Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/3137372e3139302e3135392e302f32342d3234203d3e20323633343537.roa
File:                     3137372e3139302e3135392e302f32342d3234203d3e20323633343537.roa (raw, json)
Hash identifier:          R3VF0UzCNQsjiPJJwFBqUCKL26w03XMdD7gsLzlPuSo=
Subject key identifier:   56:8F:C6:9B:2E:53:7C:38:AA:C3:F8:7E:60:48:39:53:E8:63:D1:C1
Certificate issuer:       /CN=C1B35906E3AD7284768AEE5DB6ED4265B2056E9F
Certificate serial:       16EAE0ACB18F86EFFDF3542A413E7BDE341CF829
Authority key identifier: C1:B3:59:06:E3:AD:72:84:76:8A:EE:5D:B6:ED:42:65:B2:05:6E:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/3137372e3139302e3135392e302f32342d3234203d3e20323633343537.roa
Signing time:             Thu 18 Jan 2024 13:11:38 +0000
ROA not before:           Thu 18 Jan 2024 13:06:38 +0000
ROA not after:            Thu 16 Jan 2025 13:11:38 +0000
asID:                     263457
IP address blocks:        177.190.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ea:e0:ac:b1:8f:86:ef:fd:f3:54:2a:41:3e:7b:de:34:1c:f8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B35906E3AD7284768AEE5DB6ED4265B2056E9F
        Validity
            Not Before: Jan 18 13:06:38 2024 GMT
            Not After : Jan 16 13:11:38 2025 GMT
        Subject: CN=568FC69B2E537C38AAC3F87E60483953E863D1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:79:1a:c9:a3:4b:0e:09:a7:f2:7d:74:9d:
                    da:5e:37:58:2b:0e:15:2d:e8:5e:f4:55:a5:7d:ac:
                    1d:4f:69:ef:73:48:37:5d:e9:fe:fd:ee:38:0d:80:
                    eb:f1:76:09:3c:06:7c:21:1a:6b:9c:45:d0:bf:4b:
                    11:8b:fa:ee:24:1f:2f:33:17:05:e7:59:71:1b:dc:
                    ca:af:30:ca:02:a5:26:45:95:44:79:85:06:3f:8b:
                    75:73:32:47:73:91:b0:b2:f1:06:6d:e9:80:c7:8b:
                    fe:b8:c6:6c:16:3e:8e:81:b9:97:1e:b3:23:33:44:
                    ad:4f:e8:04:c1:c8:3c:43:46:e5:11:41:ca:48:1a:
                    d4:de:01:41:29:cf:e3:c1:14:a0:79:a9:17:0c:08:
                    d2:ce:13:ff:2f:06:94:26:b6:58:dc:1a:5d:90:90:
                    54:b9:86:8a:cf:ea:45:2a:b5:de:23:9d:8a:91:8f:
                    11:54:f1:b7:d0:4a:f8:17:16:57:ad:d9:c6:13:86:
                    df:ac:bc:4d:66:80:3e:34:ba:66:c7:14:7c:a6:fe:
                    12:20:bf:c2:5d:86:ba:b1:1e:9b:08:48:77:e9:af:
                    4c:91:f1:80:38:3d:aa:78:33:0e:56:06:b1:cd:75:
                    b5:8b:11:32:75:30:2b:80:3e:27:c6:ba:2d:56:b0:
                    f9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8F:C6:9B:2E:53:7C:38:AA:C3:F8:7E:60:48:39:53:E8:63:D1:C1
            X509v3 Authority Key Identifier:
                keyid:C1:B3:59:06:E3:AD:72:84:76:8A:EE:5D:B6:ED:42:65:B2:05:6E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/3137372e3139302e3135392e302f32342d3234203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:2e:42:78:03:26:92:59:25:82:75:71:49:e6:2d:e2:4c:4e:
         fc:4a:b9:0f:79:e2:64:c6:c8:fb:f0:d5:15:27:0f:d2:4c:16:
         00:83:e6:a5:ff:68:4a:6b:d2:95:15:cc:0e:25:ea:49:59:bd:
         27:b9:ca:7c:79:5a:e0:e7:40:a3:a0:3d:ab:cf:44:d6:41:ad:
         bf:a9:ae:bd:dc:5e:eb:1a:ad:2d:fb:9d:97:14:e3:ee:63:0e:
         94:c8:6c:45:70:9f:51:58:58:6d:f4:c9:1e:3a:86:6d:06:0f:
         02:ad:c5:24:f4:b1:e2:e4:de:7c:42:c1:4b:93:c2:4d:92:65:
         4b:de:50:49:2d:67:b2:43:a0:63:4a:11:d5:62:9c:96:68:a4:
         5e:81:7b:2b:20:95:64:58:8a:5c:b4:b3:3a:be:92:6b:3a:d7:
         ff:26:c9:57:86:75:14:c2:a3:75:d9:98:a9:25:66:e0:b0:0c:
         e3:e8:67:d1:dd:93:60:f2:08:d6:8f:fa:d1:2e:79:57:ee:d0:
         20:d4:67:c9:1e:f4:4c:67:5d:9c:d7:58:8a:4f:95:de:ac:91:
         df:7b:e0:b0:a8:40:63:39:07:2a:0f:26:c3:88:d4:be:c2:73:
         65:7a:f3:a4:0b:93:fe:79:cc:78:7d:80:11:b8:99:54:4f:8d:
         89:39:bf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:42 2024 by rpki-client on console-ams.rpki-client.org