Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/3137372e3132342e3133362e302f32322d3234203d3e20323632333234.roa
File:                     3137372e3132342e3133362e302f32322d3234203d3e20323632333234.roa (raw, json)
Hash identifier:          SXF5xHCU5FP5wJBBxa2r0E0/+jRXy4ZVcj+24FZ0ank=
Subject key identifier:   7A:5F:09:0A:BB:00:C6:DD:BA:24:6B:76:10:8B:2C:E5:87:18:66:F2
Certificate issuer:       /CN=E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8
Certificate serial:       7C762FB8EC895C9252215B37A736DBFEF2F3F26A
Authority key identifier: E2:00:9F:B9:E6:F8:B4:97:5E:3C:2F:6C:43:BC:82:75:E7:38:E3:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/3137372e3132342e3133362e302f32322d3234203d3e20323632333234.roa
Signing time:             Wed 10 Apr 2024 13:00:35 +0000
ROA not before:           Wed 10 Apr 2024 12:55:35 +0000
ROA not after:            Wed 09 Apr 2025 13:00:35 +0000
asID:                     262324
IP address blocks:        177.124.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:76:2f:b8:ec:89:5c:92:52:21:5b:37:a7:36:db:fe:f2:f3:f2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8
        Validity
            Not Before: Apr 10 12:55:35 2024 GMT
            Not After : Apr  9 13:00:35 2025 GMT
        Subject: CN=7A5F090ABB00C6DDBA246B76108B2CE5871866F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:8f:7a:58:62:90:9f:1b:5c:89:ce:28:f8:
                    d4:f8:11:4d:b3:5c:53:1c:dc:07:ab:da:98:71:6c:
                    d0:43:9a:da:d3:44:f4:8a:0a:72:90:51:e3:1a:7d:
                    79:4a:17:f3:69:9a:cc:39:9f:ec:87:92:57:52:0b:
                    d5:0e:bd:1c:ad:f5:c7:1b:6b:45:45:2e:17:37:dd:
                    af:8d:6d:c2:73:f5:fd:26:dd:cd:9a:a8:69:61:7d:
                    e7:3b:5b:49:44:26:5e:63:1d:1b:6b:68:72:df:e0:
                    6f:42:ce:dc:2a:bd:88:8d:ad:8a:8f:a5:bd:67:83:
                    70:ff:c7:2f:4f:46:8d:66:d8:0a:9f:a5:04:3c:32:
                    ed:d7:f8:e7:08:c1:9c:84:ce:6d:26:38:30:bc:a2:
                    76:9e:c4:aa:8a:b2:ae:d3:d8:6e:62:dd:e4:01:aa:
                    57:cc:55:b3:7b:02:41:8d:9c:b1:8b:60:16:9c:7a:
                    c8:aa:79:47:05:de:f8:03:9f:8a:01:b2:6e:dd:ed:
                    1f:a7:2b:ff:3b:85:45:a5:e8:61:0a:05:03:c8:b9:
                    d4:f1:70:c7:4f:e5:cc:79:54:2a:ed:a2:a6:4a:63:
                    da:cb:1e:5f:ea:1f:34:3d:28:9e:2d:f2:f7:9f:6c:
                    d5:10:95:4f:04:9f:3f:ca:69:04:87:7c:bf:b4:98:
                    14:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5F:09:0A:BB:00:C6:DD:BA:24:6B:76:10:8B:2C:E5:87:18:66:F2
            X509v3 Authority Key Identifier:
                keyid:E2:00:9F:B9:E6:F8:B4:97:5E:3C:2F:6C:43:BC:82:75:E7:38:E3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/3137372e3132342e3133362e302f32322d3234203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:89:e9:d6:0a:15:64:1c:f8:8d:8d:59:b8:53:f9:a8:ea:39:
         08:13:80:6a:71:03:2c:dc:47:cd:59:1f:11:54:d7:30:8a:cd:
         14:32:75:fe:21:05:fb:8a:ff:3f:6a:cd:03:28:61:2a:79:e4:
         d3:be:be:1a:a4:90:f9:d2:77:d0:11:54:3f:b9:9a:9a:8e:96:
         24:6c:b1:d2:55:6b:a9:f9:da:99:0f:6d:26:5f:c3:2b:53:77:
         ec:1f:14:76:8a:0e:33:4d:d5:0c:f2:72:7a:8d:6d:0a:c5:14:
         d6:56:47:8b:a7:b0:36:d4:37:5c:51:37:67:4e:24:a8:4b:cf:
         23:46:05:76:64:34:c3:cf:e9:71:d3:7c:91:5a:f5:1f:8d:d4:
         70:9f:64:25:c3:a4:56:15:64:9b:34:ae:60:aa:cd:7e:34:fb:
         11:93:44:b4:5c:4b:39:cf:cf:ec:f1:aa:e2:21:dd:ac:97:70:
         97:7f:47:53:bb:84:d9:44:0e:a6:57:b6:b8:86:df:10:48:7a:
         dd:3a:ab:a6:52:a4:af:4f:e2:7b:47:ac:25:03:e0:a0:84:b1:
         b6:aa:7b:c1:2d:c0:c9:a7:ae:67:f3:99:c9:1f:aa:9c:b0:65:
         80:91:82:29:df:66:4a:b4:26:f7:ba:a8:89:ed:59:a3:6f:58:
         7f:0a:33:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org