Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/3137372e3232332e3234302e302f32302d3234203d3e203533313532.roa
File:                     3137372e3232332e3234302e302f32302d3234203d3e203533313532.roa (raw, json)
Hash identifier:          sNXYXEIauWo11w9MXYEMwR6oQbvGlWbtJ9KlBSoTTN4=
Subject key identifier:   6A:31:03:B7:1C:4B:C7:19:39:2A:5A:3D:68:D7:F7:4A:9D:C9:92:57
Certificate issuer:       /CN=DEEE3D28D5A12448565CED39037051D4B533893D
Certificate serial:       4CF7E6E363A6724B004C037F4805E8C181D34A39
Authority key identifier: DE:EE:3D:28:D5:A1:24:48:56:5C:ED:39:03:70:51:D4:B5:33:89:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEEE3D28D5A12448565CED39037051D4B533893D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/3137372e3232332e3234302e302f32302d3234203d3e203533313532.roa
Signing time:             Thu 21 Mar 2024 21:00:25 +0000
ROA not before:           Thu 21 Mar 2024 20:55:25 +0000
ROA not after:            Thu 20 Mar 2025 21:00:25 +0000
asID:                     53152
IP address blocks:        177.223.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f7:e6:e3:63:a6:72:4b:00:4c:03:7f:48:05:e8:c1:81:d3:4a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEE3D28D5A12448565CED39037051D4B533893D
        Validity
            Not Before: Mar 21 20:55:25 2024 GMT
            Not After : Mar 20 21:00:25 2025 GMT
        Subject: CN=6A3103B71C4BC719392A5A3D68D7F74A9DC99257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2b:b3:09:b2:96:13:a0:ff:e2:7f:69:ad:dd:
                    c7:66:2a:c7:bc:63:0e:a3:a3:4f:92:28:f2:07:39:
                    25:c5:40:a0:af:5a:8c:82:64:2d:bb:90:da:3e:0b:
                    ef:44:95:bb:d1:5d:19:a0:dd:ad:f0:ac:30:a7:14:
                    59:fb:41:f4:50:74:09:c3:b6:87:47:02:d0:1a:9a:
                    d0:6f:84:7e:19:a3:3f:c1:3d:16:cb:92:c7:00:9b:
                    d8:d6:59:be:e9:a1:5c:20:bc:0e:b6:68:43:8d:5c:
                    a8:1e:bc:6d:81:3d:ca:ff:e4:89:02:17:1f:27:3f:
                    06:c9:36:35:c5:82:0a:b3:b8:d6:fa:3b:58:75:a4:
                    1d:4a:ff:76:9f:c0:7b:50:1d:32:42:79:9e:9b:62:
                    60:1f:d1:2b:cf:dd:fe:8e:fa:5b:4b:79:89:3b:8d:
                    76:ac:71:ea:17:84:e1:d1:c0:31:c3:a2:0f:dc:e0:
                    a3:ef:bc:0c:47:9e:42:04:14:0f:e0:88:9d:e5:e2:
                    4f:bc:fc:ae:4c:af:34:7b:79:3c:4b:9f:33:08:db:
                    ee:2d:2e:89:f4:f1:81:21:de:48:21:04:ab:9c:c8:
                    7c:40:c2:09:8e:57:54:e6:65:f8:84:69:8b:61:40:
                    5e:96:62:3a:3b:44:cd:ff:08:47:ca:97:e6:2f:20:
                    ea:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:31:03:B7:1C:4B:C7:19:39:2A:5A:3D:68:D7:F7:4A:9D:C9:92:57
            X509v3 Authority Key Identifier:
                keyid:DE:EE:3D:28:D5:A1:24:48:56:5C:ED:39:03:70:51:D4:B5:33:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/DEEE3D28D5A12448565CED39037051D4B533893D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEEE3D28D5A12448565CED39037051D4B533893D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/3137372e3232332e3234302e302f32302d3234203d3e203533313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:a6:12:97:71:7b:ec:c1:3f:a9:47:21:4d:7a:b4:05:a6:ca:
         1a:fe:ce:15:69:89:26:33:3c:4a:a9:11:e4:7b:96:ae:4a:4b:
         84:70:d1:62:78:3c:00:9d:e7:e3:79:2c:6b:53:c9:b7:da:92:
         58:53:cb:a7:fa:c5:b8:19:13:aa:b4:1f:e5:40:5d:88:84:b2:
         4a:6f:c6:eb:80:72:ef:9e:d7:ce:a6:c6:94:2c:8f:21:26:86:
         3f:7c:59:2c:d4:29:be:da:18:cf:33:42:65:5c:5d:79:87:a6:
         e2:5f:2d:e3:df:7c:3b:86:7f:7b:11:a0:22:2d:f9:d9:98:a7:
         f0:99:a2:48:91:2f:35:7b:12:82:09:f4:2b:3d:2e:c4:29:f3:
         2f:cc:15:97:25:75:13:c9:4b:05:22:cf:a8:fc:f2:e2:4b:65:
         f9:c9:6a:f0:b1:bd:5e:5a:e1:ea:ac:6a:53:2d:ee:85:41:4c:
         4b:f3:b3:eb:7a:50:87:9a:ac:2e:c4:50:62:e9:e2:84:0e:a6:
         0d:86:93:9c:00:21:5b:a7:17:e9:1a:37:47:4f:58:f3:7f:63:
         ce:86:e4:1f:a1:7e:b0:73:5c:0d:5a:f6:62:8c:61:f1:9a:b1:
         50:5f:0b:c5:99:63:ce:71:74:77:0f:ce:db:b2:c5:15:06:39:
         28:d4:4a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org