Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e36302e3137362e302f32302d3234203d3e20323632393037.roa
File:                     3138372e36302e3137362e302f32302d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          ejI2WQy+Ddym3xzog/TxcRIXCo94QEMGT6RIZKfCbVo=
Subject key identifier:   97:1C:0C:F7:B3:D2:CF:30:A2:19:1A:35:C8:97:08:42:0C:24:BC:17
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       7DA7599D2AB9EA41364D9C23CF0FAB894B344049
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e36302e3137362e302f32302d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:18 +0000
ROA not before:           Sat 03 Feb 2024 12:48:18 +0000
ROA not after:            Sat 01 Feb 2025 12:53:18 +0000
asID:                     262907
IP address blocks:        187.60.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a7:59:9d:2a:b9:ea:41:36:4d:9c:23:cf:0f:ab:89:4b:34:40:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:18 2024 GMT
            Not After : Feb  1 12:53:18 2025 GMT
        Subject: CN=971C0CF7B3D2CF30A2191A35C89708420C24BC17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:67:5c:cd:62:77:08:7d:a8:a9:17:11:06:ff:
                    0f:a3:93:11:48:e7:fd:07:a8:85:a9:73:2e:51:bf:
                    8d:40:a6:79:bc:20:36:51:e0:b6:4a:c8:01:50:fc:
                    61:dd:66:6c:21:fe:91:35:60:d8:7d:67:a5:a2:23:
                    61:0a:42:40:ce:44:99:65:6f:20:d7:a2:9e:b1:de:
                    a1:89:78:23:97:49:23:23:5c:5c:a9:02:2d:fe:6e:
                    90:3e:0e:39:b5:66:7f:d7:00:fe:f2:09:b4:85:73:
                    6e:ee:43:d3:cc:c8:02:21:f1:97:c7:e2:2b:dd:38:
                    f0:07:a6:b0:47:73:d4:10:5a:06:08:b4:01:1c:23:
                    27:7d:30:65:8f:e7:e7:0f:48:f9:95:a6:f3:8c:4e:
                    ef:9e:f0:69:34:f1:43:38:d5:68:d9:8d:e3:2f:ba:
                    40:46:22:e0:db:9d:34:2b:39:a3:2c:aa:1b:07:e2:
                    3d:70:c2:d8:a5:fc:74:13:31:ba:8f:2c:cc:56:13:
                    3e:b3:98:c8:bd:3f:a8:39:f6:7e:ab:99:53:6c:48:
                    a6:02:c6:20:49:10:8e:22:c7:23:c1:f6:39:ed:d8:
                    7d:2e:59:b4:e7:af:cb:23:75:1e:2c:55:7a:8e:24:
                    83:c5:f2:34:fd:d3:cd:9e:bb:33:7b:d9:79:1f:58:
                    da:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1C:0C:F7:B3:D2:CF:30:A2:19:1A:35:C8:97:08:42:0C:24:BC:17
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e36302e3137362e302f32302d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.60.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:b8:5d:0a:8a:3f:af:e0:86:e4:51:8c:91:f6:ef:6e:03:
         3a:0e:44:a8:e5:be:37:1e:09:6b:6c:e3:c7:d3:25:3c:cd:d3:
         7d:c2:ca:c8:23:5e:2d:6c:2f:2e:72:21:dc:e7:73:9a:0e:f9:
         08:05:23:66:26:a0:4a:ed:68:0c:25:dc:b6:51:ec:82:35:c0:
         62:54:2a:5c:5a:c6:79:b1:65:1b:76:fa:4d:12:f2:b1:2b:4f:
         0e:35:85:34:7a:20:16:b1:46:5d:72:e1:b1:ab:fb:bb:43:e3:
         80:9f:8f:63:4d:30:59:36:ea:1a:5f:1f:3b:aa:13:49:6c:57:
         ad:45:2e:a0:65:92:6f:5e:48:0e:c2:2e:39:ce:1e:f5:e4:7c:
         5f:57:77:ad:e3:ca:e4:d9:32:30:07:3c:a7:95:1a:ab:d6:22:
         ac:b0:eb:43:ed:b9:af:a5:d2:b7:35:27:32:ee:c0:df:bb:37:
         26:3a:05:b4:95:d4:80:68:91:fc:cd:9f:fc:50:71:ed:4a:f1:
         95:2e:23:1b:d2:7d:8c:c8:8d:a9:7e:bf:66:2e:f5:86:c3:81:
         a5:a8:c5:67:66:4e:b1:31:32:2a:2a:d1:b7:92:79:35:8c:37:
         84:a3:da:26:3e:e3:44:80:9c:1d:34:19:32:87:71:da:cd:93:
         69:84:d7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org