Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e38372e37362e302f32322d3234203d3e20323632343434.roa
File:                     3137372e38372e37362e302f32322d3234203d3e20323632343434.roa (raw, json)
Hash identifier:          w1BmUCB8SAqvyjQDXEcGHhj10ZJ4xWA7MuVWGryF4rU=
Subject key identifier:   4F:F5:D6:3C:74:A5:A7:73:6C:90:CF:3C:47:3A:C0:E4:21:77:9C:61
Certificate issuer:       /CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
Certificate serial:       46546EF3A7D20D8B282A787A43EA2F8A218992A0
Authority key identifier: E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e38372e37362e302f32322d3234203d3e20323632343434.roa
Signing time:             Thu 11 Jan 2024 11:32:30 +0000
ROA not before:           Thu 11 Jan 2024 11:27:30 +0000
ROA not after:            Thu 09 Jan 2025 11:32:30 +0000
asID:                     262444
IP address blocks:        177.87.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:54:6e:f3:a7:d2:0d:8b:28:2a:78:7a:43:ea:2f:8a:21:89:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
        Validity
            Not Before: Jan 11 11:27:30 2024 GMT
            Not After : Jan  9 11:32:30 2025 GMT
        Subject: CN=4FF5D63C74A5A7736C90CF3C473AC0E421779C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:05:73:12:f3:35:92:79:48:f4:ba:23:65:
                    01:e9:5c:68:32:4e:8c:3c:97:20:1f:98:47:65:ce:
                    d8:9e:7c:e2:b1:db:c5:b7:c7:d4:72:9a:48:20:1d:
                    68:9d:a8:75:65:81:08:60:f1:e5:6e:ef:9a:ca:66:
                    9f:0c:55:b1:33:1f:5d:87:3d:ed:ef:58:9b:76:28:
                    55:12:5a:0a:56:eb:14:05:9b:a1:35:cc:91:ff:b9:
                    d5:52:13:65:eb:84:e1:8c:b3:3f:41:f6:cf:5e:ae:
                    d6:e0:06:b4:a3:6d:44:ee:0c:9f:6d:09:65:e7:af:
                    5a:50:cc:d9:ee:46:63:d6:9d:a3:42:1c:49:d5:1d:
                    f9:34:af:36:f1:2b:f8:07:9f:ee:99:e1:9b:53:c7:
                    7f:ce:96:ef:d1:1f:3c:6e:02:57:5a:81:31:57:3b:
                    09:58:5f:3f:02:88:e5:fd:b3:2b:ed:c4:6e:72:27:
                    5b:a1:5e:10:46:11:f7:9d:9a:18:0f:83:c1:0d:2a:
                    5d:db:1d:fc:36:2b:7c:85:56:f2:20:ae:b2:82:11:
                    be:67:1c:a9:8f:d5:27:5c:01:7c:1d:19:2d:71:f9:
                    91:83:c9:46:ba:74:6d:26:26:d9:5b:49:bc:7a:dd:
                    7b:a2:49:98:d9:a8:37:ec:52:18:e2:1d:36:dd:30:
                    03:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F5:D6:3C:74:A5:A7:73:6C:90:CF:3C:47:3A:C0:E4:21:77:9C:61
            X509v3 Authority Key Identifier:
                keyid:E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e38372e37362e302f32322d3234203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:8a:2b:9d:9c:aa:10:b7:15:bb:57:0c:b5:03:5f:5b:87:01:
         09:04:af:ef:22:df:4b:cb:b8:c0:7f:7f:4a:10:62:dc:6f:75:
         cd:0c:45:bb:07:85:18:33:11:3e:26:f7:bf:76:d6:c4:4c:45:
         7d:a0:c0:eb:cb:ae:a6:36:53:66:55:32:bf:0f:43:d1:bf:f2:
         35:f6:64:10:05:5a:ca:64:db:9c:1e:fb:90:26:45:09:8c:35:
         58:88:60:26:13:33:29:7d:36:4a:b8:c8:15:25:00:58:7e:b6:
         58:2a:d3:4e:fa:56:bf:cc:da:42:bc:85:96:9f:8b:a9:b9:92:
         25:fb:3d:36:49:8f:3c:8b:55:f2:82:dd:67:51:ef:a1:2c:a9:
         66:07:7c:6a:01:83:82:67:ec:6a:af:6c:83:02:6c:8d:0e:06:
         ff:74:29:9e:18:8d:9f:57:3d:b8:c0:e7:4d:9a:e0:e3:96:c9:
         01:6d:1f:1b:bd:e8:93:cf:72:4c:f1:ca:13:cd:7e:ff:db:01:
         db:46:1e:3a:4d:3e:f6:3b:73:6a:fb:48:d0:b2:1f:ad:ce:37:
         c8:60:32:ce:06:1f:2f:7a:1f:1a:15:78:be:78:5c:f3:2d:b9:
         ef:ea:69:4d:a2:9e:29:d8:c7:bb:1c:7a:79:48:37:09:19:66:
         4c:cb:78:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org