Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/3137372e3135342e31382e302f32342d3234203d3e20323632393432.roa
File:                     3137372e3135342e31382e302f32342d3234203d3e20323632393432.roa (raw, json)
Hash identifier:          TxXu8NnBCbKBxMXuCmUaeSk31XH6wtrrPi/t4ITwTSM=
Subject key identifier:   72:1E:95:59:D6:A5:16:BD:97:CF:E9:A5:C4:E4:B7:15:F1:DD:9F:2D
Certificate issuer:       /CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
Certificate serial:       4EFC408E8D9B0499CF10EA4DE2625BFD46B8C965
Authority key identifier: DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/3137372e3135342e31382e302f32342d3234203d3e20323632393432.roa
Signing time:             Fri 23 Feb 2024 16:00:00 +0000
ROA not before:           Fri 23 Feb 2024 15:55:00 +0000
ROA not after:            Fri 21 Feb 2025 16:00:00 +0000
asID:                     262942
IP address blocks:        177.154.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fc:40:8e:8d:9b:04:99:cf:10:ea:4d:e2:62:5b:fd:46:b8:c9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
        Validity
            Not Before: Feb 23 15:55:00 2024 GMT
            Not After : Feb 21 16:00:00 2025 GMT
        Subject: CN=721E9559D6A516BD97CFE9A5C4E4B715F1DD9F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ad:5c:32:f1:7f:8e:23:11:45:25:e1:c1:a6:
                    ff:0a:36:db:c0:6f:53:5b:c5:38:74:0e:f4:8b:af:
                    1a:c5:45:e0:68:14:d0:8a:73:c3:90:e9:0a:29:66:
                    e3:90:7e:2f:34:a6:d0:5f:84:f0:fa:8f:d8:54:a5:
                    f4:da:cb:2c:5c:05:ae:5f:27:f9:e1:5b:f7:7f:97:
                    3a:30:28:01:de:33:49:88:7a:22:50:32:50:88:7a:
                    bc:9e:b9:53:20:00:8f:be:51:84:00:d0:75:f3:a8:
                    3e:6a:4c:c5:19:15:30:ba:3f:28:b4:90:22:53:26:
                    28:c7:b3:88:88:3c:c5:7c:dd:bf:84:15:38:d5:57:
                    fc:4a:46:28:da:69:03:8e:e4:3c:4a:54:5a:a3:60:
                    f2:e0:8d:70:b9:43:98:6c:8a:5e:5b:1c:34:50:76:
                    0c:f2:60:57:04:eb:9e:d5:19:be:40:ec:d0:4b:6e:
                    53:31:5b:d3:cf:03:f5:aa:fa:52:28:61:5f:89:04:
                    02:94:2c:a0:77:e2:91:99:83:a2:30:69:a1:cb:38:
                    28:01:3f:26:c4:82:46:75:16:a7:6b:2a:4c:9d:72:
                    c0:78:76:9b:b5:35:fc:be:39:55:20:cc:d2:5c:a6:
                    a7:d1:ef:8a:2f:b6:3c:96:79:45:ef:2a:af:bc:d4:
                    bb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1E:95:59:D6:A5:16:BD:97:CF:E9:A5:C4:E4:B7:15:F1:DD:9F:2D
            X509v3 Authority Key Identifier:
                keyid:DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/3137372e3135342e31382e302f32342d3234203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:da:0f:fb:cd:5c:e3:6c:5d:a2:bc:70:47:d2:9c:98:79:ee:
         b2:a5:83:28:6c:30:78:ff:0a:00:11:2f:4c:c5:dd:33:69:53:
         fc:01:10:c0:76:5b:47:e7:ac:37:40:d7:f1:99:7d:8f:21:8d:
         1d:63:e9:e6:ec:55:31:33:64:d6:58:97:6f:43:56:d8:d6:77:
         2d:43:31:7c:c4:20:ff:ee:1b:d2:c8:0d:4d:f0:bf:97:d5:6b:
         18:b9:59:5c:4f:9e:e4:4d:e0:a1:bd:23:6d:9a:f6:42:6e:85:
         64:55:a3:9b:76:05:b8:d7:2d:b0:a1:6d:92:d4:88:d5:02:37:
         ca:28:0a:a3:fc:1e:f5:6b:e3:e4:f2:08:79:80:95:76:e6:d4:
         ea:4d:61:e8:a3:2f:2c:0a:c8:49:15:f9:be:21:e4:82:98:7c:
         42:9f:93:24:f4:69:25:5b:3e:8f:53:c6:9e:fe:1b:1a:da:4c:
         30:f2:79:08:c8:a6:a1:28:86:e5:9d:9f:05:72:5d:a0:2d:80:
         2c:04:17:32:87:24:0c:03:d7:d6:33:8f:77:80:74:4b:05:ed:
         64:00:d7:73:37:66:d8:a3:e1:23:8f:67:6e:66:c5:ec:97:86:
         f1:e1:67:0c:04:5c:8b:a8:01:31:b5:1b:21:f4:7e:ff:5b:ae:
         0b:74:17:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org