Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3230362e302f32342d3234203d3e203238323230.roa
File:                     3137372e3133372e3230362e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          4GA12T8zG9jhUnDUaY7MX8NQZBb9SfuNVRBhP/g8Hjc=
Subject key identifier:   AB:2B:F7:77:8E:B1:48:42:F9:25:4B:3F:13:D6:CD:15:55:88:B1:71
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       4C65D04728150C954A12F4F0291DE5274B755EC5
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3230362e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:20 +0000
ROA not before:           Tue 12 Mar 2024 19:46:20 +0000
ROA not after:            Tue 11 Mar 2025 19:51:20 +0000
asID:                     28220
IP address blocks:        177.137.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:65:d0:47:28:15:0c:95:4a:12:f4:f0:29:1d:e5:27:4b:75:5e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:20 2024 GMT
            Not After : Mar 11 19:51:20 2025 GMT
        Subject: CN=AB2BF7778EB14842F9254B3F13D6CD155588B171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:7a:b2:21:91:19:6f:36:5e:e0:1c:40:b7:
                    55:26:a8:c3:05:ed:45:cf:e0:96:c8:36:99:8a:0b:
                    9d:c7:a1:c1:ac:bc:7b:32:82:17:18:16:64:bd:59:
                    f7:28:f7:59:3a:98:58:ed:e4:e6:d4:9b:8b:4b:b0:
                    a8:55:52:fb:40:76:52:fa:16:51:22:74:36:a4:9c:
                    b7:8a:d2:65:1e:8f:fa:6e:81:97:24:bd:0c:59:48:
                    f2:42:15:e7:72:ad:86:6a:e2:fa:9b:15:56:e0:45:
                    ca:fc:3f:95:db:95:d0:13:b1:f5:5f:70:38:47:45:
                    82:9c:ba:4f:f4:ee:85:69:76:83:2a:4b:f0:b2:95:
                    3b:f6:ba:40:e6:70:36:8f:b5:f4:4c:af:75:3b:f9:
                    6c:c9:aa:1b:1c:ca:59:83:40:84:6f:82:4c:c9:2d:
                    ed:88:97:dc:42:5a:7b:0a:66:ba:38:cc:38:92:8d:
                    44:39:ae:ee:30:2e:d5:0b:40:af:ee:39:63:43:1f:
                    17:7f:b5:f5:c6:9c:90:79:0b:34:f9:25:66:53:02:
                    6c:a3:52:b1:4b:df:7f:4d:d3:37:35:c7:2e:4e:4c:
                    f0:8b:77:73:68:b2:d8:d5:55:5a:e3:d5:bb:09:05:
                    1d:31:b4:2c:c4:a7:d5:29:63:31:a0:6b:1e:c5:4d:
                    dc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2B:F7:77:8E:B1:48:42:F9:25:4B:3F:13:D6:CD:15:55:88:B1:71
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3230362e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:bc:e9:7a:6b:a1:f0:72:a1:ee:45:fb:33:71:3c:da:99:26:
         51:a3:20:78:17:7a:fc:df:41:cf:5b:79:1f:41:ce:9b:36:48:
         b5:71:df:f6:e6:01:05:13:43:c0:7b:16:0b:64:0e:dc:16:d5:
         18:22:f8:da:15:af:5a:63:d4:2c:63:18:66:ca:0b:b9:8f:0a:
         80:49:f8:ac:96:d1:ed:36:82:37:f7:05:86:92:53:26:f9:32:
         26:eb:30:9d:ef:e2:9f:2b:cf:37:51:10:2e:67:33:c3:18:e3:
         fb:a8:3d:a5:7d:56:5e:fe:ec:30:b1:25:b8:0f:b0:d1:23:ce:
         30:77:3f:89:78:16:8b:72:1d:54:1e:1c:c2:4b:0a:af:e5:9d:
         ed:a6:7f:6c:4e:37:3f:b5:c7:73:72:2b:8c:e1:4b:7d:06:f7:
         49:84:66:e8:13:a0:4b:ca:17:07:db:14:18:da:35:d8:e2:25:
         d2:26:c4:61:4e:d9:aa:b8:49:e4:0a:56:a5:5b:b1:19:07:39:
         e5:2c:a9:18:4f:80:d8:4c:2f:2a:d8:28:5b:bc:60:40:62:8a:
         fc:ca:7a:0a:41:1f:18:99:25:48:5c:eb:7a:43:c9:8f:f2:03:
         41:57:63:7d:2d:60:98:e3:69:53:a6:b0:b1:9f:a8:e5:62:41:
         9e:d4:ea:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org