Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131382e302f32342d3234203d3e203532353531.roa
File:                     3137372e3133302e3131382e302f32342d3234203d3e203532353531.roa (raw, json)
Hash identifier:          e4saaH0hBs9y3kiKIqFSyu9Nelv/CBCuUGLMoLuVQT4=
Subject key identifier:   16:B3:B0:D9:8E:B8:AB:A6:6D:33:52:E1:A4:99:3E:A4:FE:FB:8E:09
Certificate issuer:       /CN=8D69381991FAB54B082E60AF03ED726BB215241F
Certificate serial:       7F6EAE3139602C9B8043B17AA69E805B85D47DDF
Authority key identifier: 8D:69:38:19:91:FA:B5:4B:08:2E:60:AF:03:ED:72:6B:B2:15:24:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D69381991FAB54B082E60AF03ED726BB215241F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131382e302f32342d3234203d3e203532353531.roa
Signing time:             Wed 03 May 2023 19:16:54 +0000
ROA not before:           Wed 03 May 2023 19:11:54 +0000
ROA not after:            Wed 01 May 2024 19:16:54 +0000
asID:                     52551
IP address blocks:        177.130.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6e:ae:31:39:60:2c:9b:80:43:b1:7a:a6:9e:80:5b:85:d4:7d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D69381991FAB54B082E60AF03ED726BB215241F
        Validity
            Not Before: May  3 19:11:54 2023 GMT
            Not After : May  1 19:16:54 2024 GMT
        Subject: CN=16B3B0D98EB8ABA66D3352E1A4993EA4FEFB8E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:6a:5d:c7:37:93:2d:87:eb:75:66:7e:11:
                    92:39:db:39:8f:41:f1:1e:0f:20:e9:75:b9:b7:0a:
                    4f:50:b7:93:40:ce:fc:57:04:d2:6d:ac:3f:57:cc:
                    13:9a:3a:83:45:74:0c:b4:51:b7:ae:a2:d1:5f:73:
                    7e:97:eb:f3:88:97:9a:18:b4:5f:d9:95:46:3e:00:
                    d6:6f:9f:69:84:24:79:9f:1a:e6:42:5f:65:1a:9f:
                    f9:15:4d:b3:be:da:c6:db:fe:ff:7d:a5:be:ee:81:
                    10:77:29:09:bd:7f:0b:0d:62:7e:4a:87:87:b1:74:
                    07:e5:22:fd:b0:6b:fc:64:12:d4:80:be:4b:ff:d0:
                    e9:84:0c:02:78:ca:cb:4c:0e:f0:90:b2:70:05:5d:
                    24:26:fc:10:f1:21:2f:60:9d:f6:81:1e:c1:9c:94:
                    d8:24:e5:41:b1:d7:53:02:eb:e1:b2:b7:99:b6:b4:
                    3b:7f:81:80:0a:80:65:ea:fb:3c:08:f0:a5:02:a9:
                    90:ad:f2:44:2b:06:ae:3d:82:49:64:57:88:9b:14:
                    06:e7:e4:1e:b1:fa:fa:b1:ef:a1:4c:aa:e5:55:fa:
                    78:d8:27:36:9a:ee:6e:a3:f8:c4:31:f6:59:1c:f6:
                    8e:d4:b9:60:7c:6d:a6:5c:70:a5:ae:30:07:22:e0:
                    f6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B3:B0:D9:8E:B8:AB:A6:6D:33:52:E1:A4:99:3E:A4:FE:FB:8E:09
            X509v3 Authority Key Identifier:
                keyid:8D:69:38:19:91:FA:B5:4B:08:2E:60:AF:03:ED:72:6B:B2:15:24:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/8D69381991FAB54B082E60AF03ED726BB215241F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D69381991FAB54B082E60AF03ED726BB215241F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131382e302f32342d3234203d3e203532353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:22:5b:da:f1:67:4c:8f:8c:3d:fd:61:85:5c:04:b9:f7:2e:
         57:3d:a8:56:12:4a:19:7d:6b:00:3b:43:83:f2:b2:35:06:3c:
         f1:58:e3:88:54:16:09:10:d4:10:87:82:de:8b:f7:12:c5:40:
         66:30:73:b2:d9:a4:6d:a4:15:cb:c7:6b:e2:f8:54:07:ac:87:
         89:89:67:a8:f7:02:9b:de:3f:a2:31:6a:47:02:77:4b:da:d2:
         e3:92:28:97:26:ad:17:61:d3:33:eb:3d:54:a2:e8:79:e2:3f:
         c4:8a:8e:1f:dc:55:6d:11:51:74:64:89:c4:bf:78:72:31:cd:
         cc:bb:da:7e:44:f2:35:63:f4:02:81:22:94:b9:a9:1c:45:8c:
         5e:fd:e3:b2:ba:03:21:c3:fe:3a:ee:a7:6b:9f:a8:1b:f6:91:
         ed:15:c7:9d:ff:f5:d0:ab:66:3d:e3:1d:83:8e:ce:d5:54:5a:
         2d:53:13:75:2b:3b:8b:e2:29:67:4b:fe:00:67:36:80:77:aa:
         77:f3:cc:70:44:df:2a:fe:a8:87:1d:e5:43:f4:d7:d5:0c:73:
         34:f1:c5:37:54:c1:78:b9:2d:e1:9b:36:16:85:43:97:96:ec:
         0c:6c:9f:4f:b8:22:87:64:68:ef:91:f5:7b:73:d8:3e:8c:0e:
         66:fb:41:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org