Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135322e302f32342d3234203d3e20323731363735.roa
File:                     3137372e38362e3135322e302f32342d3234203d3e20323731363735.roa (raw, json)
Hash identifier:          YFJeclXFgBvgTInsBVyYSp1VGXN1bzk2KNkM3LFKj1s=
Subject key identifier:   EF:6F:E1:BB:E0:52:EC:E2:87:8B:29:E3:C4:9A:88:5D:60:5F:C9:7A
Certificate issuer:       /CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
Certificate serial:       400B4E58AE8F3D419AF8B12552F32902C498853A
Authority key identifier: C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135322e302f32342d3234203d3e20323731363735.roa
Signing time:             Fri 20 May 2022 12:53:59 +0000
ROA not before:           Fri 20 May 2022 12:48:59 +0000
ROA not after:            Fri 19 May 2023 12:53:59 +0000
asID:                     271675
IP address blocks:        177.86.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0b:4e:58:ae:8f:3d:41:9a:f8:b1:25:52:f3:29:02:c4:98:85:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
        Validity
            Not Before: May 20 12:48:59 2022 GMT
            Not After : May 19 12:53:59 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d4:4b:f2:10:4b:ce:a1:2c:78:6e:b1:e6:ea:
                    b0:da:82:9f:73:3d:cc:6a:cf:1d:ee:5e:ad:c4:bc:
                    5d:1e:7e:47:85:e8:54:93:7d:bb:52:cf:79:e4:10:
                    36:16:9e:72:06:ac:77:97:52:c4:a1:7a:70:ca:ee:
                    e1:0e:97:8c:1f:a3:90:35:a4:a9:14:bd:36:d7:83:
                    7f:28:5d:b6:5b:c6:75:fb:ba:cc:da:51:7d:8f:f9:
                    c1:2c:38:25:24:35:fb:9d:8b:a7:ef:6c:66:ba:76:
                    60:f5:9c:e9:bd:66:25:d6:60:e8:ef:3f:3b:b7:20:
                    26:d4:42:d5:44:73:7f:45:66:b7:06:85:fd:8c:32:
                    bb:16:cd:81:62:38:1b:78:8f:f5:ee:18:d9:0f:38:
                    ce:b9:3d:c0:6e:c6:21:d9:1d:e6:0c:97:8d:79:f9:
                    95:d3:90:b8:c6:59:2d:aa:b2:24:2f:bb:be:b6:81:
                    c8:7f:a0:0c:c8:42:82:24:c7:ba:ca:48:ca:23:34:
                    22:d5:0c:05:e8:58:e0:07:f3:9a:28:70:04:e4:92:
                    2b:90:ba:11:51:e9:8e:32:11:62:a4:51:92:c6:07:
                    4b:79:98:dd:16:3c:16:3b:16:b9:8b:e2:52:30:e6:
                    ba:69:d9:30:18:89:29:52:7b:1e:1a:e6:6c:17:8f:
                    a2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6F:E1:BB:E0:52:EC:E2:87:8B:29:E3:C4:9A:88:5D:60:5F:C9:7A
            X509v3 Authority Key Identifier:
                keyid:C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135322e302f32342d3234203d3e20323731363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:22:6c:5d:58:c5:ed:c7:83:a1:0e:75:b8:c5:ad:7e:19:57:
         c6:b7:49:c4:8c:2d:25:b9:07:a9:f9:cd:35:d3:7a:9c:5c:c6:
         41:68:a2:ae:ba:a0:54:08:e2:ab:58:e6:07:66:c2:18:44:a9:
         eb:f4:d9:31:ce:1b:c2:72:84:6d:8b:5d:56:6c:ac:b9:97:0b:
         6d:90:12:f4:fe:b9:56:ba:d5:57:47:eb:dc:5e:66:56:ef:ba:
         df:fd:cf:9c:76:5c:b9:5c:94:e8:e3:88:81:2c:16:e0:84:e8:
         63:07:b1:37:4c:79:b2:38:30:bf:58:3c:28:54:2c:ad:3d:48:
         02:81:41:de:4d:04:ed:71:1b:91:de:09:4b:e4:1a:83:a4:65:
         eb:1e:61:54:49:88:e3:a5:67:6c:ac:d3:56:97:b6:40:9f:59:
         a6:10:38:c1:2b:4f:79:7d:2b:9d:fa:e6:6f:f2:23:d1:20:c6:
         29:f0:cd:d0:10:0c:be:80:50:e0:a1:6c:73:94:e9:d8:cd:5b:
         50:3b:f5:b3:6c:5a:3b:46:88:9d:18:31:9f:b5:7b:57:48:0f:
         9e:f3:95:93:d1:74:87:63:8f:a5:44:18:83:e3:8c:50:93:8d:
         a9:cc:9a:e0:18:a0:7b:18:95:f4:11:ba:0d:7f:b4:44:6d:0d:
         67:da:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org