Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3137372e3139302e37302e302f32332d3233203d3e20323633323839.roa
File:                     3137372e3139302e37302e302f32332d3233203d3e20323633323839.roa (raw, json)
Hash identifier:          01oFZLV4D1utXqWGmjTAgBK40iJzbQFrwyZ+h7ueo/E=
Subject key identifier:   C2:0E:82:0F:8E:BC:8C:7C:7F:51:9D:9C:78:35:5C:05:53:42:C7:32
Certificate issuer:       /CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
Certificate serial:       06045BF7057251922712E64B6B3DB0BB65FA00E9
Authority key identifier: 8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3137372e3139302e37302e302f32332d3233203d3e20323633323839.roa
Signing time:             Tue 16 Jan 2024 20:01:53 +0000
ROA not before:           Tue 16 Jan 2024 19:56:53 +0000
ROA not after:            Tue 14 Jan 2025 20:01:53 +0000
asID:                     263289
IP address blocks:        177.190.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:04:5b:f7:05:72:51:92:27:12:e6:4b:6b:3d:b0:bb:65:fa:00:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
        Validity
            Not Before: Jan 16 19:56:53 2024 GMT
            Not After : Jan 14 20:01:53 2025 GMT
        Subject: CN=C20E820F8EBC8C7C7F519D9C78355C055342C732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:f7:e0:92:6a:a5:dd:8a:0a:b1:b3:a1:d2:
                    f7:16:e3:98:c7:d5:b9:ee:d2:41:f7:96:01:62:b2:
                    6d:a7:38:d7:d4:b5:a2:d1:5e:6e:bd:70:d8:90:9a:
                    d1:a2:7c:7c:05:9e:2e:f7:a3:77:ce:8f:84:22:e2:
                    e6:a9:e7:b7:40:46:f5:59:c8:8a:15:b1:f2:76:db:
                    41:9c:e8:33:44:9d:d6:67:71:50:7a:2d:7f:57:90:
                    c0:0a:99:2e:60:b8:14:b5:1a:18:8a:e5:c6:8d:37:
                    5a:d4:5d:79:6f:ee:9e:20:f7:77:b7:a9:c5:6f:54:
                    64:2a:55:ee:35:9e:48:77:c1:b4:dd:91:f6:e5:90:
                    42:a0:76:70:b9:9c:fb:f9:46:28:06:18:bb:06:5e:
                    91:ea:29:fd:f3:cc:6a:ca:5f:89:ea:11:39:50:fd:
                    ce:58:89:20:83:46:7e:da:3a:d3:8c:8c:31:59:43:
                    38:52:c4:88:ba:d4:26:6c:8c:17:b6:6c:91:03:4f:
                    01:c3:89:ef:e8:f8:5d:ae:87:7b:76:11:b8:1d:f8:
                    db:f9:20:e3:93:83:c8:a4:6d:29:bf:7b:d2:7d:81:
                    c8:60:15:21:cd:45:35:f5:94:a2:bd:08:9e:15:ee:
                    74:4c:cd:4a:8f:c9:ad:24:a7:34:e8:98:ef:3e:1b:
                    5e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0E:82:0F:8E:BC:8C:7C:7F:51:9D:9C:78:35:5C:05:53:42:C7:32
            X509v3 Authority Key Identifier:
                keyid:8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/3137372e3139302e37302e302f32332d3233203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:5c:f8:95:ac:6f:76:7e:51:34:c0:cf:cd:da:8f:92:66:e1:
         c3:15:bb:fd:04:a4:32:5a:93:13:81:f5:95:38:42:78:74:8b:
         bc:fa:e7:1f:bf:8d:a5:0c:7d:8c:2b:d0:32:48:de:b2:c7:ce:
         8f:6a:95:63:8a:e3:f5:71:d4:5e:b8:dc:13:6f:de:8b:23:4a:
         35:3a:d4:f9:b0:cb:5c:9b:24:7f:31:03:b0:3b:2d:16:66:2a:
         9a:17:1d:12:4a:36:e7:06:43:0b:24:43:be:1a:d3:77:0a:a8:
         13:72:cc:a5:ad:53:6a:01:d1:97:29:aa:39:24:78:24:55:6b:
         e8:18:2e:4a:23:e0:b8:3f:5d:1d:56:17:44:ef:94:03:b9:36:
         b8:00:60:84:34:0d:b5:ad:35:44:b6:a7:e0:5a:f7:3b:43:b9:
         d4:7f:f5:c9:61:99:37:10:10:cd:cd:71:b7:d7:e0:34:89:12:
         7a:bf:ec:ae:6b:1d:3b:6b:7e:e1:64:d8:47:9a:e5:e2:0e:8e:
         09:a1:60:3e:08:79:a7:d2:8f:70:68:be:68:52:36:91:de:72:
         bb:59:94:12:a9:c6:91:1b:8a:0f:a6:6b:b6:c1:d7:57:3f:9d:
         f0:d9:a0:1f:27:54:67:14:93:5a:ba:df:aa:d6:a8:80:74:a0:
         58:f1:17:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org