Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3137312e302f32342d3234203d3e203532393133.roa
File:                     3137372e32332e3137312e302f32342d3234203d3e203532393133.roa (raw, json)
Hash identifier:          DC+zFy6Yl52iaFkgFrDMLpR8M9boUpHhFtz0U9Xc7+Q=
Subject key identifier:   FF:41:FD:BF:00:BF:FD:74:CE:F1:CB:1A:5A:81:77:AF:3A:6A:71:6A
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       03FA88FF3DC0433E60B877FF8F2D3C3483024B93
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3137312e302f32342d3234203d3e203532393133.roa
Signing time:             Thu 07 Mar 2024 21:20:36 +0000
ROA not before:           Thu 07 Mar 2024 21:15:36 +0000
ROA not after:            Thu 06 Mar 2025 21:20:36 +0000
asID:                     52913
IP address blocks:        177.23.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fa:88:ff:3d:c0:43:3e:60:b8:77:ff:8f:2d:3c:34:83:02:4b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar  7 21:15:36 2024 GMT
            Not After : Mar  6 21:20:36 2025 GMT
        Subject: CN=FF41FDBF00BFFD74CEF1CB1A5A8177AF3A6A716A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:0f:59:20:a3:1e:85:9f:61:0a:ee:0b:2f:
                    c7:4e:18:db:0f:f5:09:6b:47:70:62:e8:26:30:ad:
                    94:b8:8e:36:28:93:34:ed:7a:b4:8f:86:ae:21:a6:
                    ab:1a:5c:83:69:d8:8b:14:70:c9:1d:ed:b0:ca:4e:
                    a3:bf:01:62:e5:ce:86:c8:d9:6a:1b:2f:5c:f3:cc:
                    60:95:e5:d3:fb:e0:29:8c:8d:8c:34:54:1f:3e:44:
                    01:37:d0:e9:54:6f:4e:4a:29:45:7f:a0:70:92:15:
                    f0:3e:08:13:92:bf:4e:91:88:92:96:90:fa:77:e9:
                    a4:be:f7:9a:af:29:40:43:18:92:f0:94:b2:c4:f7:
                    80:f1:0a:83:ce:51:e5:03:e4:fb:f6:2b:64:e4:34:
                    b5:7d:ee:6f:a1:7a:b9:88:bb:99:75:d2:aa:47:ad:
                    b7:b0:4b:a4:56:3e:1b:a7:92:05:1a:0d:c4:08:1d:
                    a7:c8:e3:67:e0:28:67:c8:c4:9c:6d:94:5b:b7:d2:
                    bb:ec:f9:13:b2:36:42:0a:49:98:84:69:22:fe:0b:
                    5c:3c:be:87:a5:d0:70:f3:ef:bd:02:e1:44:2b:fb:
                    bb:1a:4d:57:73:2f:5f:b5:a3:a4:ff:3f:03:d4:cc:
                    93:79:33:c2:fa:86:db:bf:bc:f8:e5:39:6a:13:a9:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:41:FD:BF:00:BF:FD:74:CE:F1:CB:1A:5A:81:77:AF:3A:6A:71:6A
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3137312e302f32342d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:73:3d:9a:c7:2d:ee:41:c3:b2:9f:be:62:14:32:41:87:b5:
         dd:af:e3:6c:d6:65:89:e5:53:b4:21:44:7f:ee:b8:6a:81:3d:
         76:f5:07:23:90:d8:21:2f:6c:6e:68:f1:d7:a2:55:1f:0b:d4:
         de:f7:49:d7:19:5b:de:2f:b4:2e:f8:65:7f:10:4c:f0:2a:ae:
         d2:9d:bc:d7:78:ac:bf:a4:0e:92:cd:15:29:d2:1e:bc:e6:ac:
         17:cc:0f:48:be:76:19:fe:6d:22:c8:64:25:76:b6:b6:a2:ef:
         10:15:85:f7:2a:59:36:96:8d:74:b2:b6:ab:02:a3:9b:27:6f:
         a1:4b:0c:73:f4:81:f2:48:32:86:1b:43:24:e4:b7:c7:2f:0a:
         ff:39:31:49:12:04:f3:16:f7:7e:08:48:7c:34:7f:d4:c8:a3:
         a4:f8:50:80:93:3d:c9:41:02:81:f0:50:93:62:97:db:6d:db:
         6f:1f:96:cf:64:06:f5:1b:d7:5f:c0:3b:b6:c0:7f:e5:f9:0e:
         39:46:90:0a:72:d5:00:7c:b4:7a:09:41:3b:7a:48:6d:65:46:
         19:d8:55:de:0b:bf:c4:40:dc:6f:f2:4d:4d:a5:27:f2:e7:ad:
         e8:37:80:71:75:2f:0a:fb:27:2e:55:46:db:7c:42:fa:e3:4d:
         2a:24:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org