Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e38362e3233322e302f32322d3232203d3e20323632343434.roa
File:                     3137372e38362e3233322e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          /AH7cZPcKKCqixzdy00DGwNgy9C751VWmy/WCEC078o=
Subject key identifier:   1A:EE:1F:A7:E6:71:9E:A6:5D:D5:54:9F:0A:AE:34:7E:C4:4B:D9:57
Certificate issuer:       /CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
Certificate serial:       38DB217541D0B792A522FDAE9C10771C073BDB59
Authority key identifier: E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e38362e3233322e302f32322d3232203d3e20323632343434.roa
Signing time:             Mon 10 Jul 2023 11:50:06 +0000
ROA not before:           Mon 10 Jul 2023 11:45:06 +0000
ROA not after:            Mon 08 Jul 2024 11:50:06 +0000
asID:                     262444
IP address blocks:        177.86.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:db:21:75:41:d0:b7:92:a5:22:fd:ae:9c:10:77:1c:07:3b:db:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
        Validity
            Not Before: Jul 10 11:45:06 2023 GMT
            Not After : Jul  8 11:50:06 2024 GMT
        Subject: CN=1AEE1FA7E6719EA65DD5549F0AAE347EC44BD957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:15:f7:8c:03:21:60:fb:3c:62:8d:b2:d0:
                    cd:b8:26:5c:a7:c6:a6:0a:6b:66:51:b6:0b:61:49:
                    90:f7:2f:41:37:04:a0:66:71:c4:e3:ff:95:e1:a6:
                    42:54:bf:88:2a:e3:a6:a7:a5:f2:2b:77:ee:2e:df:
                    72:85:50:01:7f:c8:17:18:15:64:1c:21:eb:4e:8f:
                    46:39:5b:a7:29:8b:ba:59:e3:a7:6d:0f:fb:70:a8:
                    d8:5e:96:e0:4d:48:39:ad:c9:db:df:27:36:03:aa:
                    12:11:e1:8f:8e:68:80:bd:14:18:9e:d3:36:38:2c:
                    ab:c9:a7:38:eb:d8:2d:43:63:02:aa:f0:0b:fe:b6:
                    08:60:7f:a0:cf:0e:5a:9f:7f:b1:67:21:9a:ce:8d:
                    d6:f7:3e:da:76:17:d1:ab:b1:e1:42:f1:51:71:05:
                    74:ab:5d:cf:e4:65:28:9f:52:2b:30:71:eb:d1:9b:
                    6d:6e:54:71:31:14:cd:31:53:83:b8:48:fa:74:30:
                    83:ca:8f:8b:49:40:1d:98:1b:df:b5:c5:0d:c0:56:
                    a2:7f:26:51:c0:82:3f:4c:1c:0f:65:3b:68:89:ef:
                    ed:e3:f8:df:82:4c:32:2a:ab:3a:df:c0:0c:39:c5:
                    03:2e:35:ce:d7:6c:5f:9b:9a:de:07:58:98:7d:bd:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EE:1F:A7:E6:71:9E:A6:5D:D5:54:9F:0A:AE:34:7E:C4:4B:D9:57
            X509v3 Authority Key Identifier:
                keyid:E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e38362e3233322e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:ff:c8:58:9d:42:57:c6:a0:5b:29:22:2a:b2:cd:80:1f:51:
         c2:87:57:a5:d3:c6:75:0f:e4:ba:95:60:af:ee:0e:f6:40:15:
         02:0e:d9:b6:0a:64:0a:ef:ca:76:d0:b2:35:1b:63:8e:c6:cf:
         cd:3a:4b:61:3e:4f:4d:9d:53:14:1b:46:fc:06:ae:11:d8:b7:
         0e:49:d1:98:7b:fb:dc:32:62:2d:5f:13:d5:09:82:dd:5a:27:
         50:3b:73:46:78:a5:81:3d:6e:85:cb:5b:7e:b9:e3:de:e3:b5:
         47:16:f5:e0:00:84:9d:c0:6e:5a:9b:8c:c2:ae:bd:dc:3a:fa:
         96:ac:c1:35:ea:96:4f:b3:1a:11:e7:ad:2b:eb:75:0a:39:ce:
         74:8e:a9:2e:71:7a:97:f0:5d:84:92:9b:53:06:d2:a3:67:f3:
         e9:90:9a:3b:b2:05:b2:0f:48:98:4d:c5:c1:59:fc:0e:52:8b:
         af:fb:ac:84:3a:ab:94:0b:8a:2d:d5:7c:db:44:73:19:1b:28:
         57:7e:91:6b:22:c7:2f:56:29:54:2b:94:5f:25:5c:bd:05:e1:
         53:a1:e9:de:a8:90:b7:e7:eb:82:6c:5e:2d:05:8a:24:cf:63:
         44:48:a7:00:ff:5e:9a:56:42:08:0f:7b:f9:b5:90:af:33:89:
         5d:69:4c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org