Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137372e3133372e3234302e302f32312d3234203d3e203238313731.roa
File:                     3137372e3133372e3234302e302f32312d3234203d3e203238313731.roa (raw, json)
Hash identifier:          BomGFa8nqM2ABXRQo8QEZHkZb4Ewa3qbAO4QFQySfzo=
Subject key identifier:   D8:0A:C8:31:F4:8C:78:9E:82:A7:79:4B:B3:6A:E9:67:3D:D1:6D:B2
Certificate issuer:       /CN=685127D62A24E86E271BBBBFE4E01D67A0F2C1DD
Certificate serial:       261E6D575C706C6F3B661C70455938896CD2FC87
Authority key identifier: 68:51:27:D6:2A:24:E8:6E:27:1B:BB:BF:E4:E0:1D:67:A0:F2:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137372e3133372e3234302e302f32312d3234203d3e203238313731.roa
Signing time:             Tue 02 Apr 2024 21:00:01 +0000
ROA not before:           Tue 02 Apr 2024 20:55:01 +0000
ROA not after:            Wed 02 Apr 2025 21:00:01 +0000
asID:                     28171
IP address blocks:        177.137.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1e:6d:57:5c:70:6c:6f:3b:66:1c:70:45:59:38:89:6c:d2:fc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=685127D62A24E86E271BBBBFE4E01D67A0F2C1DD
        Validity
            Not Before: Apr  2 20:55:01 2024 GMT
            Not After : Apr  2 21:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:6c:fd:eb:6d:0e:37:ba:b3:56:f1:0b:a5:
                    e8:d9:0e:de:a7:d6:41:ba:ad:45:64:bc:4f:64:24:
                    b6:ad:9b:0d:76:a0:a7:6c:02:fb:e4:8f:78:01:12:
                    b2:b7:93:3a:b5:6f:9e:1d:0f:02:12:e3:63:35:84:
                    ae:cd:3d:4e:4f:ed:75:41:1d:57:95:08:bc:d6:0c:
                    48:0e:1a:ec:35:6e:c1:a6:8c:eb:86:7e:c4:52:09:
                    ff:0d:3f:bc:4c:4e:3a:13:fd:53:c9:bf:01:b0:9e:
                    39:85:40:42:c8:dc:ed:b0:59:5e:e1:84:35:eb:e0:
                    db:70:e4:36:9f:49:29:fa:34:b1:3b:11:74:1b:1d:
                    0a:43:73:39:ab:68:75:89:dd:1f:32:d1:ed:9c:d0:
                    26:0c:75:7b:68:0b:97:f4:aa:dc:69:e3:ad:b2:23:
                    fc:bc:45:a1:bb:70:35:b0:24:45:07:5a:54:80:c2:
                    4e:09:45:f2:e0:d9:53:38:03:57:25:e8:12:77:f3:
                    b7:44:24:53:98:99:4a:24:74:36:8a:09:4a:fb:df:
                    0d:f6:ed:84:45:62:87:c7:3e:1d:42:59:84:4f:28:
                    cb:cc:db:5f:62:95:76:e9:5d:fb:bb:f5:dd:f6:bb:
                    68:66:d3:49:eb:a5:2b:19:39:58:52:42:1e:7d:d4:
                    25:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0A:C8:31:F4:8C:78:9E:82:A7:79:4B:B3:6A:E9:67:3D:D1:6D:B2
            X509v3 Authority Key Identifier:
                keyid:68:51:27:D6:2A:24:E8:6E:27:1B:BB:BF:E4:E0:1D:67:A0:F2:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137372e3133372e3234302e302f32312d3234203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:70:67:ce:0c:72:be:03:3f:9b:74:4c:b6:5c:84:f7:d4:94:
         8d:b7:6e:72:fe:64:44:3c:3e:9a:af:7a:b9:5f:13:d7:94:c3:
         09:0c:d8:d3:d8:94:e2:92:6b:84:b5:c8:8b:e5:8f:3a:11:a4:
         7d:47:f2:ce:74:09:03:5b:d6:ba:67:f9:47:1a:66:a9:c6:46:
         0a:68:ea:c7:40:50:8b:49:fa:34:2f:94:ca:7c:95:61:ef:70:
         11:a6:29:96:c0:1d:d5:4e:5f:85:2a:46:50:da:03:05:8d:39:
         0e:9e:75:17:d7:ab:59:7d:20:8a:6a:a5:bd:bd:ae:5c:65:8e:
         41:d0:cf:02:af:1c:b9:12:35:c6:c1:63:c1:75:0e:bf:60:02:
         43:30:30:42:7e:4b:4b:56:ba:fb:0c:9c:89:6f:f7:79:fc:f1:
         f2:98:de:df:9e:f9:12:9d:a7:40:be:d9:aa:e4:05:ba:8b:3c:
         8a:bf:14:5a:58:a0:81:5c:19:b4:77:a5:c4:37:f2:6c:80:30:
         30:c6:94:e2:a2:3d:73:bb:64:7e:0e:62:c1:5a:c9:56:dd:39:
         bb:fc:ef:4e:f8:33:26:fe:ee:5f:73:8c:1c:6d:cc:a6:bc:dd:
         c9:ec:fc:a8:41:4b:ac:28:4a:46:47:2d:b0:2c:75:1e:88:ca:
         35:9b:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org