Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3230332e302f32342d3234203d3e20323632373230.roa
File:                     3137372e382e3230332e302f32342d3234203d3e20323632373230.roa (raw, json)
Hash identifier:          E0K65Gl+/QSGvPJaB4LUCewSjYQgBq+GkpzA6W5rGkk=
Subject key identifier:   3F:49:F5:E1:E1:49:0E:2E:35:79:F0:02:63:44:ED:89:E1:E5:9F:07
Certificate issuer:       /CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
Certificate serial:       090009B65B104436AA3726709CDFBA1BD19A6282
Authority key identifier: 1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3230332e302f32342d3234203d3e20323632373230.roa
Signing time:             Tue 28 Mar 2023 20:25:53 +0000
ROA not before:           Tue 28 Mar 2023 20:20:53 +0000
ROA not after:            Tue 26 Mar 2024 20:25:53 +0000
asID:                     262720
IP address blocks:        177.8.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:00:09:b6:5b:10:44:36:aa:37:26:70:9c:df:ba:1b:d1:9a:62:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Validity
            Not Before: Mar 28 20:20:53 2023 GMT
            Not After : Mar 26 20:25:53 2024 GMT
        Subject: CN=3F49F5E1E1490E2E3579F0026344ED89E1E59F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:84:11:88:2d:d8:4e:e2:74:85:85:85:85:
                    c5:c1:58:9f:eb:01:a1:e2:d6:f7:b1:f3:eb:5f:3d:
                    4f:6c:15:ef:9e:8d:6b:7e:c3:69:d0:21:7e:60:cf:
                    3d:20:26:05:da:57:26:4c:a7:15:1d:ca:1e:1d:ce:
                    7b:d6:3a:04:2d:dd:c7:77:49:e5:f3:c5:4c:c9:29:
                    b9:a7:c4:6b:c7:09:0b:68:9d:76:16:4a:73:06:41:
                    65:ca:a7:db:0b:53:71:02:ae:ce:50:2a:a0:8d:52:
                    89:6f:03:18:22:8c:30:50:a3:a8:50:52:2d:fb:c5:
                    42:82:78:b6:b5:61:92:20:c4:81:59:99:70:ea:b0:
                    84:bf:68:28:75:bf:8a:c6:0f:18:3d:69:05:be:7e:
                    28:a5:65:ca:8b:83:18:15:d3:56:9b:0a:2f:31:db:
                    00:c2:e0:ca:bd:56:23:c3:90:27:c9:90:88:95:30:
                    ea:25:8b:28:90:1a:52:84:ec:a7:15:48:c2:ab:99:
                    c5:55:a2:2a:f9:90:4d:a9:1f:20:c4:b7:a9:4a:e0:
                    47:65:2f:c5:c1:6d:3e:6d:e9:f0:b8:d6:48:58:5c:
                    ff:d1:54:58:ff:d0:11:74:2a:b4:0f:69:ab:d6:de:
                    f7:fe:6a:27:07:4a:08:b2:2c:91:13:97:34:64:4b:
                    61:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:49:F5:E1:E1:49:0E:2E:35:79:F0:02:63:44:ED:89:E1:E5:9F:07
            X509v3 Authority Key Identifier:
                keyid:1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3230332e302f32342d3234203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:45:e1:93:21:cd:b2:a2:73:8b:d6:f9:65:01:b7:e6:ab:78:
         1e:2c:13:1b:f7:3a:21:ad:03:94:65:94:75:fb:7e:70:84:12:
         ac:68:81:35:2e:37:01:d7:94:60:42:ac:f8:f2:14:51:8d:10:
         0d:87:67:91:3c:dd:32:57:2e:f5:59:02:eb:74:0a:aa:f7:16:
         d7:72:b2:12:af:90:98:8a:10:7e:5e:44:5f:b8:21:ff:58:b2:
         43:f1:59:d4:3d:8b:9b:f4:d5:e4:8c:ac:d6:08:76:00:d6:ec:
         9f:5a:d6:d0:66:c6:52:7e:7c:ae:96:fd:3a:27:e4:96:17:8f:
         42:5a:18:7e:a3:2d:71:1e:f4:31:70:c7:c7:cb:92:85:93:29:
         ef:01:e4:b8:c7:eb:9e:09:34:db:7a:f9:77:8a:27:e4:24:2d:
         f9:48:07:94:70:d2:e0:33:2c:3a:7d:26:5f:c0:24:bf:f2:5b:
         c1:8e:96:89:f1:43:32:8e:05:ed:c1:c6:46:44:97:b6:f5:bc:
         4a:ec:3c:5c:c5:a2:72:38:7c:30:97:f9:38:02:02:56:d3:11:
         ff:2d:3b:1f:1d:ef:e3:ed:ab:67:ee:cf:54:7d:f8:3e:e8:6b:
         0c:dd:57:2f:23:93:67:5c:82:c9:d3:88:7a:61:19:dc:fb:8f:
         73:2f:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org