Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230302e302f32312d3234203d3e203532353736.roa
File:                     3137372e38362e3230302e302f32312d3234203d3e203532353736.roa (raw, json)
Hash identifier:          fiw959Mzgn6PoW1mkcqqsyqtmQK4aakf+wIzJS1U5AM=
Subject key identifier:   8E:B1:61:8F:B8:AE:CF:2D:D1:78:E3:14:D0:E7:74:B4:A3:77:96:D2
Certificate issuer:       /CN=19173A52C083B2FBECEC8F9929630EF36F40D063
Certificate serial:       03B00BA7D9B5393F2F468CB789D9D736FE76AC83
Authority key identifier: 19:17:3A:52:C0:83:B2:FB:EC:EC:8F:99:29:63:0E:F3:6F:40:D0:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19173A52C083B2FBECEC8F9929630EF36F40D063.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230302e302f32312d3234203d3e203532353736.roa
Signing time:             Fri 01 Mar 2024 11:03:32 +0000
ROA not before:           Fri 01 Mar 2024 10:58:32 +0000
ROA not after:            Fri 28 Feb 2025 11:03:32 +0000
asID:                     52576
IP address blocks:        177.86.200.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b0:0b:a7:d9:b5:39:3f:2f:46:8c:b7:89:d9:d7:36:fe:76:ac:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19173A52C083B2FBECEC8F9929630EF36F40D063
        Validity
            Not Before: Mar  1 10:58:32 2024 GMT
            Not After : Feb 28 11:03:32 2025 GMT
        Subject: CN=8EB1618FB8AECF2DD178E314D0E774B4A37796D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6a:3d:78:53:5e:8e:1e:59:53:b5:36:c7:ad:
                    54:aa:2b:a8:05:c7:49:37:1d:84:21:b5:15:3b:c8:
                    ae:a3:6b:4a:4c:af:45:6e:2d:2f:54:31:58:49:63:
                    47:fa:74:6e:5f:91:ef:3b:8f:2b:54:04:4c:5a:46:
                    72:09:2e:7d:f9:4f:8a:f0:b2:81:7f:4e:b4:46:ab:
                    73:97:28:58:ef:0a:78:85:ff:4c:cc:8d:64:a4:ce:
                    af:64:62:4d:aa:b9:75:17:e6:89:46:69:5f:49:ab:
                    a4:a4:69:f6:67:4f:f8:62:01:e2:d6:59:43:47:0c:
                    92:2a:f0:39:2e:ae:b9:09:3b:cd:9d:70:b4:f5:0f:
                    51:0b:00:bb:a0:31:94:22:6b:97:b5:b0:60:58:c1:
                    2f:57:a9:c8:65:36:90:51:3b:ad:e6:5d:25:9b:2c:
                    67:fc:bb:8f:6b:a7:8d:4a:cd:07:cb:a0:2c:e9:ed:
                    9f:be:54:15:d1:50:c0:bc:e8:d7:e8:b9:db:ca:2d:
                    a5:52:fe:a1:8c:04:a3:a6:64:a1:23:cd:ab:25:15:
                    02:3d:47:3c:90:bb:a4:35:8c:ca:ab:2e:78:da:7c:
                    4a:1f:b7:9e:03:1e:cf:b8:d0:d0:41:c5:7b:86:1d:
                    8c:df:6b:7e:e1:b9:f2:b1:fe:87:cd:db:2c:da:0a:
                    da:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B1:61:8F:B8:AE:CF:2D:D1:78:E3:14:D0:E7:74:B4:A3:77:96:D2
            X509v3 Authority Key Identifier:
                keyid:19:17:3A:52:C0:83:B2:FB:EC:EC:8F:99:29:63:0E:F3:6F:40:D0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/19173A52C083B2FBECEC8F9929630EF36F40D063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19173A52C083B2FBECEC8F9929630EF36F40D063.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230302e302f32312d3234203d3e203532353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:93:62:6a:d6:3d:f6:74:08:13:d9:e9:76:4b:bf:e3:4a:e1:
         be:a8:af:92:9a:0f:6b:68:7c:1b:57:1c:34:ff:96:d1:4d:09:
         df:44:d1:d3:7d:66:12:f1:21:38:fd:22:b3:c4:08:26:8c:f4:
         ae:48:1c:a7:ea:0e:e6:b6:a2:24:bc:98:53:a7:e4:2a:38:9e:
         03:a9:7a:7c:b7:7e:ca:31:6b:65:8e:11:83:fe:22:f0:b3:cf:
         60:fa:7c:63:54:55:20:fe:88:ed:8a:a2:8d:d4:12:5e:dc:42:
         7b:39:3e:f9:e9:48:89:9d:ab:fe:93:b2:7f:aa:b8:5f:dd:61:
         35:92:60:40:36:96:00:62:3b:65:86:ad:6a:b9:bc:77:ff:25:
         d1:35:3d:08:50:df:15:d9:e6:00:e1:62:ac:c8:1a:bb:fe:fd:
         f8:73:5c:44:d4:d3:4d:bd:b6:d4:e4:b0:a0:1d:15:cc:b8:cc:
         d2:d0:1d:90:dd:ae:6a:22:f1:09:cd:4a:0f:eb:53:e5:ec:13:
         74:3c:5e:56:20:c9:eb:3d:9a:c8:83:ab:ef:b4:75:92:9b:0d:
         45:68:e4:53:6c:bb:b0:3e:91:39:70:5c:e0:32:c9:b8:99:db:
         82:c4:8a:c8:8e:7b:57:34:cc:d5:ca:9e:3d:62:6c:e8:d4:df:
         44:73:a0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org