Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3137372e37312e39312e302f32342d3234203d3e20323633363034.roa
File:                     3137372e37312e39312e302f32342d3234203d3e20323633363034.roa (raw, json)
Hash identifier:          IJrQE0Tiv0S/ZoZaeuhYHuNLWM9oFPwWyE1qjy89OC0=
Subject key identifier:   32:CB:FC:C7:86:66:AC:9F:EE:D4:7C:05:A7:BF:05:59:EE:10:44:99
Certificate issuer:       /CN=C67929131596EB65AF046524615104BDF0EDC74D
Certificate serial:       18C84CC18E4C9AF6794598DC43F5FC76EE192811
Authority key identifier: C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3137372e37312e39312e302f32342d3234203d3e20323633363034.roa
Signing time:             Wed 13 Sep 2023 20:24:13 +0000
ROA not before:           Wed 13 Sep 2023 20:19:13 +0000
ROA not after:            Wed 11 Sep 2024 20:24:13 +0000
asID:                     263604
IP address blocks:        177.71.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c8:4c:c1:8e:4c:9a:f6:79:45:98:dc:43:f5:fc:76:ee:19:28:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67929131596EB65AF046524615104BDF0EDC74D
        Validity
            Not Before: Sep 13 20:19:13 2023 GMT
            Not After : Sep 11 20:24:13 2024 GMT
        Subject: CN=32CBFCC78666AC9FEED47C05A7BF0559EE104499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a7:09:4a:71:76:bc:05:93:c7:af:66:7d:55:
                    c2:91:8b:db:d4:f6:f5:cb:00:c9:aa:04:f1:46:e5:
                    7c:e1:12:95:3c:2b:2d:fa:2c:4a:17:0b:89:26:4c:
                    a5:d1:d4:e1:d5:6a:b7:4c:81:f4:c0:65:44:a2:25:
                    80:88:d1:52:ac:53:3a:e4:79:08:22:77:e0:95:05:
                    fc:72:70:35:83:5a:e2:d5:21:bc:e6:cd:f5:77:e0:
                    fc:fb:1f:74:a2:b7:f9:d9:5f:84:ba:1a:1b:e8:ab:
                    54:1c:2a:94:dd:f3:ce:a9:03:d8:02:f0:41:67:71:
                    37:cc:f3:70:37:42:32:67:01:a9:e8:e3:57:4b:d9:
                    a4:3a:10:db:e7:7d:7c:cc:4f:40:16:a1:8c:e9:54:
                    a3:b1:e5:54:d9:fe:f8:ff:91:fd:2b:72:d6:55:64:
                    d7:f5:e4:b9:53:b2:73:b6:0b:ff:12:42:35:2a:6a:
                    d0:26:c7:4f:14:2c:aa:f2:09:8b:49:dd:17:c0:34:
                    8b:95:14:17:10:d3:9c:6b:aa:4f:b4:e0:67:f9:41:
                    ff:3b:2c:74:8d:30:e8:cb:43:61:29:d9:45:a4:58:
                    86:96:62:5a:41:4c:b1:d2:c7:82:4e:97:d2:24:b4:
                    fb:56:da:0e:db:64:36:af:f6:05:86:7b:93:2e:14:
                    6f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CB:FC:C7:86:66:AC:9F:EE:D4:7C:05:A7:BF:05:59:EE:10:44:99
            X509v3 Authority Key Identifier:
                keyid:C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/C67929131596EB65AF046524615104BDF0EDC74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3137372e37312e39312e302f32342d3234203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:71:f8:82:c2:ff:24:91:9c:d4:7c:9e:46:f6:8d:30:ae:3c:
         fd:6d:8c:b9:84:d3:ce:a4:33:7d:06:5c:dd:53:c9:d7:9b:96:
         ca:48:ac:6e:07:25:a3:69:28:46:94:21:e1:92:0c:22:2e:b1:
         56:8f:fe:31:67:53:71:74:a8:3e:0b:c3:9d:8a:7b:0f:ac:4a:
         e5:06:35:8c:66:2a:fd:29:6d:4f:92:42:ea:f8:d6:a9:b1:c8:
         00:34:6a:f3:b9:7d:aa:00:ae:7b:ae:96:f2:7f:d5:67:d7:ce:
         35:f8:72:3a:95:2c:6c:64:b4:7a:7a:30:c7:87:bf:35:56:f3:
         07:28:86:61:99:5f:35:c1:ef:5c:3a:88:5c:fa:02:7b:31:5d:
         04:91:67:08:82:03:55:a2:75:5b:e1:2f:3c:1e:60:68:67:67:
         7c:d0:0d:66:12:f4:dc:8e:ec:c0:2b:bc:a9:56:33:de:ee:5a:
         75:2a:86:c8:53:ab:3a:24:11:26:c2:1e:87:87:9c:b5:75:bf:
         30:83:f9:e5:2b:4a:80:4c:08:0b:ab:5a:17:e1:82:ac:ad:d7:
         db:c3:0e:4b:ef:7c:96:ac:b8:6c:22:df:10:1f:74:14:68:65:
         10:d2:80:a5:bb:37:27:56:6b:8e:47:99:c0:a9:89:48:c4:ae:
         bb:69:f8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org