Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131332e302f32342d3234203d3e203532353531.roa
File:                     3137372e3133302e3131332e302f32342d3234203d3e203532353531.roa (raw, json)
Hash identifier:          Yp8W6B3fF7pqZiNOOoS4Bb6hypgm+vsRj5r/uGhndRY=
Subject key identifier:   67:93:0D:C2:88:62:06:BA:88:7C:6F:10:DD:21:0A:16:A6:29:AC:F3
Certificate issuer:       /CN=8D69381991FAB54B082E60AF03ED726BB215241F
Certificate serial:       6F610EA0ED14A399E65B23E3FEF7F23F3E9D2E04
Authority key identifier: 8D:69:38:19:91:FA:B5:4B:08:2E:60:AF:03:ED:72:6B:B2:15:24:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D69381991FAB54B082E60AF03ED726BB215241F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131332e302f32342d3234203d3e203532353531.roa
Signing time:             Wed 03 May 2023 19:15:23 +0000
ROA not before:           Wed 03 May 2023 19:10:23 +0000
ROA not after:            Wed 01 May 2024 19:15:23 +0000
asID:                     52551
IP address blocks:        177.130.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:61:0e:a0:ed:14:a3:99:e6:5b:23:e3:fe:f7:f2:3f:3e:9d:2e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D69381991FAB54B082E60AF03ED726BB215241F
        Validity
            Not Before: May  3 19:10:23 2023 GMT
            Not After : May  1 19:15:23 2024 GMT
        Subject: CN=67930DC2886206BA887C6F10DD210A16A629ACF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:16:2e:e0:82:2d:b3:3e:a4:58:93:fb:6e:
                    e9:b6:90:4c:fa:90:1a:57:0c:39:c5:20:02:6b:48:
                    be:da:31:5c:27:ba:12:38:b0:cb:f2:aa:bc:55:c5:
                    9b:65:3d:2b:91:fb:fd:6c:a2:05:e8:7d:c1:49:48:
                    e5:95:5b:31:b6:96:d1:46:3f:da:14:df:50:90:23:
                    b0:93:78:dc:f3:af:d8:75:be:2d:10:5d:5c:1c:13:
                    00:6f:0e:52:67:8a:46:8e:48:af:df:ff:5e:e1:ab:
                    e9:f9:17:03:b1:c1:5f:36:04:8f:c4:37:c9:13:a3:
                    85:c6:ea:08:64:a4:15:50:4c:13:3c:da:46:f6:7a:
                    63:59:cb:ee:c7:9c:4a:7f:b0:82:90:04:87:f4:3f:
                    09:c7:06:db:f8:7c:66:6d:fa:c7:3b:6d:8f:e9:d6:
                    30:dd:59:7b:fa:db:22:9c:b3:0a:c7:d9:dd:fd:8a:
                    32:9e:af:4f:ae:3d:6a:bb:c8:af:3f:1c:2f:ae:d0:
                    b4:2c:2a:77:ca:01:39:b1:98:2b:7e:8f:57:48:3c:
                    12:f8:f3:a0:e5:70:66:4f:1c:0b:70:a6:03:12:2e:
                    ce:c2:d1:c7:52:58:0d:a3:39:b4:d3:6b:90:4d:12:
                    d6:46:5e:14:4e:e3:c2:70:06:b6:d9:20:4b:c0:7e:
                    bc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:93:0D:C2:88:62:06:BA:88:7C:6F:10:DD:21:0A:16:A6:29:AC:F3
            X509v3 Authority Key Identifier:
                keyid:8D:69:38:19:91:FA:B5:4B:08:2E:60:AF:03:ED:72:6B:B2:15:24:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/8D69381991FAB54B082E60AF03ED726BB215241F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D69381991FAB54B082E60AF03ED726BB215241F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131332e302f32342d3234203d3e203532353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:bf:cb:c1:eb:28:94:ea:27:87:0f:3e:67:ca:3b:b6:ef:11:
         20:de:ed:2f:2b:8e:1c:94:03:3b:31:db:64:56:ae:fa:88:d3:
         45:a3:73:e8:d1:21:d8:8e:52:f4:82:4f:b0:24:fe:34:f9:84:
         76:4d:bb:05:34:02:8b:e3:5c:4c:f4:13:48:9c:99:2b:1c:33:
         d4:47:0f:6b:56:44:2a:ca:c6:2c:24:a5:ab:b4:d6:46:d0:89:
         89:49:73:d8:b9:ca:d4:33:8f:82:82:ee:78:a5:8a:c6:95:53:
         71:89:3c:c5:f3:ee:7e:d0:c1:b2:40:88:97:ca:4e:9d:79:59:
         a8:2e:2d:3f:17:84:4b:5c:7e:65:89:a2:71:ff:2d:39:32:60:
         5e:77:5f:7f:3c:e9:fc:27:33:10:40:48:14:94:f0:30:f2:ab:
         28:f2:72:44:1f:9c:81:16:e0:db:93:cd:30:c4:97:60:3c:05:
         65:81:bb:f6:f7:2d:7c:3e:db:11:eb:ac:ae:48:3a:0a:48:fa:
         2f:aa:6d:94:e0:74:dc:0f:23:fe:7c:ee:ed:36:2c:fd:32:e3:
         21:b5:a5:4d:72:38:a5:fd:d7:a7:93:bd:41:9f:be:52:61:d6:
         0d:66:de:44:b2:7d:e3:89:c8:24:08:0c:7a:31:15:9e:f9:24:
         31:b4:85:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org