Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5bhGK1ipTpegxuYhcJEy61RdwE4pMts8879MvsBFQ2Pi/0/3137372e36372e3230382e302f32312d3234203d3e20323632353237.roa
File:                     3137372e36372e3230382e302f32312d3234203d3e20323632353237.roa (raw, json)
Hash identifier:          P9K685bP5KOfAbF9hkcjsOo/TbYjGCJ2Z7kWLYYIF1U=
Subject key identifier:   D7:C0:8A:CA:F8:18:B9:5A:0E:8B:87:6D:FA:39:C3:B2:88:25:94:3A
Certificate issuer:       /CN=1D2F0D365E3A132BD216834E11F4B31FF6318432
Certificate serial:       12455FD6563220B9185F78B4BAE3E34EFCB38B83
Authority key identifier: 1D:2F:0D:36:5E:3A:13:2B:D2:16:83:4E:11:F4:B3:1F:F6:31:84:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D2F0D365E3A132BD216834E11F4B31FF6318432.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5bhGK1ipTpegxuYhcJEy61RdwE4pMts8879MvsBFQ2Pi/0/3137372e36372e3230382e302f32312d3234203d3e20323632353237.roa
Signing time:             Thu 26 Oct 2023 14:15:39 +0000
ROA not before:           Thu 26 Oct 2023 14:10:39 +0000
ROA not after:            Thu 24 Oct 2024 14:15:39 +0000
asID:                     262527
IP address blocks:        177.67.208.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:45:5f:d6:56:32:20:b9:18:5f:78:b4:ba:e3:e3:4e:fc:b3:8b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D2F0D365E3A132BD216834E11F4B31FF6318432
        Validity
            Not Before: Oct 26 14:10:39 2023 GMT
            Not After : Oct 24 14:15:39 2024 GMT
        Subject: CN=D7C08ACAF818B95A0E8B876DFA39C3B28825943A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:be:93:e5:77:07:7b:69:a4:84:5b:ea:cb:
                    92:3b:03:bf:9c:2c:89:92:5e:bb:a8:cc:9e:ed:6a:
                    6b:70:30:74:ff:45:58:44:b5:22:23:ab:3f:53:a3:
                    b6:74:9c:24:0a:c6:de:b1:bf:45:ca:7d:9e:38:69:
                    8d:44:9c:d0:94:62:f6:ba:2b:7e:e1:ed:0e:a9:c8:
                    57:ef:44:4b:8f:09:e3:e2:b5:76:13:77:24:46:08:
                    2e:e5:62:5f:92:5b:d3:ef:c7:02:ca:cf:9a:2f:92:
                    5c:3e:bf:e9:db:d9:02:f9:e3:7d:93:f0:20:32:97:
                    77:2f:df:46:63:0c:b8:f9:86:f4:e5:d0:78:d1:c8:
                    d4:43:dc:d1:06:dd:36:83:dd:53:2a:76:9d:cb:75:
                    d8:1a:19:3a:df:01:8d:2a:21:35:ea:75:e9:26:27:
                    f3:2e:10:19:59:d6:c2:33:69:f6:92:d5:63:c5:13:
                    e9:fb:6e:9e:d0:e3:4e:2d:fa:0d:47:3b:b1:1c:d0:
                    59:f2:42:ce:06:cb:49:f7:18:92:99:0d:8c:7e:a8:
                    c7:b4:81:29:51:8a:b0:d7:c3:bc:00:46:af:5f:82:
                    c5:a9:06:b2:25:39:ee:5f:2a:b1:26:ae:7f:e8:ba:
                    40:19:1b:5c:9c:4a:03:da:92:e7:04:ed:d9:a4:54:
                    88:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C0:8A:CA:F8:18:B9:5A:0E:8B:87:6D:FA:39:C3:B2:88:25:94:3A
            X509v3 Authority Key Identifier:
                keyid:1D:2F:0D:36:5E:3A:13:2B:D2:16:83:4E:11:F4:B3:1F:F6:31:84:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5bhGK1ipTpegxuYhcJEy61RdwE4pMts8879MvsBFQ2Pi/0/1D2F0D365E3A132BD216834E11F4B31FF6318432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D2F0D365E3A132BD216834E11F4B31FF6318432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5bhGK1ipTpegxuYhcJEy61RdwE4pMts8879MvsBFQ2Pi/0/3137372e36372e3230382e302f32312d3234203d3e20323632353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:5e:15:b9:95:03:d6:df:20:19:20:81:a1:05:b7:3c:d8:61:
         8f:3f:9c:fa:f8:d9:2f:b0:85:2a:58:9d:0d:8c:99:62:f6:ae:
         95:d5:2a:6f:42:7f:d0:a1:55:67:9d:52:1b:e9:5c:9d:17:89:
         06:bd:86:10:53:e9:20:11:75:3a:d5:44:7b:a3:63:8a:90:47:
         b4:ea:c2:9d:ca:fe:e2:00:46:16:62:94:6d:e0:87:76:13:ad:
         d4:cd:1b:d5:7c:35:8e:78:6c:20:d5:28:d4:a0:4b:d4:bf:69:
         db:00:10:2f:6f:95:49:d5:78:2b:a7:18:e2:19:83:eb:5b:bd:
         37:95:91:61:8c:87:87:c5:fb:9a:27:45:52:4b:b3:60:0d:13:
         5e:15:8b:55:6b:47:d9:22:b2:73:09:be:c4:9e:d4:68:b9:0f:
         2f:f5:73:c4:f6:63:46:b3:ec:e9:58:61:3c:52:be:99:e4:49:
         ac:aa:4c:88:46:44:af:1b:23:41:66:d4:60:1c:69:1a:f6:c4:
         f3:00:77:94:84:f3:f5:c8:d2:19:08:bf:9e:68:00:e9:9b:6a:
         6d:a7:3a:07:a2:d0:63:02:7c:f7:d7:2e:04:e6:64:19:54:d6:
         d1:5e:e7:c9:28:b6:8c:a4:51:9f:fb:dd:3b:b6:e0:35:ce:d2:
         23:57:9f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org