Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3137372e3139302e36382e302f32322d3232203d3e20323633323839.roa
File:                     3137372e3139302e36382e302f32322d3232203d3e20323633323839.roa (raw, json)
Hash identifier:          JySOMJPEZUMBKg8a0ey+GfR7SnkYuILM3v1kVC/tZlI=
Subject key identifier:   0D:D5:A4:97:43:4C:BF:B2:1E:C7:51:95:24:36:A9:18:C6:F9:0E:F2
Certificate issuer:       /CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
Certificate serial:       3A39615A2DB264AE2965C1BDE0FCFC263AA3C2B5
Authority key identifier: 8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3137372e3139302e36382e302f32322d3232203d3e20323633323839.roa
Signing time:             Tue 16 Jan 2024 20:01:49 +0000
ROA not before:           Tue 16 Jan 2024 19:56:49 +0000
ROA not after:            Tue 14 Jan 2025 20:01:49 +0000
asID:                     263289
IP address blocks:        177.190.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:39:61:5a:2d:b2:64:ae:29:65:c1:bd:e0:fc:fc:26:3a:a3:c2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
        Validity
            Not Before: Jan 16 19:56:49 2024 GMT
            Not After : Jan 14 20:01:49 2025 GMT
        Subject: CN=0DD5A497434CBFB21EC751952436A918C6F90EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:97:0f:5a:c9:f9:0e:6d:6b:81:1c:35:5e:06:
                    5e:aa:e9:5a:b6:1a:62:65:1a:95:47:8e:65:a4:6f:
                    13:b0:ea:c4:34:da:c6:5a:57:5d:62:ae:a6:8f:6a:
                    97:5e:61:87:fe:3f:32:3c:df:af:b2:11:6d:e9:91:
                    98:2f:1f:9b:e4:8c:70:24:11:03:62:32:92:fe:95:
                    6e:49:8e:2e:ae:3a:2c:1e:d4:9e:e7:98:f1:37:1c:
                    44:9a:02:1a:6c:09:1e:30:71:52:3d:fd:d6:0c:f0:
                    97:c6:c3:c0:7c:b4:34:4f:99:67:17:50:c6:63:1a:
                    2c:d5:4d:82:f4:8a:69:8e:fc:c2:12:14:28:e4:6a:
                    90:9f:2a:0e:9a:27:f8:9f:3e:16:b4:95:5c:6f:0c:
                    db:4d:3e:cb:20:e7:51:4c:0f:95:81:d4:36:27:ca:
                    68:2b:c9:ec:9e:89:70:33:e1:e0:02:85:c6:f2:35:
                    74:bd:71:2b:2f:c2:b1:66:11:6f:4e:bd:34:b2:c9:
                    e3:bb:f2:a4:ba:b9:ec:e7:55:db:79:b0:c0:55:c3:
                    cb:7c:29:b7:8f:c9:c0:27:a3:c5:70:de:b1:9e:0c:
                    74:ab:be:63:9d:7e:ab:ee:dd:c9:9f:c2:30:98:ea:
                    13:4e:90:02:e3:22:70:74:30:6b:04:ec:2d:e5:b2:
                    0f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D5:A4:97:43:4C:BF:B2:1E:C7:51:95:24:36:A9:18:C6:F9:0E:F2
            X509v3 Authority Key Identifier:
                keyid:8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3137372e3139302e36382e302f32322d3232203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:e2:a7:cc:7d:34:77:2d:a9:c8:ab:34:41:43:22:d6:9d:fe:
         81:43:55:d0:aa:1c:47:ee:07:d4:37:2a:9c:7c:83:78:ec:5a:
         19:3c:d2:7d:da:8d:c9:6a:ac:f7:01:cf:95:c4:04:d8:73:78:
         7d:ba:18:16:1b:2a:cc:76:44:6e:d4:c3:56:ac:cb:4e:b1:ba:
         44:70:2a:ee:40:c7:83:cd:7e:b3:c4:20:53:15:9b:a3:4f:12:
         a4:8a:79:10:11:30:af:75:3a:92:fb:b5:57:7f:b4:52:2a:43:
         60:3d:e3:17:33:8a:25:b7:f4:f8:6e:7d:67:9f:02:d7:af:b2:
         b0:5a:ce:cd:cf:5a:70:4f:2f:25:f3:b0:05:b2:a4:96:0c:00:
         8a:9d:4c:90:09:c2:39:ad:03:6c:c1:96:04:fd:3c:7c:f2:2a:
         0e:6a:09:e1:7a:4d:63:5b:f3:5f:0a:a1:2e:9d:72:6c:36:4c:
         56:09:5c:66:e1:8f:09:2e:7a:1d:7b:36:ae:89:1f:c2:a1:51:
         ad:fd:a0:eb:85:35:05:77:49:83:0c:ae:cb:1a:fa:44:18:e3:
         9f:e1:8e:97:5c:6c:89:f1:90:b4:79:76:cd:92:e7:b2:a5:98:
         20:08:bd:be:f3:94:3b:cb:db:0a:35:f0:8a:50:b1:12:22:d0:
         d4:f0:d1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org