Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e3132382e382e302f32312d3234203d3e20323632343434.roa
File:                     3137372e3132382e382e302f32312d3234203d3e20323632343434.roa (raw, json)
Hash identifier:          GpJLraEN22W0haYzgdIA/8lMb39TCllLSJZoSRVC3qM=
Subject key identifier:   4F:A9:AE:5B:88:F2:6F:DC:1C:5F:7C:C5:3F:71:C0:8F:9B:7D:D4:52
Certificate issuer:       /CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
Certificate serial:       57A6BE06E3D5548FE017762C1F1562EFA393AD13
Authority key identifier: E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e3132382e382e302f32312d3234203d3e20323632343434.roa
Signing time:             Mon 14 Aug 2023 14:04:00 +0000
ROA not before:           Mon 14 Aug 2023 13:59:00 +0000
ROA not after:            Mon 12 Aug 2024 14:04:00 +0000
asID:                     262444
IP address blocks:        177.128.8.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a6:be:06:e3:d5:54:8f:e0:17:76:2c:1f:15:62:ef:a3:93:ad:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
        Validity
            Not Before: Aug 14 13:59:00 2023 GMT
            Not After : Aug 12 14:04:00 2024 GMT
        Subject: CN=4FA9AE5B88F26FDC1C5F7CC53F71C08F9B7DD452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:c4:99:74:53:86:8b:d8:79:08:10:1d:e2:
                    fc:4b:e6:f2:b0:0c:0b:41:71:bf:cf:62:99:0c:c7:
                    d0:e6:a5:95:fa:ef:14:5b:1b:56:c6:38:9e:e3:e5:
                    24:27:f9:ad:d1:18:d1:d0:7b:69:95:45:de:be:13:
                    93:38:4a:0e:c7:c4:b8:58:8e:c7:f4:e1:52:aa:b2:
                    90:68:ae:f9:33:5b:1d:6d:7a:20:2f:e4:02:d8:74:
                    7b:d4:e7:45:53:45:c4:98:28:90:64:34:ac:83:8b:
                    dd:ec:ff:a9:3b:ee:0f:e2:f2:35:d5:d8:45:00:17:
                    44:09:ef:eb:63:8d:e8:0b:4f:02:13:28:d5:82:7b:
                    b2:21:d0:74:c2:c9:52:a9:f9:91:4a:fe:39:c4:24:
                    ef:36:9e:5a:1f:bc:f5:78:a3:48:17:36:54:78:45:
                    e4:24:6f:50:a9:69:aa:87:98:c2:25:e3:69:2b:59:
                    29:6b:ff:a3:cc:17:53:6f:6c:cc:dc:f0:0b:37:46:
                    18:a8:42:bd:15:90:18:14:97:10:33:e5:87:7c:62:
                    91:81:17:e5:90:fd:45:cd:cc:bc:dd:b7:55:e1:26:
                    46:32:37:7c:ba:c2:89:fd:49:e5:a3:a8:87:e5:43:
                    31:ab:bd:28:83:c7:fb:fc:ca:d7:15:ae:da:e7:32:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:AE:5B:88:F2:6F:DC:1C:5F:7C:C5:3F:71:C0:8F:9B:7D:D4:52
            X509v3 Authority Key Identifier:
                keyid:E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e3132382e382e302f32312d3234203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:05:71:fe:12:9c:30:05:e0:3e:44:f5:a7:92:06:55:2c:8d:
         42:70:3d:d7:ca:24:02:93:bd:17:67:7d:b6:00:5d:4d:c1:fe:
         b9:88:49:b1:55:6e:d6:b8:b3:a5:45:c3:28:70:a4:59:a2:a4:
         db:6e:8d:5d:a8:37:9f:de:83:bb:c0:d6:07:55:5a:51:c0:00:
         98:35:02:51:bc:27:e8:92:8c:4c:60:e0:87:33:dc:85:b9:77:
         d9:9a:fd:1d:b1:47:23:b0:3e:31:f1:43:f0:30:c0:16:a6:24:
         7b:5f:c4:48:e5:59:1b:78:63:9e:ad:0a:6b:ce:64:81:ca:e9:
         33:97:c5:6e:ed:1b:ba:eb:b9:9d:3b:77:1b:ce:02:62:b9:6b:
         aa:bb:de:51:51:c5:bc:c9:bd:37:48:73:89:32:35:20:48:9d:
         80:34:c0:0f:b9:2e:93:df:e3:a0:50:c3:8a:f4:0b:3a:ad:ff:
         7e:cd:cc:b7:43:1a:be:c3:d3:2a:78:f7:e6:9c:8c:ca:5e:59:
         88:1f:92:74:9f:fa:10:40:b1:06:b8:b1:af:de:e9:64:2a:fd:
         75:0f:47:ac:a5:b0:4d:1d:9a:8c:bc:d7:ad:78:2e:29:b5:db:
         98:6a:52:a7:07:d0:9c:ce:79:3a:22:05:31:58:e7:fc:c9:eb:
         58:49:6e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org