Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3137372e36362e3138382e302f32322d3234203d3e20323632353032.roa
File:                     3137372e36362e3138382e302f32322d3234203d3e20323632353032.roa (raw, json)
Hash identifier:          M7g53ncXQP5yT8lqlsHzNkCXSLDKtQy/MzoDX/6g9Ro=
Subject key identifier:   3D:B5:2B:11:31:56:CC:37:D8:EB:C1:B5:13:1F:64:09:EF:A2:35:3B
Certificate issuer:       /CN=BF977F78777D6EE714F2CC1F0A8242EB6809E7C0
Certificate serial:       5E1F518B3109A19A515CB349BEBFCEC89F7FF549
Authority key identifier: BF:97:7F:78:77:7D:6E:E7:14:F2:CC:1F:0A:82:42:EB:68:09:E7:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3137372e36362e3138382e302f32322d3234203d3e20323632353032.roa
Signing time:             Fri 17 Nov 2023 19:15:05 +0000
ROA not before:           Fri 17 Nov 2023 19:10:05 +0000
ROA not after:            Fri 15 Nov 2024 19:15:05 +0000
asID:                     262502
IP address blocks:        177.66.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1f:51:8b:31:09:a1:9a:51:5c:b3:49:be:bf:ce:c8:9f:7f:f5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF977F78777D6EE714F2CC1F0A8242EB6809E7C0
        Validity
            Not Before: Nov 17 19:10:05 2023 GMT
            Not After : Nov 15 19:15:05 2024 GMT
        Subject: CN=3DB52B113156CC37D8EBC1B5131F6409EFA2353B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:eb:53:1f:bb:01:4b:31:ca:48:fc:07:ac:
                    27:bf:5a:08:25:ec:96:95:7a:0d:fb:60:55:de:f9:
                    87:cf:08:9a:09:4d:90:76:ff:2b:7e:c7:6d:94:5c:
                    ea:de:37:35:50:b9:98:09:2f:ca:8a:ef:47:2c:ee:
                    57:34:32:ee:d8:35:59:26:aa:77:2a:d3:8a:4b:a5:
                    a7:c7:08:81:88:3f:2a:e4:f3:66:49:8c:c2:c2:30:
                    ad:d0:70:45:d1:9e:3b:e1:10:98:ea:e7:c4:46:7f:
                    89:61:2f:07:35:29:ac:4b:16:96:31:69:f2:d0:2f:
                    ae:32:99:8a:32:a2:fa:b1:23:61:4b:7d:2e:12:96:
                    86:f2:fc:86:55:0a:11:f4:06:76:17:4f:1d:17:01:
                    f3:3d:d5:80:76:4a:db:0c:9e:b7:de:d8:ab:ad:2b:
                    2f:93:60:cf:a3:2a:aa:5e:d2:81:5c:5b:e6:d6:2a:
                    96:90:8c:96:89:eb:c4:99:c8:f8:3f:71:f5:6a:b0:
                    95:2e:c4:35:81:d2:67:1f:a2:8c:34:0c:41:24:27:
                    4f:41:27:c1:37:f4:c9:6a:97:72:cc:12:d0:d0:96:
                    1b:4c:1b:3c:3a:3e:ba:85:09:9e:3c:1d:7f:6b:6a:
                    2f:3f:05:f5:93:87:15:83:7a:94:cd:ad:04:60:ab:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B5:2B:11:31:56:CC:37:D8:EB:C1:B5:13:1F:64:09:EF:A2:35:3B
            X509v3 Authority Key Identifier:
                keyid:BF:97:7F:78:77:7D:6E:E7:14:F2:CC:1F:0A:82:42:EB:68:09:E7:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3137372e36362e3138382e302f32322d3234203d3e20323632353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:ed:4e:28:87:f3:3b:d4:7d:7b:83:4e:69:54:96:28:94:79:
         65:71:73:b3:9d:b8:e8:b7:ea:65:0d:cb:59:70:22:9e:d6:b1:
         93:d4:e9:51:cd:47:d3:22:ac:9d:f9:cd:9b:00:1d:f1:f5:dd:
         35:f9:1d:13:d8:25:a6:df:d4:9a:ec:49:ba:a8:9f:6d:87:85:
         8f:99:87:cb:65:bc:06:bd:06:90:d3:09:b6:0f:9b:a4:fe:8b:
         0a:85:c6:12:c7:5f:c1:0b:59:f3:1b:53:26:f9:98:75:a9:1d:
         a8:2a:29:2d:99:44:f7:d4:ab:83:ec:57:73:18:5b:a3:39:26:
         ba:b3:30:59:1e:d6:f2:37:27:23:06:e3:80:5a:64:ba:40:ca:
         37:68:66:13:f5:29:60:9b:71:72:a3:6c:6d:68:29:ee:bf:3f:
         9e:14:12:93:c2:74:20:72:1d:80:35:ac:ee:28:44:65:fb:a0:
         5a:13:17:7e:b8:1b:c7:23:fd:46:41:e0:44:80:28:7b:6f:83:
         59:4d:2e:d5:70:98:12:1b:35:d8:38:c5:c3:67:b5:55:9b:02:
         d8:e3:47:1b:75:97:15:8f:72:54:95:d6:92:98:6c:e2:bc:bd:
         a6:f9:61:d2:ce:a0:a2:57:c5:1d:9d:7c:6e:86:df:94:75:67:
         bc:b9:c0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org