Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32332d3233203d3e20323730353833.roa
File:                     3137372e382e3134322e302f32332d3233203d3e20323730353833.roa (raw, json)
Hash identifier:          zY/W981FP9S6cDcxNJmHo7KptqczjOhus7lhhBlTatg=
Subject key identifier:   A9:2E:08:8E:B0:C5:E0:82:64:81:F3:4A:74:6E:A8:BB:EA:10:47:E9
Certificate issuer:       /CN=B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C
Certificate serial:       5F3322D3C84CC95D838E4C906DD12D9C28320E46
Authority key identifier: B0:27:01:FD:E7:DA:52:FF:0E:32:05:FC:14:4C:9F:C7:A4:4F:6C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32332d3233203d3e20323730353833.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 11:55:00 +0000
ROA not after:            Wed 11 Oct 2023 12:00:00 +0000
asID:                     270583
IP address blocks:        177.8.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:33:22:d3:c8:4c:c9:5d:83:8e:4c:90:6d:d1:2d:9c:28:32:0e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C
        Validity
            Not Before: Oct 12 11:55:00 2022 GMT
            Not After : Oct 11 12:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:c0:1c:90:07:d1:1b:ba:b3:ad:58:6b:ec:
                    b7:1e:a7:17:0e:91:e2:f6:03:97:32:a8:fb:ce:29:
                    e1:91:37:61:93:10:69:26:bd:c7:6e:b7:95:5a:17:
                    2d:34:8f:ca:54:3e:e1:65:56:00:85:4c:79:c2:c6:
                    5b:0b:9b:2b:b7:ee:ec:83:88:76:15:75:ef:b5:50:
                    19:1a:cf:ad:7e:e1:a5:fb:06:c0:f3:86:ad:ec:a5:
                    94:1a:48:bc:d2:10:72:a9:c1:07:66:bc:ed:f3:96:
                    ce:b5:a2:45:94:d6:df:ee:79:9a:eb:a4:eb:7d:35:
                    fa:e9:b9:45:d7:12:dd:78:2f:0f:25:30:38:51:7b:
                    5c:31:f1:8a:e0:d4:71:30:cf:83:d6:6e:65:81:b0:
                    72:d0:75:25:5e:aa:29:6c:6f:f8:15:38:9d:1e:6d:
                    51:14:9f:42:58:40:ca:01:4a:a3:bb:f7:89:e3:c0:
                    1d:dd:21:9c:5e:7a:dd:19:ea:1b:61:bb:54:45:c5:
                    c0:7a:ef:fb:5d:e8:37:e2:5a:ea:cb:b7:27:d8:47:
                    80:a7:54:42:de:42:83:b8:a0:7e:56:b4:7e:5b:23:
                    ea:5a:6b:92:5c:0d:91:08:78:76:d7:3a:d1:6b:f8:
                    9c:5a:1c:e2:c2:2b:2e:c7:2b:bf:3e:92:64:55:62:
                    5d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2E:08:8E:B0:C5:E0:82:64:81:F3:4A:74:6E:A8:BB:EA:10:47:E9
            X509v3 Authority Key Identifier:
                keyid:B0:27:01:FD:E7:DA:52:FF:0E:32:05:FC:14:4C:9F:C7:A4:4F:6C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B02701FDE7DA52FF0E3205FC144C9FC7A44F6C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32332d3233203d3e20323730353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:23:22:a1:6d:d5:11:9c:4f:2b:1c:61:4c:97:37:95:8e:42:
         0f:ff:a6:4c:97:69:1b:bb:b4:d3:75:1b:fd:4a:61:04:bb:04:
         c4:50:72:9f:34:b0:f1:ba:47:5b:fe:1d:c8:40:7f:f1:ce:46:
         83:53:5f:3c:c3:db:01:00:05:63:fa:18:e4:03:d5:60:03:5a:
         4e:e5:58:77:07:c4:e3:02:df:3b:25:6e:0a:22:92:4d:68:14:
         ef:d5:64:5b:28:8e:14:5e:bc:53:c8:2f:f6:99:74:86:f8:c7:
         f3:f6:29:a6:c1:94:6d:a6:29:3e:d1:d8:93:6c:af:cc:62:72:
         dc:45:d4:92:ce:b3:a3:5f:7d:38:bb:42:46:89:69:25:c7:94:
         f3:de:0b:36:20:0a:62:fd:43:35:3a:ee:27:bd:c0:5c:7f:93:
         36:c7:c1:d3:63:08:c8:d3:e0:fa:56:6a:37:88:0e:a9:de:0b:
         af:4e:d1:9f:98:b0:9d:8e:46:70:cc:85:ba:f8:56:a9:dc:80:
         51:f1:c4:27:90:56:30:b6:8e:6e:2b:83:49:9c:bc:ba:ac:65:
         f6:f9:27:24:73:f6:ee:8a:d5:48:9b:e7:15:a5:50:bc:85:fa:
         df:18:8d:a7:9e:38:df:e1:98:b8:4c:74:03:72:f7:40:d3:90:
         dd:7f:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org