Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130312e302f32342d3234203d3e203631363732.roa
File:                     3137372e31312e3130312e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          /XzmdoVMLZihBSBvef3QjtnXDMnGDkNDcbqBiO+JM1o=
Subject key identifier:   BF:04:E9:5D:06:D9:BB:51:EA:75:44:89:12:32:E1:85:E5:D8:FF:62
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       1ADB61631D15D659BE48FE6570C3A095D33A4494
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130312e302f32342d3234203d3e203631363732.roa
Signing time:             Thu 27 Jul 2023 14:03:57 +0000
ROA not before:           Thu 27 Jul 2023 13:58:57 +0000
ROA not after:            Thu 25 Jul 2024 14:03:57 +0000
asID:                     61672
IP address blocks:        177.11.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:db:61:63:1d:15:d6:59:be:48:fe:65:70:c3:a0:95:d3:3a:44:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Jul 27 13:58:57 2023 GMT
            Not After : Jul 25 14:03:57 2024 GMT
        Subject: CN=BF04E95D06D9BB51EA7544891232E185E5D8FF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a3:a9:1f:59:71:09:2f:5d:e9:d1:93:e1:3a:
                    04:bf:e6:1c:7a:b0:75:3b:d6:2e:91:41:82:62:96:
                    79:d4:70:dc:ac:78:78:4e:6b:01:bf:fe:a1:da:50:
                    5d:fd:6d:8f:7a:ad:36:d7:cd:8b:ef:65:74:16:30:
                    52:23:29:19:3a:c2:65:75:23:30:99:85:71:3b:82:
                    aa:39:32:37:19:d6:b2:d1:a3:56:4a:80:cb:36:2c:
                    73:a0:f0:fd:42:05:08:25:b2:ec:71:26:7d:d0:cc:
                    7c:ca:74:41:a9:83:70:c0:70:75:c4:84:25:0c:53:
                    80:61:33:f5:40:fb:e5:db:98:61:56:f0:19:94:db:
                    04:4f:20:21:a1:a9:86:40:13:18:bb:a8:56:fb:8b:
                    67:a6:50:ac:3b:ff:e4:2b:63:ab:3a:78:1f:55:4e:
                    d4:d7:85:db:50:d3:d4:0e:d5:b0:ec:5e:54:2b:6b:
                    db:28:27:8e:76:76:cf:18:75:95:2a:0a:09:38:c4:
                    d7:1a:0c:39:ba:72:cb:5e:60:38:7e:0d:bc:04:21:
                    6d:d1:26:b3:ef:c7:e0:29:73:ba:0c:e2:a3:c2:82:
                    67:82:07:12:7e:46:96:96:1a:b1:3e:af:2d:81:5e:
                    0a:cb:fc:3c:f5:35:91:38:5f:c9:58:03:99:2e:8b:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:04:E9:5D:06:D9:BB:51:EA:75:44:89:12:32:E1:85:E5:D8:FF:62
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130312e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:06:8e:01:3f:e1:54:7a:a2:26:c0:07:a8:06:8a:f7:44:6d:
         75:ce:97:c4:92:64:48:c8:bd:d4:5a:fb:2e:e2:c1:93:23:3b:
         77:62:61:eb:52:d0:dd:34:68:b0:dc:fb:bb:27:66:21:d7:ee:
         52:5a:b0:7e:9b:68:ec:f0:f5:93:7a:dd:eb:86:04:5d:d1:09:
         46:1c:21:6b:aa:ac:7e:db:46:86:8d:81:9b:39:58:dc:18:41:
         b1:72:99:2e:93:4a:68:ed:94:e1:28:17:df:bd:43:0c:58:27:
         57:86:4a:be:74:80:04:00:8d:6e:ad:2b:96:ed:a0:08:bc:1b:
         66:f2:31:88:a6:c6:d8:a2:90:76:6a:6e:e2:c7:d9:3c:51:47:
         ff:22:7d:c0:25:41:9b:7e:c9:bf:2f:35:b2:c8:65:05:3e:67:
         1c:48:38:fd:ab:b1:1e:2d:d7:01:a0:43:35:76:42:de:18:0b:
         0b:67:ae:83:38:6d:cb:7f:0f:ce:78:27:bd:9b:be:4c:9f:e9:
         57:4f:9c:ab:24:0d:27:c9:41:86:8e:fe:d4:1e:0f:f8:ad:f6:
         8a:0b:49:50:b0:b9:b4:d6:4f:53:78:12:0b:33:25:21:16:43:
         cc:02:27:38:0c:5f:1d:15:90:ea:79:23:03:c2:1f:6a:fd:6c:
         b1:f9:61:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org