Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3136302e302f32302d3332203d3e20323632323838.roa
File:                     3137372e3135342e3136302e302f32302d3332203d3e20323632323838.roa (raw, json)
Hash identifier:          d+N+df5AqKcG5E/yCHDHI9xjLHxpbCpw6GyVhcGGzgU=
Subject key identifier:   E0:5B:BC:70:7D:8C:BA:CE:E1:7E:9F:81:45:3A:9B:81:C7:F1:BF:6E
Certificate issuer:       /CN=B01DA4E6B1788F2115423DAD9B220AC26F1AA123
Certificate serial:       500DA30AB0C9DCA3A07BACF0F27D346F5E589D92
Authority key identifier: B0:1D:A4:E6:B1:78:8F:21:15:42:3D:AD:9B:22:0A:C2:6F:1A:A1:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B01DA4E6B1788F2115423DAD9B220AC26F1AA123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3136302e302f32302d3332203d3e20323632323838.roa
Signing time:             Sat 27 May 2023 13:07:07 +0000
ROA not before:           Sat 27 May 2023 13:02:07 +0000
ROA not after:            Sat 25 May 2024 13:07:07 +0000
asID:                     262288
IP address blocks:        177.154.160.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0d:a3:0a:b0:c9:dc:a3:a0:7b:ac:f0:f2:7d:34:6f:5e:58:9d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B01DA4E6B1788F2115423DAD9B220AC26F1AA123
        Validity
            Not Before: May 27 13:02:07 2023 GMT
            Not After : May 25 13:07:07 2024 GMT
        Subject: CN=E05BBC707D8CBACEE17E9F81453A9B81C7F1BF6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:1d:21:5b:9b:0c:9e:f2:21:17:93:4c:24:
                    38:3a:cd:ef:c2:85:0f:37:45:f3:5a:c7:c1:d7:36:
                    a1:0e:c8:2e:70:a9:9b:bc:e1:8a:63:8e:07:12:49:
                    c3:db:2e:b3:42:01:e7:98:d1:7e:e4:93:ac:54:f6:
                    cf:94:fd:9c:78:a5:59:b0:3a:f1:b0:17:58:e0:da:
                    f8:b9:a6:f4:0d:4c:ea:30:9f:98:68:d0:f8:c7:c7:
                    e2:42:58:da:69:75:41:14:d5:50:8d:82:3d:7b:22:
                    89:ec:52:3c:ee:d4:55:39:1d:07:ea:25:b5:9d:d8:
                    8d:e8:ae:b4:7b:2b:87:b5:1d:95:76:68:08:58:90:
                    43:13:6d:3b:d9:c7:6e:36:65:4f:47:79:24:d6:1d:
                    8a:3c:97:d0:9d:d9:80:ea:16:21:d6:61:5e:05:2f:
                    56:d3:b6:37:2c:90:a4:8f:25:d1:13:25:c3:53:09:
                    b7:1f:14:63:98:e6:e5:9c:9f:73:36:99:57:8e:42:
                    ef:ad:ca:2c:ac:8e:c0:53:60:33:a3:f0:f5:9a:46:
                    da:bb:ca:ec:b3:48:c3:94:c8:54:50:98:e9:d5:c3:
                    b0:31:67:51:f3:84:cc:0f:0b:47:be:eb:57:54:6b:
                    63:47:7f:05:31:20:08:5b:22:2b:f2:4d:f8:3a:9e:
                    e5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5B:BC:70:7D:8C:BA:CE:E1:7E:9F:81:45:3A:9B:81:C7:F1:BF:6E
            X509v3 Authority Key Identifier:
                keyid:B0:1D:A4:E6:B1:78:8F:21:15:42:3D:AD:9B:22:0A:C2:6F:1A:A1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/B01DA4E6B1788F2115423DAD9B220AC26F1AA123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B01DA4E6B1788F2115423DAD9B220AC26F1AA123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3136302e302f32302d3332203d3e20323632323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         be:9f:8a:00:17:34:06:fd:1a:de:56:85:c3:7e:51:06:2d:e7:
         ad:82:76:f1:6e:59:74:54:cd:16:76:ed:8d:aa:7d:7d:58:0a:
         cf:03:eb:e5:a5:1b:02:ca:10:3c:e1:51:93:7d:86:1e:ac:97:
         86:a7:d7:42:b2:b8:94:1f:28:69:f2:15:2a:fc:01:4d:2e:19:
         9c:a1:9a:82:d2:f1:94:62:42:88:5f:b8:14:f7:8f:2f:05:93:
         08:9a:3b:8c:47:da:e5:b5:22:5e:ef:38:19:ff:7a:a9:8a:cc:
         51:6f:f4:7d:7c:aa:36:bd:3a:6e:af:87:01:93:d7:f5:dc:99:
         0b:1b:e5:35:7f:bf:05:b9:bc:cd:05:8d:bc:8a:b7:08:83:72:
         38:90:49:f7:e2:39:e1:29:d7:b6:3a:39:2f:29:06:ad:dc:f8:
         1f:09:d6:4b:b5:5c:a7:7c:ff:c4:b6:67:7b:92:cd:4d:03:3c:
         cb:11:aa:d1:57:04:83:27:d5:e4:ab:c3:66:ef:dc:4c:e0:12:
         50:b6:18:78:75:42:31:62:c2:16:4c:c0:7b:be:d1:f4:7e:e1:
         e2:20:df:ea:0b:34:3f:81:36:3b:77:c5:22:55:56:38:d9:81:
         4d:54:be:29:2c:db:a2:81:7d:02:9f:ce:12:a8:d5:01:46:db:
         d0:82:e6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org