 20 Jul 2023 18:43:00 +0000
ROA not after:            Thu 18 Jul 2024 18:48:00 +0000
asID:                     52539
IP address blocks:        179.106.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5e:bb:d2:09:78:08:46:dc:09:a3:ac:8c:a9:0b:d5:e4:43:ba:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7
        Validity
            Not Before: Jul 20 18:43:00 2023 GMT
            Not After : Jul 18 18:48:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a4:b5:25:54:38:48:ad:97:8b:83:70:8e:f8:
                    7c:2f:08:85:00:bb:41:56:f6:77:9b:bc:94:f1:95:
                    9d:b4:8f:b3:77:40:5c:56:fe:af:b6:15:d3:7c:0f:
                    16:d2:fd:c3:e0:62:5f:1d:96:00:ea:7f:e9:65:1a:
                    0f:4a:3b:c0:ef:3c:2d:87:16:3d:b1:c5:9f:63:69:
                    e9:70:61:dc:9a:4b:b7:71:ba:82:a2:2f:d8:65:e5:
                    e5:a1:05:18:32:02:91:28:ac:b9:d7:9c:09:08:a0:
                    92:ba:09:c5:3d:6c:a3:23:90:32:d5:a5:7b:ff:63:
                    54:57:1d:fa:24:c6:ef:08:cd:dc:2d:fa:7b:20:e2:
                    6b:95:0b:e4:01:2f:8e:1f:74:87:5f:d0:fd:6b:47:
                    a0:32:0e:9a:a9:63:06:b1:fe:37:b7:74:b0:2c:2d:
                    92:f1:94:bd:57:9f:f8:18:28:5b:1a:1a:77:2c:60:
                    62:9e:17:74:db:4e:73:55:cc:71:6c:b6:da:c7:fc:
                    d9:24:15:2f:05:83:f1:1f:0f:a8:8e:c0:e7:69:a1:
                    09:17:37:65:8d:ef:86:44:2d:49:6a:b5:51:2a:fd:
                    e6:5f:84:f2:4d:be:75:a7:35:e2:2f:22:06:b9:89:
                    ab:aa:13:e8:c1:ae:fa:f9:d4:53:f7:b2:87:c0:a7:
                    54:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1B:AF:35:C0:60:28:03:94:91:EF:AB:A0:57:BE:F4:70:8F:84:00
            X509v3 Authority Key Identifier:
                keyid:DC:7A:AF:B8:09:04:AF:EE:F9:CE:19:A5:09:1B:DF:D6:E0:D1:84:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3137362e302f32302d3234203d3e203532353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:98:da:82:66:fd:b4:eb:0f:f6:ee:c1:6d:e4:09:82:dc:
         09:86:e9:ab:57:d3:7e:76:b7:d3:eb:78:67:40:f9:e4:8e:24:
         dc:cc:a7:07:be:4e:4b:e8:a7:51:3a:77:0f:ae:4f:5e:af:8e:
         0c:ca:f3:cd:a7:00:7d:7d:af:a1:b3:83:2d:31:3a:83:e8:b2:
         64:51:55:69:f0:3f:ba:99:04:51:8d:e5:b3:7f:73:07:f9:98:
         4c:90:43:1f:f5:e9:d1:ff:2b:5a:ac:c7:71:87:af:34:8a:b3:
         4b:2e:a0:04:06:63:f8:97:c6:4a:9c:91:74:b3:73:67:1a:19:
         06:7d:fb:d4:12:f8:82:cf:2f:41:3f:03:f1:54:16:e9:f4:a3:
         d7:68:05:d7:de:d9:f9:c8:55:0b:5d:9e:26:03:e8:92:66:cd:
         8f:24:e9:b8:a7:c6:f5:96:18:38:8b:28:c1:ec:25:97:56:04:
         5b:6f:a3:22:3a:3e:66:8e:ea:70:b2:7b:87:4a:f8:be:a1:8e:
         33:c4:1b:2a:52:31:69:9c:27:b0:90:d2:8f:ec:1d:e0:7a:59:
         69:dc:eb:27:55:b5:f9:e7:12:c1:e9:12:11:b8:57:06:ba:0b:
         c7:d1:ea:9b:a0:3a:0a:49:8f:72:ee:9f:b6:ca:9e:18:99:43:
         cc:63:a4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:10 2024 by rpki-client on console-ams.rpki-client.org