Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134302e302f32332d3233203d3e20323730353833.roa
File:                     3137372e382e3134302e302f32332d3233203d3e20323730353833.roa (raw, json)
Hash identifier:          Hct7TYSxy13rd/+N/D7aqJezsWvaYCGdykYM9YRqtRM=
Subject key identifier:   09:59:BE:D1:B3:35:C7:A3:D3:D4:03:C2:A1:29:9C:60:21:56:44:F6
Certificate issuer:       /CN=B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C
Certificate serial:       44411273954ECE244A9E8FFAD9EB18C5D97C42E5
Authority key identifier: B0:27:01:FD:E7:DA:52:FF:0E:32:05:FC:14:4C:9F:C7:A4:4F:6C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134302e302f32332d3233203d3e20323730353833.roa
Signing time:             Wed 12 Oct 2022 12:00:01 +0000
ROA not before:           Wed 12 Oct 2022 11:55:01 +0000
ROA not after:            Wed 11 Oct 2023 12:00:01 +0000
asID:                     270583
IP address blocks:        177.8.140.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:41:12:73:95:4e:ce:24:4a:9e:8f:fa:d9:eb:18:c5:d9:7c:42:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C
        Validity
            Not Before: Oct 12 11:55:01 2022 GMT
            Not After : Oct 11 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d6:37:ec:b1:9e:03:4a:16:56:82:35:b0:8d:
                    9f:99:f4:16:14:dc:3a:83:d6:7f:11:21:30:14:aa:
                    b9:32:d5:cf:2f:d3:4a:0d:1e:63:52:c3:a5:5b:40:
                    5f:70:65:84:09:c2:b9:63:c1:db:51:8d:df:35:db:
                    21:41:76:08:c2:d8:0f:eb:79:29:8f:61:46:3e:b9:
                    10:5c:02:ba:95:30:62:28:9d:b0:eb:3f:ba:88:08:
                    31:81:ea:74:7a:cc:4a:94:5c:67:49:ae:7e:54:ea:
                    8c:4c:e0:0d:a6:11:1a:2b:8a:46:81:d2:b4:ee:50:
                    fc:d8:b0:4b:89:d0:d7:10:77:9c:74:f3:2c:94:2d:
                    54:27:8a:55:f4:ad:52:f0:10:32:69:e1:08:21:6f:
                    9e:5f:f3:21:0f:af:1c:9a:df:5b:1f:36:78:58:7c:
                    e9:75:07:1c:c1:ef:bb:75:33:7c:c2:c1:a0:77:b3:
                    10:6f:0d:ea:63:29:1b:49:22:75:38:23:c2:04:f3:
                    49:77:0c:1d:14:95:68:e5:a8:18:ea:1a:d4:02:36:
                    57:74:72:6a:1f:c2:b3:83:01:be:91:dd:b2:ec:74:
                    13:52:8e:a3:f5:23:3c:f1:63:55:31:91:be:72:c4:
                    38:19:91:22:f0:c8:46:a4:8a:89:1c:ce:5a:75:9e:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:59:BE:D1:B3:35:C7:A3:D3:D4:03:C2:A1:29:9C:60:21:56:44:F6
            X509v3 Authority Key Identifier:
                keyid:B0:27:01:FD:E7:DA:52:FF:0E:32:05:FC:14:4C:9F:C7:A4:4F:6C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134302e302f32332d3233203d3e20323730353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:3e:6e:1a:a2:1e:8d:d3:3e:9b:b1:da:4f:f3:dc:9c:0b:0c:
         3e:c5:82:f9:fa:23:27:2b:0f:f0:98:c7:1e:f2:43:dc:b6:3e:
         6d:60:4d:cb:54:9d:05:04:97:26:b5:aa:68:bc:62:61:aa:f1:
         1b:ec:24:9f:2f:40:84:28:77:81:c9:dd:81:ad:20:39:55:ae:
         35:55:94:40:39:3a:fa:57:ae:1a:25:b8:8f:d0:d2:5e:43:af:
         5d:08:c1:f8:10:a6:b6:07:70:5b:8e:8a:51:d9:87:96:d7:23:
         46:a3:81:fd:43:cc:ba:70:ae:37:20:17:7a:30:b1:2b:3e:fc:
         bf:11:cf:b0:fb:bf:b8:64:b6:2a:c1:5c:a7:d1:4d:82:ce:f5:
         6f:83:35:ce:7e:6b:c9:b3:0c:17:60:dd:48:81:5a:55:ed:e2:
         24:f3:07:fc:e6:25:86:07:ed:da:f4:95:52:29:05:9c:78:74:
         af:1b:85:56:2f:80:32:c5:48:9d:c5:01:dd:eb:2c:98:85:2b:
         08:61:19:0f:be:6d:55:6d:31:05:66:45:1f:94:31:a0:24:35:
         db:52:72:4d:08:89:b0:d9:02:23:48:0c:45:97:2b:b6:a3:fd:
         b4:59:87:af:fd:99:9c:b5:eb:94:cf:73:83:f9:8e:96:90:58:
         fd:67:07:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org