Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3137372e38352e34302e302f32322d3234203d3e203238353830.roa
File:                     3137372e38352e34302e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier:          N9Jk0H6dgDrZ0wms6gRQvZB8t1oWzTGnJ69stJu5coY=
Subject key identifier:   91:82:8E:A9:DD:38:03:C7:5C:B2:FB:FC:EC:70:FB:BF:9C:D3:1D:28
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       407CF6ADF65B69A623C67C8C0C3C8A24B033E7DB
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3137372e38352e34302e302f32322d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:00 +0000
ROA not before:           Thu 19 Oct 2023 19:10:00 +0000
ROA not after:            Thu 17 Oct 2024 19:15:00 +0000
asID:                     28580
IP address blocks:        177.85.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7c:f6:ad:f6:5b:69:a6:23:c6:7c:8c:0c:3c:8a:24:b0:33:e7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:00 2023 GMT
            Not After : Oct 17 19:15:00 2024 GMT
        Subject: CN=91828EA9DD3803C75CB2FBFCEC70FBBF9CD31D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:44:18:46:50:ef:0e:59:3f:b2:5f:c5:1c:
                    bc:22:c9:a3:f4:d0:73:34:25:f5:82:bd:e3:90:95:
                    c2:e4:6c:8e:06:50:c0:28:2c:44:bb:e0:f1:ba:4b:
                    2f:09:64:60:ba:83:db:eb:12:13:36:4e:3b:af:33:
                    02:4f:eb:e2:2e:86:89:ee:e6:83:fe:7b:d1:b5:86:
                    5c:50:a9:0f:b0:cd:f6:21:4e:d3:8d:bd:5d:ab:08:
                    f9:1c:d5:48:e5:5b:33:18:ad:85:b6:91:03:14:fd:
                    03:42:6f:5a:86:df:da:ea:a1:b5:e2:49:2c:56:1a:
                    fe:da:33:3e:bc:71:dd:24:93:3f:d8:2a:00:01:4d:
                    f5:36:f8:79:88:aa:84:f0:20:e4:ff:19:5f:ba:85:
                    50:c9:6a:e5:e4:bb:a3:49:c8:bc:d4:37:f4:0d:17:
                    45:ad:e2:4e:40:46:de:f9:75:f7:5d:0a:59:da:69:
                    bc:62:b6:05:32:5d:f2:8f:78:79:1b:f9:a1:fe:69:
                    c4:9c:95:21:43:40:b2:9f:ca:9f:24:50:e3:2d:2e:
                    ca:ac:93:31:17:80:46:85:a6:ed:a7:01:78:5c:01:
                    26:fb:7d:a1:11:b9:db:42:38:1f:a6:ba:31:ff:40:
                    e3:78:4d:f4:4f:05:30:71:d7:33:f7:49:a3:f8:35:
                    87:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:82:8E:A9:DD:38:03:C7:5C:B2:FB:FC:EC:70:FB:BF:9C:D3:1D:28
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3137372e38352e34302e302f32322d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:45:aa:5b:46:b5:31:55:c5:44:95:20:a0:47:d5:75:40:37:
         cb:c2:40:2b:79:39:4f:c8:18:0b:16:3e:7c:c3:9a:65:92:e7:
         f1:09:16:79:6e:8f:ab:78:45:d7:df:09:72:75:1c:34:d5:bb:
         94:d2:78:0c:af:ee:1c:33:b4:86:c0:37:93:b7:78:aa:1b:77:
         2a:f9:64:89:22:38:84:9e:97:34:1d:cc:5e:5b:f7:92:0f:0a:
         f2:c1:fe:70:de:a7:ca:eb:06:1e:2e:21:89:1c:37:00:17:32:
         37:a0:96:7e:b1:7a:d1:b4:42:ad:53:00:73:24:88:3a:70:e5:
         e9:8a:4a:8c:c8:81:e1:53:50:1b:c6:19:24:e7:85:5c:54:99:
         d3:ca:5e:ac:c0:44:ac:e0:f5:fa:e6:f4:f4:f1:da:e5:0c:a4:
         fd:00:cc:39:e4:43:0d:bd:20:b8:42:fe:a8:24:00:e6:ba:90:
         3f:29:da:66:3e:98:a1:2f:a2:3e:0e:00:e1:9a:32:07:95:02:
         dc:fa:a5:98:b8:ad:80:60:62:4a:30:b2:af:46:d7:fb:80:50:
         9d:54:99:b8:3a:54:d7:20:b7:92:04:10:b7:af:b1:76:95:e7:
         36:5c:b0:06:c5:0c:0c:ac:bf:57:10:ab:3f:4b:db:85:c9:73:
         e4:84:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org