Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3133372e3235322e302f32332d3234203d3e20323637333031.roa
File:                     3137372e3133372e3235322e302f32332d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          x//+MrBjhGXP+MyvW/O+8NwpojUkMumVyO5Iz5ab3ts=
Subject key identifier:   B5:E9:9F:95:9B:6B:09:EB:2E:B0:04:60:C0:1A:7F:91:2D:20:B6:ED
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       4258C42AF7CDD6139FFC8CACFED975FE5425BA1B
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3133372e3235322e302f32332d3234203d3e20323637333031.roa
Signing time:             Fri 19 May 2023 22:05:10 +0000
ROA not before:           Fri 19 May 2023 22:00:10 +0000
ROA not after:            Fri 17 May 2024 22:05:10 +0000
asID:                     267301
IP address blocks:        177.137.252.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:58:c4:2a:f7:cd:d6:13:9f:fc:8c:ac:fe:d9:75:fe:54:25:ba:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 19 22:00:10 2023 GMT
            Not After : May 17 22:05:10 2024 GMT
        Subject: CN=B5E99F959B6B09EB2EB00460C01A7F912D20B6ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:30:fb:f3:65:87:67:3f:e1:03:e7:20:3f:
                    0b:2c:dc:6b:66:71:b6:ec:1c:31:77:24:94:7d:c7:
                    20:19:d5:61:95:10:11:a8:20:2e:89:c1:0a:bc:ac:
                    2f:4b:d5:95:36:45:5a:70:fe:96:c6:c2:4e:1e:f5:
                    9b:0f:49:3d:6c:4b:da:0b:2d:77:48:a2:a5:7d:52:
                    e4:42:c3:be:71:1c:09:7b:fc:10:c3:a1:72:4a:2f:
                    3e:95:38:fd:4b:a8:ae:93:c1:9a:01:39:ab:24:d1:
                    1b:42:4a:0a:3a:8f:f7:b6:a4:88:36:27:dd:0b:45:
                    16:04:09:eb:45:c3:63:ed:00:53:5a:05:ca:c4:57:
                    50:07:f7:e2:5e:32:da:de:73:88:1f:e6:e9:57:77:
                    d8:f1:3d:54:a2:56:6e:7f:57:5c:2d:39:e2:d3:eb:
                    21:27:2a:30:04:e0:cb:b5:c4:57:eb:ea:0e:6f:c3:
                    8a:51:5d:c6:6d:af:9a:8a:a8:3e:5a:f9:7f:f3:62:
                    8b:06:1a:95:54:bb:d0:ee:5b:4a:a0:3d:d2:36:d5:
                    9b:42:8e:5d:f8:3a:a6:ea:77:e5:db:50:64:4c:de:
                    30:df:61:f7:8e:da:b0:a5:c2:f0:f7:45:42:0f:d8:
                    b4:51:92:bf:78:b3:20:8a:92:26:83:79:44:dc:34:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E9:9F:95:9B:6B:09:EB:2E:B0:04:60:C0:1A:7F:91:2D:20:B6:ED
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3133372e3235322e302f32332d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:5b:77:26:8c:66:22:25:02:c3:7f:c4:e4:77:26:fc:34:1d:
         9f:06:95:eb:a4:f8:99:45:8a:91:ec:6b:02:26:9d:ab:be:ad:
         06:3a:e2:94:09:26:9e:87:71:48:af:46:96:97:20:47:ff:61:
         f4:15:87:5f:0e:54:02:8b:7b:34:cb:92:d9:b5:87:7f:71:11:
         7e:10:4a:76:ee:e3:a2:ea:3f:cb:90:b3:ac:d1:8a:c4:cd:b2:
         1c:dd:09:de:08:ef:77:58:69:be:c4:09:a0:49:16:43:70:f3:
         a0:85:2f:87:b1:8c:2b:d1:5b:79:e0:55:23:b1:cf:4a:07:df:
         4b:e8:c6:c8:21:c0:d2:98:65:23:5b:14:91:af:50:24:18:1a:
         a7:12:31:75:6f:79:64:a6:23:cb:8f:97:67:40:26:5a:c5:cf:
         d3:87:03:4d:38:59:57:10:53:12:2f:f9:fb:35:9d:5a:0e:c7:
         56:d9:20:e2:f3:d3:e4:24:87:5e:c5:7b:95:30:99:e3:cb:33:
         a5:9a:b1:25:86:57:06:88:18:2b:b8:27:b4:0d:b6:1e:0e:88:
         1f:ec:4b:c1:20:89:9e:17:df:e5:95:04:da:ef:62:a3:5b:bb:
         4d:e1:f9:05:e7:8a:d3:f1:73:dd:cf:a0:bb:41:90:eb:fd:80:
         bf:7b:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org