Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/3137372e36372e32382e302f32322d3232203d3e20323632333234.roa
File:                     3137372e36372e32382e302f32322d3232203d3e20323632333234.roa (raw, json)
Hash identifier:          CnAvIGUGKC/K1dOFVpsyCJ3CbAJtdH6x82ogySzAuug=
Subject key identifier:   38:AC:0E:5B:92:67:08:13:0D:13:DE:FA:D0:27:64:9A:3D:7D:1B:23
Certificate issuer:       /CN=E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8
Certificate serial:       6AC55C8F7ABE9E3D3D19A67A98CFDB4086CF7926
Authority key identifier: E2:00:9F:B9:E6:F8:B4:97:5E:3C:2F:6C:43:BC:82:75:E7:38:E3:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/3137372e36372e32382e302f32322d3232203d3e20323632333234.roa
Signing time:             Thu 15 Feb 2024 15:03:21 +0000
ROA not before:           Thu 15 Feb 2024 14:58:21 +0000
ROA not after:            Thu 13 Feb 2025 15:03:21 +0000
asID:                     262324
IP address blocks:        177.67.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c5:5c:8f:7a:be:9e:3d:3d:19:a6:7a:98:cf:db:40:86:cf:79:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8
        Validity
            Not Before: Feb 15 14:58:21 2024 GMT
            Not After : Feb 13 15:03:21 2025 GMT
        Subject: CN=38AC0E5B926708130D13DEFAD027649A3D7D1B23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:aa:55:5b:ae:6f:c9:f7:6f:02:6e:9a:b0:2f:
                    a5:e3:61:2e:2a:d3:ff:db:52:9d:81:ff:29:c4:7c:
                    3c:e7:4c:1d:ce:3f:8b:f2:af:28:2e:16:ae:bb:58:
                    45:1d:87:c5:3b:a1:dd:64:49:6e:bd:3a:0c:e4:db:
                    38:58:dc:e2:09:81:a3:e5:fe:ac:2b:85:5e:04:15:
                    63:de:77:49:d9:94:85:ae:c9:8c:18:8c:d0:a5:c7:
                    2a:17:9a:c6:0f:b0:ff:cc:d8:1f:7c:38:65:7d:2a:
                    7b:09:90:4c:07:7b:e4:92:2f:e9:10:2d:e9:04:2b:
                    e3:a4:19:8c:6f:06:8a:95:58:44:2c:f5:c2:0e:87:
                    de:7d:01:49:f5:18:32:4b:62:7d:74:8c:af:01:24:
                    5e:03:7a:a6:48:56:1e:46:7c:1c:f6:03:33:d2:8e:
                    51:e3:2d:85:ff:df:17:85:9e:6b:b3:46:8b:37:a0:
                    c0:38:1e:f0:c6:43:36:50:08:1e:ae:0c:7b:47:ec:
                    a5:81:e4:86:71:68:56:73:44:87:ef:35:19:6a:28:
                    f6:2e:d7:ed:1f:b7:26:30:20:9b:f6:65:6b:3a:83:
                    a7:ce:af:1d:62:04:72:42:93:29:9d:eb:51:9b:c2:
                    ed:59:27:b8:a7:1c:ec:6b:67:8b:47:8e:3f:be:08:
                    8d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:0E:5B:92:67:08:13:0D:13:DE:FA:D0:27:64:9A:3D:7D:1B:23
            X509v3 Authority Key Identifier:
                keyid:E2:00:9F:B9:E6:F8:B4:97:5E:3C:2F:6C:43:BC:82:75:E7:38:E3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/3137372e36372e32382e302f32322d3232203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:2f:b6:6e:a5:45:bc:e6:e6:44:df:a3:15:28:5c:8a:07:b0:
         78:71:72:34:a7:84:c7:27:2d:3b:6d:8b:e9:af:17:ab:e9:de:
         f9:be:d1:91:14:21:de:a3:8b:74:53:ae:d2:2e:f0:40:02:d0:
         2d:e4:ea:e5:d9:e6:dc:04:97:cd:f0:07:3a:64:4b:d3:a6:54:
         17:92:88:d6:57:e5:a2:c0:21:d9:e6:a1:4d:48:c0:58:c2:5c:
         85:8b:c2:29:6c:a6:3c:6c:ab:11:3f:5e:43:c8:f8:8c:2d:59:
         85:62:82:87:29:6d:7d:21:ba:ba:2a:fd:7e:7b:f9:e6:76:f9:
         ca:db:1b:c0:fb:c3:c4:b6:49:01:48:30:64:97:d3:6d:81:aa:
         3f:ff:6a:d1:da:c8:0d:bb:b3:58:04:21:be:e0:f8:0a:07:f0:
         08:fe:f2:1a:54:8b:0b:0e:95:a6:cf:41:a5:6b:1f:67:84:5b:
         46:b8:7b:54:2f:3e:49:36:27:0b:28:65:fb:d6:07:4c:19:7e:
         40:13:28:c3:b6:13:c4:af:50:e3:b6:8a:2d:16:fe:ed:74:d5:
         0c:90:61:bd:53:4e:2e:ce:2a:10:27:fb:e2:bc:f6:ce:7c:e0:
         eb:83:d6:d0:70:11:2e:c4:89:e7:09:24:fd:ac:e2:2a:ab:c3:
         fc:f5:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org