Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32332d3233203d3e20323633343237.roa
File:                     3137372e39312e34342e302f32332d3233203d3e20323633343237.roa (raw, json)
Hash identifier:          U877wtRG1OxDx7ZEHBcIH486Rd/DVoWQ+Pwqf8IXiPQ=
Subject key identifier:   4E:76:D5:00:2C:85:6C:38:7B:13:50:08:B8:B9:6F:10:42:FF:DA:5C
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       35816551F699B27CDF5699DD281A31E08C0C8ED1
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32332d3233203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:05:42 +0000
ROA not before:           Fri 09 Jun 2023 22:00:42 +0000
ROA not after:            Fri 07 Jun 2024 22:05:42 +0000
asID:                     263427
IP address blocks:        177.91.44.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:81:65:51:f6:99:b2:7c:df:56:99:dd:28:1a:31:e0:8c:0c:8e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 22:00:42 2023 GMT
            Not After : Jun  7 22:05:42 2024 GMT
        Subject: CN=4E76D5002C856C387B135008B8B96F1042FFDA5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:78:b4:06:05:ac:a4:96:91:9d:db:69:52:74:
                    21:ee:8a:d4:76:2d:55:c4:cd:34:44:23:d6:22:ff:
                    24:b4:d0:dd:a5:47:d3:ec:49:52:e6:e7:b8:40:a4:
                    fe:a7:34:60:f3:6a:d2:d7:c2:f2:70:48:67:6f:99:
                    da:47:73:cd:88:a4:99:90:fd:5d:24:25:ca:49:10:
                    80:1c:42:d3:ec:f6:d4:43:52:d0:03:f2:38:4b:9c:
                    22:4e:9e:11:52:83:7b:57:86:2d:1c:6e:ae:ee:5a:
                    37:d5:c3:ca:9f:82:20:4b:99:c0:3d:0d:98:5a:80:
                    bf:13:ab:b8:c8:23:0f:85:bc:5a:a7:b9:66:6f:1e:
                    74:1f:79:19:cc:1a:94:64:47:4d:15:7e:09:6d:af:
                    7f:00:16:6e:fa:5e:7b:7c:e1:76:47:9a:cd:d5:a7:
                    d0:e2:54:ea:32:dc:70:6e:59:da:98:0c:c3:af:76:
                    49:a9:9f:b0:e5:31:67:37:cd:a8:6a:04:dc:62:a7:
                    2d:1a:2f:f7:5e:a2:cf:15:4a:c7:71:52:02:0d:6f:
                    fc:22:44:d0:9d:53:b3:da:b4:e2:c0:0d:e6:62:2c:
                    ff:b2:29:ec:94:da:58:0b:fd:7d:10:f6:22:c4:e7:
                    4b:c7:33:ee:54:17:65:d2:a7:cd:d0:6b:c7:a2:b7:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:76:D5:00:2C:85:6C:38:7B:13:50:08:B8:B9:6F:10:42:FF:DA:5C
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32332d3233203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:83:f4:d1:6b:44:64:15:3e:b7:fa:42:30:8e:59:16:f8:63:
         4d:42:f7:f8:63:a5:44:01:00:79:5f:c8:3f:38:5d:77:49:dc:
         d3:94:0a:58:24:05:a3:5f:e2:da:56:f8:3f:a5:e9:eb:36:bb:
         d4:5a:01:c8:79:e0:f6:76:1a:b5:c6:85:12:20:f9:2b:f1:7c:
         c2:d0:51:1f:10:a4:27:59:74:ca:de:ce:0d:34:bd:66:32:82:
         6a:a3:eb:79:bd:a6:f1:84:74:91:5e:2c:40:ba:cd:37:36:d8:
         9e:c9:46:1b:9a:3c:ec:48:11:f2:9b:d6:ca:97:5d:65:6b:1b:
         a6:d9:da:b8:13:d3:8d:de:50:f0:e4:43:ac:b0:32:9b:81:40:
         10:bb:9b:17:fd:34:3f:31:85:8f:06:9d:b3:0b:1b:9b:dd:64:
         bd:25:a8:a8:f1:0b:8c:48:b4:70:8b:a1:36:52:96:d7:db:64:
         69:d5:ca:b9:f8:c2:8e:03:aa:25:e5:18:12:60:e8:ad:eb:47:
         bf:6e:ce:b0:c1:74:8c:c9:97:43:be:a8:a4:6c:30:a6:53:0d:
         8f:41:4e:dc:da:cc:19:52:4f:ea:cb:25:d2:0b:73:41:f0:e7:
         19:61:c9:cf:1f:fc:f9:ce:e1:50:d7:71:7f:3e:02:85:95:65:
         67:83:a1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org