Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130322e302f32332d3233203d3e203631363732.roa
File:                     3137372e31312e3130322e302f32332d3233203d3e203631363732.roa (raw, json)
Hash identifier:          BvRxM+DNng8m6KMheOk99eDOnHfskFXJDR55nmln2RA=
Subject key identifier:   9C:EE:2B:64:A6:A9:B1:1B:9D:39:A3:7A:9F:5A:52:83:8A:B0:71:16
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       2DEADEE0A01FE801A6E986D1351979685AF247D6
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130322e302f32332d3233203d3e203631363732.roa
Signing time:             Thu 27 Jul 2023 13:56:11 +0000
ROA not before:           Thu 27 Jul 2023 13:51:11 +0000
ROA not after:            Thu 25 Jul 2024 13:56:11 +0000
asID:                     61672
IP address blocks:        177.11.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ea:de:e0:a0:1f:e8:01:a6:e9:86:d1:35:19:79:68:5a:f2:47:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Jul 27 13:51:11 2023 GMT
            Not After : Jul 25 13:56:11 2024 GMT
        Subject: CN=9CEE2B64A6A9B11B9D39A37A9F5A52838AB07116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:3b:17:70:8b:a0:42:92:cb:9d:2e:08:10:
                    3c:ac:c5:ae:69:c0:23:b6:9b:9c:0a:ef:34:6e:8d:
                    b6:0a:01:65:ef:e0:f2:06:fa:e5:f1:35:af:f0:05:
                    45:86:01:1c:5b:13:bd:34:7b:f8:76:31:cf:84:8d:
                    1e:a6:c8:d2:bb:c2:2f:ce:25:96:c0:dc:e2:55:29:
                    d1:7f:29:05:72:11:4b:ab:1f:25:3e:c6:96:d8:a8:
                    0b:d4:d8:9d:11:e6:9c:fb:e2:1d:79:4a:41:6b:01:
                    84:a5:79:68:c0:e4:08:cc:3c:b1:6c:00:a9:e4:49:
                    e8:3f:98:16:dd:9a:f4:51:79:c4:25:5f:53:53:0e:
                    53:39:0d:d6:50:01:19:47:f6:46:a0:81:2e:d6:15:
                    17:7c:27:26:d4:1a:a3:68:d5:26:57:56:bb:c4:95:
                    f2:fb:94:32:e3:f5:e8:d1:61:ba:5d:8d:13:9a:31:
                    7f:e9:48:a3:2d:5c:5e:49:ec:12:9b:0e:bb:79:41:
                    c6:2b:5e:4b:2d:f5:97:4a:b0:70:6b:9e:dc:5b:52:
                    34:b4:a2:a7:73:60:b2:4c:1e:81:79:28:0c:db:c2:
                    d8:fe:95:02:04:33:52:44:e7:da:6c:63:36:f1:fd:
                    19:9c:53:de:51:44:13:19:7f:cc:ad:23:cd:8a:7a:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EE:2B:64:A6:A9:B1:1B:9D:39:A3:7A:9F:5A:52:83:8A:B0:71:16
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130322e302f32332d3233203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:39:47:54:66:0a:87:70:9d:64:22:67:6a:08:ae:25:e6:8f:
         7d:04:fa:3e:ac:bb:85:bc:0b:17:2f:91:60:a2:f3:f0:75:c6:
         a9:70:2a:b8:a3:8f:88:13:d3:3a:e3:62:72:20:b6:b9:53:4d:
         0f:25:f8:a9:d8:e5:6b:14:50:cd:49:60:41:d8:a4:1c:1d:e2:
         1e:b7:36:16:cf:c5:10:eb:0b:6b:6d:22:33:d7:8d:2f:75:62:
         a8:e4:9c:37:0b:b6:14:a9:ec:b5:37:6a:dc:87:99:f5:2a:07:
         b6:cf:97:34:ec:98:32:2e:a1:67:14:72:6d:6a:f5:39:84:d3:
         d7:0e:60:77:cb:62:c1:2f:35:05:03:c2:c5:2f:b7:10:0a:9b:
         1d:0d:15:a2:64:45:fe:3a:80:de:7c:6d:d9:06:44:b4:9a:56:
         f3:c3:b1:1b:00:4b:13:60:3d:a1:65:29:af:fc:e2:36:61:08:
         76:5a:cc:1a:f9:96:52:aa:61:94:f0:14:43:68:fc:32:a8:cc:
         fa:29:a3:ce:d2:1f:ff:da:e7:0b:c5:ff:ba:0d:e1:a1:61:90:
         36:90:aa:9e:c1:38:12:72:f7:68:cf:cd:ae:e4:e6:d2:a1:f7:
         49:6e:92:a6:a7:a3:6e:65:f5:1e:7f:0d:77:f3:55:b1:af:dd:
         8d:8f:76:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org