Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3136382e302f32312d3231203d3e20323632323838.roa
File:                     3137372e3135342e3136382e302f32312d3231203d3e20323632323838.roa (raw, json)
Hash identifier:          hSxCkD4QsQIYsuCR+0mxV58RVbb6DkSvGRT9DjFpN38=
Subject key identifier:   98:F2:0A:00:95:1F:B7:47:63:22:C7:D2:5F:BE:15:5C:81:B5:D2:A3
Certificate issuer:       /CN=1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5
Certificate serial:       3B4707486E2721394CB3454918421B2DAD8D6F65
Authority key identifier: 16:54:C6:91:18:D9:AB:EA:0E:ED:EB:FD:99:B8:4C:5E:C5:08:3F:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3136382e302f32312d3231203d3e20323632323838.roa
Signing time:             Thu 08 Jul 2021 17:51:44 +0000
ROA not before:           Thu 08 Jul 2021 17:46:44 +0000
ROA not after:            Thu 07 Jul 2022 17:51:44 +0000
asID:                     262288
IP address blocks:        177.154.168.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:47:07:48:6e:27:21:39:4c:b3:45:49:18:42:1b:2d:ad:8d:6f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5
        Validity
            Not Before: Jul  8 17:46:44 2021 GMT
            Not After : Jul  7 17:51:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:26:6f:ba:43:c6:aa:1d:fc:e2:f8:04:50:8c:
                    0d:fc:3a:4f:31:f2:31:6c:a6:b0:9c:37:8a:e7:f9:
                    af:69:2a:27:6d:bd:3e:5b:aa:34:61:2f:62:87:73:
                    a1:4a:96:b3:fe:0e:47:51:aa:9e:9f:7b:76:0c:5b:
                    d7:63:b4:b0:f8:92:ef:2b:e4:f6:ba:85:5f:4a:ab:
                    85:24:4b:94:f2:60:8b:42:cd:1c:ce:2f:5b:56:46:
                    a9:87:8a:55:6d:9e:c6:6c:cd:14:5c:d1:55:05:1e:
                    b2:c9:51:c5:f9:4f:16:da:b4:09:3f:72:73:ac:68:
                    f0:c8:5a:f5:d1:39:85:4d:c8:ae:31:39:bb:a6:d6:
                    5f:83:03:6e:64:e9:71:b1:30:55:9a:32:7f:89:9a:
                    cb:6e:f8:12:75:25:0f:19:2c:e5:d2:65:01:f1:1f:
                    e4:39:8b:37:1a:c9:25:15:fb:ce:91:4a:35:3b:98:
                    e5:ed:3e:4c:81:56:d2:6d:04:84:e9:5f:36:24:ee:
                    df:a2:5c:75:99:f4:44:0d:f8:ce:a3:20:91:5d:da:
                    33:40:f6:f6:82:f4:c5:10:51:e2:45:5e:f6:a1:5b:
                    5e:a7:b5:0a:25:e6:63:61:8e:fa:c3:83:1d:3a:b7:
                    54:18:20:3c:6e:7a:99:a7:48:04:3a:10:b4:4a:73:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F2:0A:00:95:1F:B7:47:63:22:C7:D2:5F:BE:15:5C:81:B5:D2:A3
            X509v3 Authority Key Identifier:
                keyid:16:54:C6:91:18:D9:AB:EA:0E:ED:EB:FD:99:B8:4C:5E:C5:08:3F:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3136382e302f32312d3231203d3e20323632323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:84:a4:75:d6:ef:2e:45:48:9f:7b:d3:33:83:f6:17:47:12:
         9e:08:94:67:bb:7e:56:e8:57:77:26:88:50:81:74:8b:9c:a6:
         d1:71:72:25:81:9e:35:e9:7f:29:17:a0:2c:7a:cd:9b:22:e4:
         ec:61:59:c0:64:f8:5b:db:39:8a:98:17:5a:ad:37:28:5e:05:
         c1:7b:d1:fe:10:fe:02:49:5b:9d:47:f7:ee:02:30:56:8d:e3:
         4d:49:b9:35:84:d8:6d:7d:3c:cd:a0:69:f2:e3:cb:8e:58:d9:
         85:79:9f:b3:ff:e1:96:8e:18:ad:b5:fe:b3:be:7c:58:8d:f9:
         5e:fd:d0:aa:ad:11:b3:86:97:f2:ff:b3:1b:2e:85:6c:df:9b:
         92:27:a4:25:a7:7d:dc:04:31:c2:79:92:99:0c:6f:4b:66:29:
         3c:23:1d:d6:9b:c3:26:3e:74:4e:5f:87:6f:1c:22:58:a0:7a:
         d2:e5:b5:86:42:69:39:c9:15:16:64:4e:84:e8:e4:c1:c0:6b:
         38:66:0c:db:aa:8d:0f:af:9d:b7:99:da:32:0e:7a:ad:20:f1:
         15:3a:60:0d:1d:c4:d4:a5:34:04:47:3e:86:8d:74:db:fc:5c:
         77:a9:3b:4c:23:e4:12:70:b9:8f:ac:0c:2d:fe:b9:a6:c8:ad:
         05:2f:ba:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org