Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3138342e3234382e302f32312d3234203d3e20323632363035.roa
File:                     3137372e3138342e3234382e302f32312d3234203d3e20323632363035.roa (raw, json)
Hash identifier:          XKRAeIfm+LvzkxM1EMqpo76dbW85aKLMu8bhVqNTaPM=
Subject key identifier:   A3:C1:3D:56:03:6C:4E:DC:5F:FC:51:45:C0:73:58:16:67:0D:85:24
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       376AE97102E9469D019330F81CABA916A7DC0EF7
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3138342e3234382e302f32312d3234203d3e20323632363035.roa
Signing time:             Sat 03 Feb 2024 12:53:21 +0000
ROA not before:           Sat 03 Feb 2024 12:48:21 +0000
ROA not after:            Sat 01 Feb 2025 12:53:21 +0000
asID:                     262605
IP address blocks:        177.184.248.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6a:e9:71:02:e9:46:9d:01:93:30:f8:1c:ab:a9:16:a7:dc:0e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:21 2024 GMT
            Not After : Feb  1 12:53:21 2025 GMT
        Subject: CN=A3C13D56036C4EDC5FFC5145C0735816670D8524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:16:9e:60:01:b1:38:67:23:2f:f7:c3:7d:
                    2f:47:df:9c:2e:55:5c:b9:38:22:ba:2e:b2:c6:35:
                    67:ea:eb:b9:4a:9b:23:1b:ab:94:e3:e1:55:d4:60:
                    65:06:4e:49:d3:3d:e8:ff:fc:a0:52:02:62:1e:ab:
                    b7:21:d2:3e:e2:3c:27:56:f4:7b:ca:92:48:7e:d8:
                    a7:09:78:b3:e8:7f:1f:ec:1c:1e:0a:ce:9a:13:66:
                    39:e8:e1:f3:2e:ca:66:71:6e:af:b2:b3:6c:4c:fe:
                    9f:7f:80:f7:2a:e3:52:bd:1c:ee:c5:d6:4c:55:6d:
                    ce:b7:c6:81:ce:83:7a:29:35:72:0a:ab:18:28:5a:
                    79:19:a6:aa:7b:25:5d:63:30:f4:89:ee:e7:22:70:
                    73:7a:24:06:20:e4:24:2f:89:c4:76:d2:7f:bd:42:
                    96:95:60:f7:93:82:5e:63:80:78:58:66:b1:8c:41:
                    ff:bf:b2:52:10:7d:e9:cd:5c:3d:f3:29:e9:ad:e2:
                    e5:9a:9c:3d:c1:6e:8d:7a:41:4b:23:ef:bc:83:c9:
                    ff:82:e6:37:dc:51:6e:87:81:32:8c:15:70:39:1f:
                    ee:4c:56:7f:e9:d1:7f:b0:59:bf:71:97:4f:17:3a:
                    b8:30:2a:98:d5:ee:27:3d:5d:f9:37:e3:1f:a6:60:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C1:3D:56:03:6C:4E:DC:5F:FC:51:45:C0:73:58:16:67:0D:85:24
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3138342e3234382e302f32312d3234203d3e20323632363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:c3:c2:06:9a:60:05:cf:1c:b4:32:4c:47:21:46:35:2a:7b:
         71:0e:cc:f7:fc:00:db:ac:91:2c:2d:c3:c2:12:8a:40:cd:cd:
         4b:a6:e7:12:a4:85:c7:4c:38:53:62:1a:93:43:12:bd:e8:45:
         3b:27:85:9f:c8:5e:11:85:ec:63:61:ac:d2:cc:12:ec:3f:88:
         e4:b2:ec:a9:59:c2:13:0a:f6:24:a4:71:c2:8b:2c:3d:6e:5d:
         83:20:73:52:62:9b:f2:39:f7:00:5c:96:27:0a:cf:56:20:3f:
         33:3c:90:f1:33:be:75:67:10:14:33:88:a5:8f:af:b2:a4:c5:
         b5:78:94:56:b3:46:50:6f:5a:3c:fa:61:63:84:26:06:76:8a:
         70:61:c5:cc:7e:38:2d:d8:55:dd:2e:c0:e5:bc:cf:99:16:fe:
         98:39:7f:93:0b:8c:72:af:87:a5:4c:61:9d:70:3e:2a:b3:ca:
         24:7f:bb:aa:34:65:d2:65:79:86:06:e1:c2:cb:fd:98:79:50:
         15:ad:be:c6:1b:88:84:0e:cb:39:a9:e1:78:db:4e:4d:a9:34:
         4f:22:1b:4b:23:63:f1:b5:55:d1:44:9f:70:d3:b5:75:cf:57:
         85:dd:b8:8e:66:27:0e:00:03:6c:b0:01:6e:5c:1c:a8:0a:35:
         93:74:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org