Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/3137372e38342e3130382e302f32322d3234203d3e203532373231.roa
File:                     3137372e38342e3130382e302f32322d3234203d3e203532373231.roa (raw, json)
Hash identifier:          6VtBWqXO5HpqWgFfhAzN58oBbW1iNsfP7lQZ98waZcg=
Subject key identifier:   AB:39:B3:A0:88:65:CE:3A:0E:1F:60:8E:51:CB:08:EF:36:90:F3:FC
Certificate issuer:       /CN=68B79D737297088228371E4509382F36484FD924
Certificate serial:       21103BF83A278C234D5CF9A7F83C313ED28FB4E1
Authority key identifier: 68:B7:9D:73:72:97:08:82:28:37:1E:45:09:38:2F:36:48:4F:D9:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68B79D737297088228371E4509382F36484FD924.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/3137372e38342e3130382e302f32322d3234203d3e203532373231.roa
Signing time:             Wed 02 Aug 2023 19:29:16 +0000
ROA not before:           Wed 02 Aug 2023 19:24:16 +0000
ROA not after:            Wed 31 Jul 2024 19:29:16 +0000
asID:                     52721
IP address blocks:        177.84.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:10:3b:f8:3a:27:8c:23:4d:5c:f9:a7:f8:3c:31:3e:d2:8f:b4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B79D737297088228371E4509382F36484FD924
        Validity
            Not Before: Aug  2 19:24:16 2023 GMT
            Not After : Jul 31 19:29:16 2024 GMT
        Subject: CN=AB39B3A08865CE3A0E1F608E51CB08EF3690F3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:4b:d0:a6:25:db:7e:a8:bc:26:97:c1:71:
                    65:4e:9c:50:d6:5b:12:61:e1:0c:a5:9c:7d:4a:ee:
                    77:89:8e:34:c0:76:5b:6b:22:8f:b9:c9:04:27:d7:
                    00:bf:ab:68:72:e5:9d:72:c3:4f:d0:66:37:b2:93:
                    8a:03:6b:82:32:ff:e6:53:75:54:02:1f:dc:0d:3a:
                    f1:7f:f5:cd:15:a7:e9:06:15:62:34:13:75:37:d1:
                    81:3f:20:82:5f:14:f1:cb:13:92:92:a9:07:6a:3b:
                    7d:17:c0:43:6c:5a:9c:d2:74:31:6a:40:83:16:09:
                    8c:f6:b9:12:62:53:0a:cf:55:cc:81:a5:96:1c:c2:
                    18:0c:1c:3a:6a:e8:ed:1d:7f:3b:97:26:9a:78:0f:
                    a1:0c:b9:c7:79:a7:67:6c:a1:9b:cb:66:68:6a:54:
                    9b:3e:37:69:1e:6b:96:d5:19:53:ac:94:f8:43:47:
                    3c:95:5a:f4:33:bf:5c:32:a7:c7:d3:7e:b7:f3:45:
                    79:7f:03:de:dc:bb:c2:5b:bb:85:d7:81:2a:ef:f1:
                    c5:11:01:8c:b2:3e:9a:f1:05:9e:ce:91:65:15:54:
                    17:b6:18:b9:b9:09:0f:9f:5d:8e:71:10:0a:7a:0c:
                    2c:95:a9:41:33:1e:b3:a5:b7:99:38:5b:66:e6:e0:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:39:B3:A0:88:65:CE:3A:0E:1F:60:8E:51:CB:08:EF:36:90:F3:FC
            X509v3 Authority Key Identifier:
                keyid:68:B7:9D:73:72:97:08:82:28:37:1E:45:09:38:2F:36:48:4F:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/68B79D737297088228371E4509382F36484FD924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68B79D737297088228371E4509382F36484FD924.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/3137372e38342e3130382e302f32322d3234203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:61:57:a0:0f:a8:74:77:da:af:23:f0:66:7f:90:15:92:0b:
         11:59:78:b0:45:6a:71:00:70:bb:17:a9:01:77:d7:a8:35:40:
         73:b7:73:26:51:3e:e7:76:0d:5c:e1:3c:b4:82:dd:45:45:fa:
         1d:e7:8b:dd:71:15:e2:c7:77:30:0e:a2:6a:a3:ba:90:81:aa:
         aa:47:de:45:73:3f:5f:d7:71:c2:62:fb:3b:80:24:89:42:0b:
         5b:11:68:cf:16:31:fe:24:cf:ad:da:ff:2b:29:32:3e:51:6f:
         b6:52:e8:71:26:e3:47:cb:79:df:eb:6f:52:73:d3:69:2f:8d:
         b7:67:3d:05:66:e9:a0:73:dd:73:b8:65:36:07:10:73:9f:e8:
         b4:28:91:cb:30:05:40:23:da:38:98:24:4d:a0:05:8a:05:ea:
         3f:5c:e6:16:e8:4e:a3:c8:14:2b:69:3c:c2:e6:d3:fe:1e:b8:
         35:d0:2d:bb:e0:88:82:de:0d:07:42:7a:af:1b:15:83:b5:7c:
         62:56:c7:34:c7:ca:d2:4a:de:00:60:c3:7d:75:85:ba:76:4e:
         af:38:9a:4d:ff:5e:5d:82:ff:3e:c8:7f:39:64:a7:65:91:cf:
         39:c3:74:0b:04:9d:9b:6f:29:0c:59:98:13:08:98:20:6e:5f:
         9b:66:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org