Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135342e302f32342d3234203d3e203532353732.roa
File:                     3137372e38362e3135342e302f32342d3234203d3e203532353732.roa (raw, json)
Hash identifier:          7tc8P3Uzkhcx+DQKjBQp25sX2qxs5iI4IEZqqYOfrA8=
Subject key identifier:   61:D0:49:EE:EA:1D:07:4F:18:B7:CB:E9:07:C2:9D:AE:58:52:0B:32
Certificate issuer:       /CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
Certificate serial:       51294DE47ADC7846DC5BB398631BB104370FEDBD
Authority key identifier: C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135342e302f32342d3234203d3e203532353732.roa
Signing time:             Tue 08 Mar 2022 13:53:56 +0000
ROA not before:           Tue 08 Mar 2022 13:48:56 +0000
ROA not after:            Tue 07 Mar 2023 13:53:56 +0000
asID:                     52572
IP address blocks:        177.86.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:29:4d:e4:7a:dc:78:46:dc:5b:b3:98:63:1b:b1:04:37:0f:ed:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
        Validity
            Not Before: Mar  8 13:48:56 2022 GMT
            Not After : Mar  7 13:53:56 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:64:bd:ce:f3:8b:ac:8e:2e:0c:7f:8f:fd:
                    d3:31:df:a1:a9:cb:b1:1e:27:9e:a6:67:78:b8:e2:
                    1d:97:67:85:c2:9a:be:06:55:97:b4:50:7c:59:cc:
                    72:13:d5:ac:81:60:0b:0b:04:f5:aa:6c:fc:e3:fd:
                    c3:ae:84:c6:8b:bf:33:54:32:69:82:21:ca:48:eb:
                    59:92:91:ae:aa:0c:70:95:d9:73:2c:29:8b:bf:7d:
                    84:96:1e:b0:00:9e:99:34:d4:93:f7:46:96:63:d0:
                    95:7b:77:50:10:61:48:34:15:6f:1d:35:29:67:8a:
                    fd:0c:6b:ba:0b:e1:05:d5:52:b2:38:1c:47:c0:45:
                    43:5d:24:03:5f:d6:17:1c:c1:fa:d5:16:1b:d3:3a:
                    9e:13:55:35:a2:9f:0e:ce:7c:9c:eb:8e:c6:bc:f5:
                    25:d8:5d:bc:84:39:28:70:89:b5:87:f9:df:c1:d0:
                    d9:26:32:1c:af:4b:aa:74:36:f7:9b:a2:3e:b8:db:
                    14:e6:01:b1:d7:b3:cf:8e:d3:e1:d0:c0:24:07:ab:
                    26:01:e4:88:4f:0a:b8:2b:32:45:0d:a2:bc:03:7c:
                    ff:85:27:d6:70:45:5e:c5:05:fe:05:28:5d:ab:d4:
                    c0:ab:ac:8d:ab:0f:a1:fd:ba:db:b9:69:68:5d:56:
                    32:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D0:49:EE:EA:1D:07:4F:18:B7:CB:E9:07:C2:9D:AE:58:52:0B:32
            X509v3 Authority Key Identifier:
                keyid:C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135342e302f32342d3234203d3e203532353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a8:a2:5a:8f:2d:f7:6b:a5:60:38:a7:31:05:cb:9c:61:45:
         4f:72:34:4f:d7:ad:9d:f7:1e:bc:50:16:f6:a9:08:84:83:c3:
         0e:b2:d3:b7:02:ec:f3:88:9e:2f:af:e7:4c:3f:87:b4:97:9f:
         66:1a:3c:2e:a8:f3:1b:18:06:c7:24:90:ad:ee:5e:e6:ed:6f:
         3e:68:8a:0d:de:73:e6:b8:b4:23:87:91:9b:1d:cd:66:67:35:
         0a:45:13:fb:ad:11:73:18:ef:1e:fe:6c:f8:68:f1:8e:c0:de:
         c6:d4:cb:74:4c:e5:93:45:14:5e:ef:76:be:2d:b6:4e:3a:00:
         8c:b0:6b:41:d5:ad:e7:c0:00:f7:bc:ac:02:e7:27:55:f9:d0:
         7a:90:13:e1:41:d7:23:54:58:17:1f:e3:26:30:68:53:4b:9c:
         1f:18:16:e9:93:27:ae:03:45:0a:b1:02:01:bb:81:31:bc:7f:
         73:92:ba:2e:9d:52:de:7f:fa:cb:19:60:0a:a8:d1:bb:e3:26:
         b3:62:b0:a6:88:72:7b:8a:4e:d8:6f:cb:1a:9d:3f:42:c5:af:
         7e:13:4c:11:2e:c3:4d:a6:b2:d7:cb:e2:e8:cf:06:5c:df:a0:
         fb:bc:b4:4f:7b:44:9c:87:ea:e5:82:01:da:4c:f7:72:ce:a7:
         35:f3:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org