Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e31312e3230302e302f32312d3234203d3e20323632393037.roa
File:                     3137372e31312e3230302e302f32312d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          dZ6zXgjj3aFHdHVz2nErNt3mnNnBrK/VFb+rRtBEMBk=
Subject key identifier:   86:03:9B:95:F5:DE:13:E3:87:85:23:E8:12:A5:A7:33:BE:5A:32:8C
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       0A89269676CE5B99BF1F52A11F4A49ECE02E8D41
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e31312e3230302e302f32312d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:21 +0000
ROA not before:           Sat 03 Feb 2024 12:48:21 +0000
ROA not after:            Sat 01 Feb 2025 12:53:21 +0000
asID:                     262907
IP address blocks:        177.11.200.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:89:26:96:76:ce:5b:99:bf:1f:52:a1:1f:4a:49:ec:e0:2e:8d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:21 2024 GMT
            Not After : Feb  1 12:53:21 2025 GMT
        Subject: CN=86039B95F5DE13E3878523E812A5A733BE5A328C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:0b:d1:2f:84:bf:8c:48:ae:f4:40:66:19:46:
                    f6:a6:18:20:7b:74:ef:35:4f:7b:ad:63:ad:2d:96:
                    cf:25:23:c3:4d:ed:9e:2e:85:f9:33:2d:45:cc:15:
                    65:fa:88:19:7c:12:0e:f9:a8:6a:a2:70:fd:6f:97:
                    9e:cf:4c:62:fa:ef:5b:d7:3f:72:11:e2:ca:56:d1:
                    04:00:a7:cf:bc:7d:17:c8:11:7e:39:ea:0e:e4:90:
                    f8:1a:82:68:17:b9:0d:47:5b:6d:02:7e:fb:7e:e8:
                    26:a1:55:ae:e3:21:7c:b6:3d:02:2a:41:e9:74:33:
                    07:1d:bd:62:7a:43:c6:6a:c5:13:51:88:3c:80:de:
                    06:1e:95:7b:8f:8a:0c:a2:38:54:75:6e:d0:7c:ec:
                    bd:3b:b1:11:99:05:56:e1:5e:f6:c7:8b:cb:74:0b:
                    cb:93:06:d1:cc:af:af:de:c0:d5:8e:d2:61:28:a0:
                    c1:04:39:40:f8:5d:64:54:bf:f2:72:99:f6:f2:dd:
                    28:a1:33:5f:17:b7:28:39:4e:28:ab:cf:4b:e8:a1:
                    4b:21:1f:7c:f4:83:19:2b:f2:a5:13:61:32:6b:82:
                    b5:56:af:fb:fc:c5:95:34:cf:20:83:ff:02:3a:e9:
                    bd:a4:6b:86:8e:13:ca:94:25:e3:0c:7d:51:be:53:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:03:9B:95:F5:DE:13:E3:87:85:23:E8:12:A5:A7:33:BE:5A:32:8C
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e31312e3230302e302f32312d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:f2:6f:5d:83:30:23:2c:61:fe:5f:34:94:fd:ba:7b:a1:38:
         38:c2:b5:f1:aa:59:b5:7a:e9:fb:5c:53:85:78:7d:73:ce:ec:
         ef:11:88:ea:06:9c:ed:1d:69:38:9a:38:4d:d1:fe:c7:ca:bd:
         ac:a6:44:d3:5e:29:60:3f:61:a0:7d:09:45:ff:08:0c:2d:14:
         3a:7f:28:1f:31:98:06:7c:61:aa:93:4a:ba:ac:bc:6b:bd:0c:
         c6:62:a6:57:52:92:f8:bb:80:4e:31:45:e4:ad:1a:75:d1:6b:
         84:5b:a0:9a:79:a4:5c:23:66:43:7e:23:fa:21:94:54:13:a9:
         93:1e:a2:b8:fb:ee:b8:5e:03:00:2b:a3:3c:69:3c:5e:1d:f6:
         fc:6a:f9:80:c1:e8:9c:d4:fa:00:99:d2:7a:61:bc:5d:02:b2:
         2e:5a:bb:f1:73:79:63:e9:d9:9d:05:6e:68:6e:69:11:72:21:
         7e:02:db:6a:8c:24:a2:64:5e:a0:f6:15:d4:63:a9:94:d9:fe:
         99:79:60:21:15:06:cf:c2:88:92:40:58:df:cd:79:8d:11:02:
         83:7e:6e:b5:b1:95:6d:92:f1:4e:d4:a0:fe:e4:2c:99:ff:6f:
         a8:53:fb:9e:bc:8a:b2:59:73:f7:ab:07:89:bd:69:9f:36:20:
         c6:4e:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org