Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3137372e3139302e36382e302f32332d3233203d3e20323633323839.roa
File:                     3137372e3139302e36382e302f32332d3233203d3e20323633323839.roa (raw, json)
Hash identifier:          v5FVh3GJYMGFLhmr6W+X01gzfwjtLRdY3PIB38k3rQQ=
Subject key identifier:   33:B2:79:8B:16:5F:85:B4:A9:CD:33:3F:64:DF:00:65:5F:6D:C6:F8
Certificate issuer:       /CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
Certificate serial:       43B32944E084C2B1CDB11A6DA89AE0E7DB5CBEDF
Authority key identifier: 8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3137372e3139302e36382e302f32332d3233203d3e20323633323839.roa
Signing time:             Tue 16 Jan 2024 20:01:51 +0000
ROA not before:           Tue 16 Jan 2024 19:56:51 +0000
ROA not after:            Tue 14 Jan 2025 20:01:51 +0000
asID:                     263289
IP address blocks:        177.190.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b3:29:44:e0:84:c2:b1:cd:b1:1a:6d:a8:9a:e0:e7:db:5c:be:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
        Validity
            Not Before: Jan 16 19:56:51 2024 GMT
            Not After : Jan 14 20:01:51 2025 GMT
        Subject: CN=33B2798B165F85B4A9CD333F64DF00655F6DC6F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fe:98:14:32:25:a9:4b:aa:22:0c:54:5c:16:
                    44:d7:33:db:35:51:75:8a:c5:24:10:7e:be:a9:77:
                    42:5c:b3:cf:18:9e:1b:51:22:9a:79:0e:1c:68:9a:
                    8f:37:57:dc:73:62:52:99:e3:5e:00:b4:be:c4:4e:
                    47:19:2e:78:f9:38:dc:c2:c3:58:95:7a:8f:c0:e3:
                    60:88:c8:89:07:a1:bd:f3:80:3a:46:37:05:6e:d1:
                    d4:2b:9e:ad:a1:62:41:1c:8e:a4:a2:4c:fa:c6:c4:
                    9a:c6:98:9a:02:ae:7f:a4:9d:04:bd:0d:d0:82:19:
                    50:22:72:45:fb:87:51:60:d7:e2:0d:4a:48:db:9e:
                    86:56:15:26:da:1d:51:61:7e:b2:6e:5e:1f:6a:ed:
                    0e:e3:66:04:2a:5b:7d:0f:92:da:8e:b7:5b:18:30:
                    28:ff:a6:f2:3c:87:2b:71:71:96:be:ee:11:2d:4d:
                    ea:3b:ca:97:00:65:43:65:5a:f8:d6:f4:c0:ba:f1:
                    a7:97:fc:f2:09:87:d1:d8:f2:d2:73:a3:a8:5a:20:
                    c1:bc:96:68:c6:e1:5b:af:dc:8e:68:ab:8f:27:2e:
                    a1:4d:ff:fa:5b:29:58:7f:ab:86:57:72:51:5f:8d:
                    83:68:01:b4:63:d0:fd:1a:b2:14:34:f9:4e:5e:f2:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B2:79:8B:16:5F:85:B4:A9:CD:33:3F:64:DF:00:65:5F:6D:C6:F8
            X509v3 Authority Key Identifier:
                keyid:8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3137372e3139302e36382e302f32332d3233203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:79:b6:62:27:00:9a:80:8a:43:51:b2:b8:03:6c:bd:35:d6:
         c1:58:9a:57:63:43:27:d6:ef:5f:14:9a:5a:0b:c2:f2:8a:88:
         c3:a3:4b:c2:3a:bc:8b:2f:42:ea:85:39:86:64:73:11:7a:73:
         f4:7e:d8:72:5b:97:8b:f6:5e:c6:f1:85:77:3d:4f:32:da:bb:
         89:d0:9b:87:b0:98:63:0c:82:dd:15:ff:61:6a:7e:1e:e6:1f:
         6f:5f:16:6c:c0:fb:c0:d7:14:23:ee:09:e3:57:66:06:e3:98:
         e4:ec:fe:9b:8a:0b:54:01:40:51:bf:33:e0:38:e8:77:32:43:
         cf:3b:66:f2:d6:24:02:1c:e6:9c:1c:33:21:ac:47:f5:83:c7:
         bc:82:88:72:df:8f:17:a6:7f:ce:e5:6f:d1:2b:8f:d1:ab:f7:
         49:51:40:dd:54:64:e3:37:ef:85:d1:1c:17:df:c7:e9:5e:04:
         b6:d9:87:a7:29:c4:c7:30:25:c8:61:1c:0d:f2:52:72:86:85:
         0d:6e:51:b3:25:74:1b:e3:34:e3:a3:cc:05:03:49:f3:fc:02:
         1e:b5:d8:fb:bd:0d:3a:b2:56:1b:6f:85:46:6b:c3:8b:62:37:
         d2:e3:49:74:8e:0f:21:43:73:07:c9:a4:4a:c3:57:3c:9c:3c:
         fa:d4:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org