Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa
File:                     3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa (raw, json)
Hash identifier:          RUygzxsMdS3T+z/blG93OsFIu1DqYAlbkLz5gMbstaE=
Subject key identifier:   D0:22:7B:89:E1:68:22:D5:6A:EB:67:09:90:65:A0:7B:3F:DE:D6:0F
Certificate issuer:       /CN=6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21
Certificate serial:       241F65500DDAA9432C0F33A4F0BA611D886E026D
Authority key identifier: 66:94:01:4E:FD:E7:26:CA:8D:24:0B:B1:A4:BB:23:DB:7F:0F:3F:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa
Signing time:             Tue 30 Jan 2024 20:37:06 +0000
ROA not before:           Tue 30 Jan 2024 20:32:06 +0000
ROA not after:            Tue 28 Jan 2025 20:37:06 +0000
asID:                     52771
IP address blocks:        177.155.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1f:65:50:0d:da:a9:43:2c:0f:33:a4:f0:ba:61:1d:88:6e:02:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21
        Validity
            Not Before: Jan 30 20:32:06 2024 GMT
            Not After : Jan 28 20:37:06 2025 GMT
        Subject: CN=D0227B89E16822D56AEB67099065A07B3FDED60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:15:57:b4:f3:71:2b:16:b5:46:6c:9b:c3:e2:
                    fc:91:fc:ba:06:45:c3:e0:24:22:ea:06:f9:70:65:
                    e3:33:d0:56:4a:e2:0a:ee:7f:dd:93:92:9d:88:f3:
                    13:e4:da:96:1b:10:22:43:22:85:73:8d:87:2c:38:
                    2e:e8:5c:ae:eb:ee:18:93:76:dd:f4:8d:07:39:a9:
                    42:6e:4b:9e:e1:6a:64:82:7f:4f:de:ba:34:a1:fa:
                    a8:67:57:57:42:58:09:63:39:06:88:84:a4:96:94:
                    6d:2d:a9:24:60:87:d3:c9:e0:d8:2d:67:f4:9c:72:
                    de:82:27:cd:eb:8e:01:4c:3a:9f:3a:43:3a:f0:ff:
                    11:ea:f6:24:ee:3a:1e:dc:2d:77:3e:1e:42:7c:dc:
                    8a:11:c2:e0:c8:a3:38:21:70:7a:a5:a9:a9:71:7b:
                    98:0f:d9:e2:f9:d2:bb:fa:19:82:f6:62:19:0d:c0:
                    63:a5:ed:1e:ce:16:e8:1a:b8:c1:5f:ee:e1:9c:22:
                    4f:88:68:f3:70:cf:65:31:8b:f3:b1:d0:1f:ee:c5:
                    54:b4:cd:0b:bd:5e:18:97:7b:64:6a:c2:9d:83:f4:
                    e3:a5:0f:b9:47:be:01:0a:14:74:6a:5a:c8:ba:f4:
                    fa:8d:f0:02:93:63:27:e3:e2:7c:42:dc:10:e6:68:
                    3d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:22:7B:89:E1:68:22:D5:6A:EB:67:09:90:65:A0:7B:3F:DE:D6:0F
            X509v3 Authority Key Identifier:
                keyid:66:94:01:4E:FD:E7:26:CA:8D:24:0B:B1:A4:BB:23:DB:7F:0F:3F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:e2:e0:cd:c3:e7:52:8e:d2:f9:fd:64:f9:0d:98:73:2a:f4:
         0d:ef:69:8e:0c:3f:b6:b7:11:7f:8b:60:44:42:f3:54:6a:55:
         d6:16:ba:da:c0:1e:01:2f:0f:f9:5a:37:35:94:12:06:0f:d5:
         f7:14:e6:2d:1f:67:49:06:9a:6e:be:7c:e2:90:50:5a:7d:84:
         8c:ad:ab:77:c0:19:12:56:5f:96:96:f5:8d:35:c0:54:09:1d:
         b3:d7:a4:55:c7:89:ea:da:5d:a1:3b:44:51:6a:c7:9d:99:06:
         52:69:dd:92:42:24:b3:c9:e2:1c:33:fa:80:42:35:1b:03:b7:
         11:fb:47:f8:e0:87:54:75:34:df:c2:92:2b:92:41:bc:a3:37:
         21:33:3e:12:ec:80:02:82:1c:21:4b:bc:ff:76:cf:3c:a2:96:
         60:25:a7:3c:44:6b:74:e5:d0:be:9b:7e:6c:11:15:eb:93:00:
         b7:73:57:bb:0b:2d:61:c3:87:fa:86:4f:f7:2a:c6:5c:50:cf:
         e2:02:bc:d5:55:6e:48:8d:33:7e:eb:d3:e2:45:2c:37:e2:e6:
         2e:b3:4e:97:2a:4f:36:c7:74:20:9d:33:09:01:96:48:19:9a:
         2b:01:83:73:6f:d4:93:bf:29:b4:f6:66:d7:fb:a9:72:b5:0d:
         f6:ba:73:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org