Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3230362e302f32342d3234203d3e203533303539.roa
File:                     3137372e3133372e3230362e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          ypl5EtmQpGTLMxbGRMct6tScrTjgUSQNEIUl3n1N2d8=
Subject key identifier:   0C:A0:D7:C6:0D:26:1C:24:27:85:1A:69:B4:59:38:F7:A2:64:48:B0
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       37EAD4BBD63FEFE82CB21A7380881D1D0D306936
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3230362e302f32342d3234203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:12 +0000
ROA not before:           Fri 03 Mar 2023 12:13:12 +0000
ROA not after:            Fri 01 Mar 2024 12:18:12 +0000
asID:                     53059
IP address blocks:        177.137.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ea:d4:bb:d6:3f:ef:e8:2c:b2:1a:73:80:88:1d:1d:0d:30:69:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:12 2023 GMT
            Not After : Mar  1 12:18:12 2024 GMT
        Subject: CN=0CA0D7C60D261C2427851A69B45938F7A26448B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a6:bf:cf:5a:89:8e:85:d5:76:3f:e2:04:5d:
                    50:7d:84:98:01:7b:b2:4d:a6:43:7f:a8:dc:a0:06:
                    11:22:c7:76:ed:84:11:c6:65:43:4d:52:30:d2:59:
                    3f:7f:56:57:39:bb:b0:7b:d4:94:e0:0e:67:80:29:
                    e0:a1:95:a7:b8:1c:8d:d5:b3:e3:b9:50:22:fa:f5:
                    12:f6:ee:da:cf:29:97:8c:c4:55:08:78:c9:ec:fd:
                    ce:48:17:46:9c:6f:1e:92:fc:95:af:b1:a9:9e:7c:
                    70:0c:c6:1a:a3:04:b2:dc:4e:0c:5b:04:e7:bf:9f:
                    cc:6e:d9:1a:6b:a1:d6:e8:a0:35:54:ab:d8:11:2b:
                    15:b3:f8:18:8a:4e:02:8e:a1:cc:c0:ef:fd:78:cf:
                    a4:df:2d:90:03:ec:45:ea:81:cf:27:25:99:73:34:
                    7f:d9:7b:b2:bf:9e:bc:75:96:40:a3:ae:be:b0:92:
                    20:9d:9d:0b:4f:fa:b4:8e:84:09:14:f7:60:f8:68:
                    1a:bc:fa:85:05:96:e3:f9:2d:43:d1:b8:32:d7:66:
                    e1:d5:fd:a7:0f:93:05:ac:6c:88:20:b2:2b:d7:90:
                    67:59:4a:a6:f7:c1:f3:e1:39:19:23:dc:2e:01:60:
                    4a:13:1c:3a:c3:85:74:df:ae:5b:ec:8c:ca:48:e6:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A0:D7:C6:0D:26:1C:24:27:85:1A:69:B4:59:38:F7:A2:64:48:B0
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3230362e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:95:74:c4:bb:9c:ab:43:42:32:c4:f7:7b:0e:c9:63:ed:02:
         6d:45:eb:bc:f2:e4:16:93:16:6a:33:db:d9:f6:0d:04:ec:13:
         4b:e8:24:bb:1f:53:8e:3f:5f:92:e1:e8:cc:dd:71:21:15:1e:
         40:6f:6b:9f:32:a3:4e:b4:ef:76:09:56:79:8c:41:13:18:6a:
         7d:1a:27:98:8d:b7:68:8c:1d:b7:90:69:18:19:8a:94:f3:8e:
         f3:50:e5:41:e2:08:0e:17:9e:4c:81:33:85:5b:60:20:88:bf:
         ba:29:ad:db:37:b7:b4:dc:9d:27:89:bf:47:d0:1b:19:05:4f:
         49:75:4f:7e:95:95:1d:7b:08:86:19:c6:92:85:d3:cf:e6:b8:
         0d:51:01:e3:c7:05:87:0b:2f:b1:9f:fa:f3:1b:98:d3:98:a3:
         16:e1:44:72:38:e0:d6:ef:e4:03:87:64:c2:8c:1a:98:9f:e6:
         e4:51:b7:b0:a0:c8:d8:99:e6:64:89:51:5b:4b:27:22:a2:d1:
         2a:b3:69:81:25:78:fd:23:f5:5a:fb:fb:6f:79:9c:7b:50:37:
         8e:67:2a:a1:32:ef:db:11:06:a5:2b:65:ce:1f:7e:df:04:ef:
         62:14:36:10:cb:01:54:91:c1:be:83:40:3b:0c:93:dc:2d:61:
         7f:25:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org