Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e38372e3138382e302f32322d3234203d3e20323632393037.roa
File:                     3137372e38372e3138382e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          BrEWAEbUJ7dOO8a3ZvaJl6mJVJe6Up1p5jHh7jppFr8=
Subject key identifier:   5D:AB:21:4D:E3:E7:D7:63:F7:6E:A4:37:C0:1E:33:25:37:D3:F0:78
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       6EE6D2067C6E4BC6217C24B9BDD87A85CDC62529
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e38372e3138382e302f32322d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:24 +0000
ROA not before:           Sat 03 Feb 2024 12:48:24 +0000
ROA not after:            Sat 01 Feb 2025 12:53:24 +0000
asID:                     262907
IP address blocks:        177.87.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e6:d2:06:7c:6e:4b:c6:21:7c:24:b9:bd:d8:7a:85:cd:c6:25:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:24 2024 GMT
            Not After : Feb  1 12:53:24 2025 GMT
        Subject: CN=5DAB214DE3E7D763F76EA437C01E332537D3F078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:ee:53:40:bf:79:38:66:67:9c:f0:9d:53:
                    e2:25:cc:4b:29:8c:3c:74:3f:c3:29:82:1f:35:33:
                    38:06:00:41:db:70:3c:45:c1:30:d9:83:aa:e8:78:
                    98:4c:00:cf:40:6a:63:58:cf:98:87:80:28:d7:dd:
                    18:29:8f:c4:38:cd:71:51:26:b1:00:c4:25:77:c1:
                    b9:87:a0:58:2c:b0:ad:92:2f:4f:b6:92:34:ec:75:
                    6a:14:89:6b:25:8c:17:f4:c4:3d:83:d5:55:27:68:
                    83:36:82:2c:a0:40:e2:a5:25:53:88:42:57:74:ce:
                    10:fc:04:ed:b1:d0:bf:2d:c1:23:7c:76:10:ef:c6:
                    96:89:dd:81:9d:6d:81:e6:92:87:3a:d5:2d:9c:ba:
                    2a:2a:49:b7:5f:ee:3f:f1:91:79:0d:ae:86:36:a0:
                    28:a6:02:04:fa:40:f9:53:2d:29:a1:f4:f7:7e:10:
                    2e:a3:a8:2a:a3:4e:52:49:ce:42:a8:54:42:c5:69:
                    69:88:c1:6f:12:d3:3e:aa:74:df:e9:75:0c:1e:ed:
                    c3:3c:6a:c8:5d:44:d0:09:36:80:d4:5b:9f:b8:a7:
                    95:2c:29:71:5e:80:ee:1e:46:a1:7f:59:9b:6c:61:
                    f7:b9:a3:29:38:f6:39:70:c7:86:95:13:96:45:81:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AB:21:4D:E3:E7:D7:63:F7:6E:A4:37:C0:1E:33:25:37:D3:F0:78
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e38372e3138382e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:17:72:4c:9a:78:2f:2a:51:37:33:5a:f8:a0:b1:48:2c:ad:
         ee:ce:1c:3c:7d:58:c4:14:98:06:93:30:a8:55:a9:73:43:d8:
         4a:43:1f:8a:64:35:32:0b:f0:09:f7:de:c1:f1:4e:e1:ea:3a:
         1d:b2:bb:3f:87:48:23:30:08:3d:b6:72:7e:09:d0:b0:d9:71:
         61:76:9c:c9:a5:66:89:95:3d:37:5d:c2:b0:84:c1:56:58:90:
         85:a8:3c:0f:95:7d:18:87:4e:40:7c:c1:6f:17:38:aa:82:85:
         3d:97:20:49:8f:b0:d8:3c:4d:94:3c:af:f3:50:f8:e8:c8:07:
         e9:7a:2b:59:bc:f5:58:1a:73:a5:98:24:1d:80:a2:1d:37:2f:
         5b:ef:74:be:ad:15:1b:31:8d:23:75:b2:f8:db:be:ff:e3:e5:
         b3:06:37:f9:a1:ce:77:5a:12:f3:c3:f1:6d:1c:13:fe:8d:ed:
         9d:17:82:f8:a2:47:cf:0f:c6:6f:0b:75:45:88:83:d8:77:7c:
         f3:a4:90:8f:2c:1f:0b:23:59:19:42:f7:b9:41:d0:f4:2c:be:
         4c:34:f6:e1:ae:8d:fc:37:4c:0d:27:90:ab:3d:df:00:7a:25:
         3c:a8:68:eb:d5:35:9f:ae:64:14:02:a1:c5:3e:f9:a4:da:bd:
         9b:4e:46:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org