Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/3137372e3130352e38302e302f32302d3234203d3e203532383535.roa
File:                     3137372e3130352e38302e302f32302d3234203d3e203532383535.roa (raw, json)
Hash identifier:          aBiyCp9oATyZeDxXZAonaY1yTOECPGsK8wICy2sSy9c=
Subject key identifier:   28:75:65:B5:18:DD:27:B4:07:F0:66:46:75:2B:52:DC:46:91:1A:F4
Certificate issuer:       /CN=A7428E1F6B8E9E278BD46F672EA9B97114211524
Certificate serial:       0987FD0E487247F6B71F81359187E035BBEC37BF
Authority key identifier: A7:42:8E:1F:6B:8E:9E:27:8B:D4:6F:67:2E:A9:B9:71:14:21:15:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7428E1F6B8E9E278BD46F672EA9B97114211524.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/3137372e3130352e38302e302f32302d3234203d3e203532383535.roa
Signing time:             Mon 18 Dec 2023 14:21:19 +0000
ROA not before:           Mon 18 Dec 2023 14:16:19 +0000
ROA not after:            Mon 16 Dec 2024 14:21:19 +0000
asID:                     52855
IP address blocks:        177.105.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:87:fd:0e:48:72:47:f6:b7:1f:81:35:91:87:e0:35:bb:ec:37:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7428E1F6B8E9E278BD46F672EA9B97114211524
        Validity
            Not Before: Dec 18 14:16:19 2023 GMT
            Not After : Dec 16 14:21:19 2024 GMT
        Subject: CN=287565B518DD27B407F06646752B52DC46911AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:18:33:29:d4:ec:83:07:20:71:f1:78:5b:
                    41:23:b0:ad:c1:07:3f:48:2e:1f:18:d3:69:1a:ac:
                    ce:c8:fd:ca:55:1e:8f:52:09:c2:f9:80:f4:e9:98:
                    45:dd:aa:08:50:90:d2:be:c0:76:53:9b:31:bc:51:
                    40:f8:65:9f:f8:e7:fa:76:e3:e0:c9:3b:3c:41:c2:
                    8a:c8:e1:7e:87:5d:8d:3a:0a:f7:c4:17:e4:81:7f:
                    a2:73:d0:e1:b7:96:d6:81:bb:c4:3e:99:12:d0:5a:
                    bc:13:e4:a6:cb:f1:77:00:37:d0:fb:cf:f5:81:9c:
                    c0:a3:55:78:bb:6c:d8:76:6d:86:d4:e0:64:b8:0e:
                    b3:bd:5c:48:84:2e:50:b4:e2:65:31:f6:ea:44:fc:
                    6d:26:38:75:87:e5:33:06:03:d1:5e:b0:53:a8:d0:
                    ca:35:b0:be:81:2d:74:3a:2d:04:85:c0:fc:43:03:
                    5c:0b:6b:a0:fb:94:54:99:95:ee:6c:85:7a:61:95:
                    95:0c:39:f6:49:b9:e9:ae:65:c3:ec:e7:83:3f:ac:
                    4a:59:5d:7f:ae:30:29:07:34:6d:38:13:3b:cd:89:
                    fe:ee:7b:59:56:34:c6:44:f1:38:79:14:d0:fa:8c:
                    5a:b0:b5:8b:d9:92:33:ac:b3:70:e6:29:a0:fa:e2:
                    de:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:75:65:B5:18:DD:27:B4:07:F0:66:46:75:2B:52:DC:46:91:1A:F4
            X509v3 Authority Key Identifier:
                keyid:A7:42:8E:1F:6B:8E:9E:27:8B:D4:6F:67:2E:A9:B9:71:14:21:15:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/A7428E1F6B8E9E278BD46F672EA9B97114211524.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7428E1F6B8E9E278BD46F672EA9B97114211524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/3137372e3130352e38302e302f32302d3234203d3e203532383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:6e:a1:d1:8e:54:fb:3f:5c:1e:dc:7b:28:8c:2b:aa:08:26:
         19:d0:cb:80:b2:6f:3c:3e:97:fc:61:57:c0:67:47:37:c9:2e:
         72:36:55:28:01:81:e8:db:c1:2a:62:57:1c:e9:2a:1d:29:04:
         3a:e0:8b:f0:d8:ea:0c:d3:f2:2b:da:00:d0:d8:9a:5b:ca:cf:
         16:6f:b1:c2:af:db:b5:83:ff:2b:0b:8a:48:12:88:8f:8b:65:
         cf:23:43:46:0a:6d:3f:1c:bf:f3:94:c5:80:35:6b:83:90:fa:
         bf:a7:a1:7b:cf:8a:cc:9c:38:bd:16:07:cc:49:e2:b4:20:c4:
         fa:d8:ed:8c:2f:1a:b1:95:f2:f4:2b:eb:65:ba:21:16:61:42:
         d4:6b:6f:8f:93:a5:39:e3:0a:ac:e3:42:cb:0d:9f:09:49:10:
         15:1a:98:c6:14:a3:65:2b:a6:66:6c:52:f5:84:d7:52:cf:4a:
         32:c9:23:78:f3:b0:34:37:86:8a:5d:6e:6c:7b:56:27:76:29:
         a7:51:e7:24:de:0c:a5:f1:15:44:80:36:86:7c:cd:bc:bc:58:
         29:d5:c2:4b:3d:2a:80:3e:bd:30:28:50:09:75:6a:4b:6f:c5:
         d1:e6:b4:ff:1e:3d:0a:d3:b1:16:11:41:d0:31:44:16:32:1c:
         56:63:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org