Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/3137372e3133302e3131322e302f32302d3234203d3e203532353531.roa
File:                     3137372e3133302e3131322e302f32302d3234203d3e203532353531.roa (raw, json)
Hash identifier:          XUM5D2oENXtQrEz47nvd1JKdBnNBjlTHR0UYKB0yJyc=
Subject key identifier:   FF:9F:A3:A1:E0:15:2F:36:D9:95:63:BF:8E:DB:36:CC:63:DE:BA:7D
Certificate issuer:       /CN=2EDDA86030532DE49CB7043239B46E667884503B
Certificate serial:       6B0270FF17128A98689C88CDA9224C1CB6A8A2
Authority key identifier: 2E:DD:A8:60:30:53:2D:E4:9C:B7:04:32:39:B4:6E:66:78:84:50:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EDDA86030532DE49CB7043239B46E667884503B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/3137372e3133302e3131322e302f32302d3234203d3e203532353531.roa
Signing time:             Thu 31 Aug 2023 20:44:31 +0000
ROA not before:           Thu 31 Aug 2023 20:39:31 +0000
ROA not after:            Thu 29 Aug 2024 20:44:31 +0000
asID:                     52551
IP address blocks:        177.130.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:02:70:ff:17:12:8a:98:68:9c:88:cd:a9:22:4c:1c:b6:a8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EDDA86030532DE49CB7043239B46E667884503B
        Validity
            Not Before: Aug 31 20:39:31 2023 GMT
            Not After : Aug 29 20:44:31 2024 GMT
        Subject: CN=FF9FA3A1E0152F36D99563BF8EDB36CC63DEBA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:98:cc:3b:72:09:81:61:5f:02:cc:15:62:
                    87:d8:36:08:8d:f4:3b:ec:40:66:cc:69:09:b1:a2:
                    88:51:f9:f4:33:ef:68:c5:d6:f2:fb:a7:df:bf:50:
                    bc:0a:78:60:79:99:f2:74:44:43:0f:aa:68:6d:61:
                    b1:0a:75:9d:48:a5:88:78:7f:80:58:01:a3:e8:6f:
                    7b:11:88:ea:70:ce:03:5f:cd:d2:de:27:c0:61:3f:
                    1d:5e:2e:1e:2d:73:b7:9b:1b:fa:34:db:28:78:59:
                    ac:27:b3:8e:e7:95:fc:73:45:d7:c3:b6:a2:15:fd:
                    d2:c8:39:61:bf:ff:3c:8d:f5:a7:88:c4:a4:4c:f1:
                    a9:7a:73:01:bd:1a:41:c2:58:82:8f:0c:35:df:77:
                    ce:cc:88:04:c3:96:d0:52:62:7e:37:54:8f:af:0f:
                    f6:4d:6e:d3:9b:e1:a6:3b:18:89:23:db:3d:fe:35:
                    8c:44:7e:9b:3d:72:d0:78:34:0e:27:1d:7d:26:34:
                    63:48:a6:0f:4b:2c:68:b9:dc:3d:fa:9b:10:ec:4f:
                    8f:91:2a:2b:7f:d4:88:d7:bd:b3:b0:31:4a:70:3c:
                    40:a8:ce:e6:13:6c:7c:d8:82:7c:4a:53:04:90:ca:
                    cc:b4:f5:90:55:aa:c6:c4:ad:b4:40:03:e9:c8:b8:
                    e9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9F:A3:A1:E0:15:2F:36:D9:95:63:BF:8E:DB:36:CC:63:DE:BA:7D
            X509v3 Authority Key Identifier:
                keyid:2E:DD:A8:60:30:53:2D:E4:9C:B7:04:32:39:B4:6E:66:78:84:50:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/2EDDA86030532DE49CB7043239B46E667884503B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EDDA86030532DE49CB7043239B46E667884503B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/3137372e3133302e3131322e302f32302d3234203d3e203532353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:c9:10:71:1b:11:94:94:30:73:77:1c:56:48:69:e8:30:49:
         67:d7:34:fa:7e:43:10:25:64:d8:fc:b7:23:34:21:54:f0:4e:
         9d:14:bd:cc:62:9a:91:83:7e:28:c8:35:4c:c5:c4:00:7b:bf:
         03:ec:93:00:76:1c:f8:37:01:a6:cb:10:1c:35:c7:7a:56:46:
         e3:86:63:70:30:bf:b8:42:56:5f:e2:4b:f0:fd:6f:20:98:45:
         e3:dc:ed:44:4a:b1:ef:c7:b4:36:ea:7a:d0:d3:61:07:9a:6b:
         bb:33:45:30:d3:08:52:ed:2c:31:f8:d8:ae:16:0a:e7:9b:d3:
         56:e7:ec:e4:a6:ac:b3:cd:b2:a1:54:7e:e1:0d:11:95:e6:3e:
         84:7d:e2:f0:bf:f3:25:c8:4d:77:ec:c0:5d:e0:49:fc:d4:47:
         13:4d:2f:10:ac:ee:52:d0:e6:d0:44:bf:6f:e0:32:fb:90:02:
         bf:16:ba:8b:93:ac:d0:cc:21:1d:52:18:c0:ca:91:9c:64:da:
         0b:6e:5c:fa:52:d0:cd:8a:b8:ee:67:53:a8:80:59:6d:e8:50:
         ba:44:54:a4:6c:8f:27:ed:df:6a:0c:64:56:fc:e3:e1:94:73:
         be:e3:46:20:90:0e:23:1a:47:a6:e0:7b:2d:c8:de:05:50:9f:
         50:84:79:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org