Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e38372e3231362e302f32312d3234203d3e20323632393037.roa
File:                     3137372e38372e3231362e302f32312d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          0NNkyitUPwoaTw6yhvtPpodObgItcJzx8p88GN9jCZg=
Subject key identifier:   15:6B:16:EA:73:73:4C:BC:7E:A9:EA:4A:76:CF:FC:F2:3A:C8:67:28
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       01F95B4B7F5AD72E652AABA38E81A3C879A7C1D2
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e38372e3231362e302f32312d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:19 +0000
ROA not before:           Sat 03 Feb 2024 12:48:19 +0000
ROA not after:            Sat 01 Feb 2025 12:53:19 +0000
asID:                     262907
IP address blocks:        177.87.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f9:5b:4b:7f:5a:d7:2e:65:2a:ab:a3:8e:81:a3:c8:79:a7:c1:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:19 2024 GMT
            Not After : Feb  1 12:53:19 2025 GMT
        Subject: CN=156B16EA73734CBC7EA9EA4A76CFFCF23AC86728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:8a:d9:c7:8a:db:47:e8:cf:44:db:35:a4:
                    01:be:a3:92:31:0a:b4:47:e5:74:c9:fb:46:b6:ae:
                    19:d2:4a:df:ae:a0:11:6b:7a:e4:e2:51:00:c1:03:
                    81:01:0a:9c:d2:62:9c:93:a2:11:41:4a:3c:7d:3f:
                    4e:cc:e6:61:61:f4:e7:78:b9:a7:ae:60:ce:50:3c:
                    7c:c4:d0:f0:e1:56:23:a1:9d:fc:76:93:fb:23:b4:
                    8a:af:fc:b0:1d:aa:3a:5f:67:c8:62:08:2f:74:17:
                    4e:45:4c:97:a2:e7:7d:03:32:0b:a7:cf:d2:00:e3:
                    bf:0b:d9:3a:b1:b3:fb:1c:0d:8b:41:ff:73:70:1e:
                    35:b8:6e:24:ff:c9:3c:26:7a:e2:8f:c6:9b:62:5b:
                    4b:c8:22:8d:e9:a4:5b:6f:59:0b:38:54:75:cd:8c:
                    e6:8e:46:3c:fd:b4:2d:b6:cf:0c:4a:4e:9f:45:db:
                    61:ce:05:78:6e:d8:b7:d4:9d:b3:ea:1e:1c:22:bd:
                    4b:12:49:43:17:10:e4:47:c3:66:f9:9f:7f:53:5c:
                    e0:17:77:b6:b5:c5:e3:0c:df:6a:f4:b7:46:dd:16:
                    e1:df:8f:58:3f:36:99:1c:11:9a:ad:30:ba:c5:bb:
                    67:6a:fa:60:0d:93:af:19:4e:f0:df:67:56:5d:ae:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6B:16:EA:73:73:4C:BC:7E:A9:EA:4A:76:CF:FC:F2:3A:C8:67:28
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e38372e3231362e302f32312d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:03:4d:db:4e:2b:31:72:be:00:02:c1:79:f1:73:6a:e2:67:
         44:b5:8f:b1:35:d6:93:dc:a5:17:ee:4b:ae:a0:25:29:e9:b6:
         b9:1d:ad:30:89:a3:c9:ab:b6:da:90:3a:25:05:fe:59:97:fa:
         9a:94:05:f2:ba:ec:94:5d:1c:a5:7e:39:7e:5f:f8:fb:3f:68:
         62:57:9b:bc:e5:c6:fc:c1:7c:5b:61:1b:57:8d:30:8e:02:5d:
         ad:4b:98:3c:ae:2e:d9:81:5d:e2:37:9e:1a:cf:ec:02:d0:e7:
         5d:ad:29:90:90:07:2d:4e:48:8b:00:ca:ec:cc:1e:59:4b:92:
         ba:b4:65:bc:a1:c4:f6:9f:a1:a5:b7:02:fd:d9:52:51:6b:25:
         77:2f:c6:fb:f6:ae:d7:18:76:97:b6:a9:bf:38:66:92:47:e3:
         60:e9:90:37:a4:2f:32:9f:63:8c:7c:12:6c:70:c6:a8:44:de:
         75:78:c6:c3:fb:1a:b2:6c:72:74:7a:1c:43:c3:84:c1:89:9d:
         15:9a:d7:a2:3b:6f:b0:6f:24:7c:59:78:c4:13:30:91:57:71:
         b0:27:22:7a:d4:bb:27:22:9d:bb:a5:4e:82:a2:9e:a7:9b:26:
         6c:55:26:12:ca:74:33:b9:3b:c0:bf:16:cd:3a:8b:29:49:0b:
         d3:32:8d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org