Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3137322e302f32322d3232203d3e20323632323838.roa
File:                     3137372e3135342e3137322e302f32322d3232203d3e20323632323838.roa (raw, json)
Hash identifier:          b4QWKgRhx6CjPw254pzTREtE6Il86u0KJ1GphGis3W0=
Subject key identifier:   56:A2:E3:A6:12:AA:17:0F:0F:AF:EC:29:45:19:42:88:C2:31:7A:A6
Certificate issuer:       /CN=1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5
Certificate serial:       3DD7E36C2B79CA99F084E54D22A5B6A73EE52399
Authority key identifier: 16:54:C6:91:18:D9:AB:EA:0E:ED:EB:FD:99:B8:4C:5E:C5:08:3F:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3137322e302f32322d3232203d3e20323632323838.roa
Signing time:             Thu 08 Jul 2021 17:51:44 +0000
ROA not before:           Thu 08 Jul 2021 17:46:44 +0000
ROA not after:            Thu 07 Jul 2022 17:51:44 +0000
asID:                     262288
IP address blocks:        177.154.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d7:e3:6c:2b:79:ca:99:f0:84:e5:4d:22:a5:b6:a7:3e:e5:23:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5
        Validity
            Not Before: Jul  8 17:46:44 2021 GMT
            Not After : Jul  7 17:51:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:3e:ef:7a:25:c7:4a:c4:29:b5:ac:1c:17:
                    83:3d:33:38:06:36:83:2f:05:3d:17:8b:13:d3:8e:
                    74:3f:39:56:6f:fa:60:8e:04:64:8e:67:a8:9f:fb:
                    e7:04:6a:ff:65:c3:b9:6f:f5:4c:ae:e6:04:78:12:
                    21:ea:2a:16:20:da:7c:f2:69:a0:79:e9:73:98:35:
                    07:10:d7:2c:5c:e9:38:3e:ed:f9:f3:b8:4f:ea:59:
                    b1:b1:9b:7f:cd:a7:c2:a7:11:66:66:48:9c:1f:6a:
                    bb:a4:97:4e:3f:3a:a0:53:00:c3:40:a4:2f:3c:16:
                    12:2a:bd:59:7a:4c:dc:f7:7f:0c:f8:a5:27:f6:b5:
                    e4:33:04:bf:42:01:39:8e:6b:81:c2:af:73:05:ea:
                    1d:42:2f:fb:c4:a4:22:09:46:c1:dc:5b:85:10:8d:
                    7b:c5:a1:c6:51:72:0f:c3:04:68:13:15:88:71:13:
                    39:b0:13:fc:f5:4b:d9:fa:b1:ba:14:df:3a:b6:64:
                    0a:c9:60:a5:a5:e2:b1:ba:f2:bd:e1:0b:06:83:28:
                    61:1a:4d:3e:47:2f:c5:33:f0:cb:a5:85:23:ef:31:
                    b6:ef:81:93:05:23:ac:ae:d4:bb:c3:45:ee:30:3d:
                    4d:ff:b0:8a:da:c3:5f:55:0e:53:65:10:a2:22:7f:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A2:E3:A6:12:AA:17:0F:0F:AF:EC:29:45:19:42:88:C2:31:7A:A6
            X509v3 Authority Key Identifier:
                keyid:16:54:C6:91:18:D9:AB:EA:0E:ED:EB:FD:99:B8:4C:5E:C5:08:3F:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3137322e302f32322d3232203d3e20323632323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:b0:6a:e1:01:63:cc:85:e6:db:4e:7f:dd:42:6d:c0:13:e4:
         ba:3b:c3:81:b1:01:56:ec:b2:a7:f3:43:c8:8b:32:fd:b5:56:
         51:45:3c:86:10:ca:bd:af:e5:78:ce:1f:f9:9c:96:47:58:aa:
         7f:e6:a0:17:d5:6e:78:32:f3:33:68:5e:51:03:e4:2d:ec:bc:
         85:ab:f1:55:a7:35:4c:35:49:b9:0a:fa:59:67:10:c5:af:d9:
         2b:88:01:16:2c:f2:32:c4:21:6b:65:75:14:7c:77:23:55:94:
         20:71:2e:b8:59:65:35:fa:59:91:17:ad:5b:0a:fe:89:be:6a:
         36:26:72:22:2e:46:bc:88:3a:da:95:fa:c8:f5:ae:14:a4:c2:
         69:39:88:23:95:4c:26:a5:83:0d:c8:35:57:75:d3:93:a4:3b:
         ff:af:1d:aa:e5:17:f2:58:60:4d:42:3a:98:21:95:cf:11:f6:
         4a:15:82:4f:31:30:31:c3:c2:73:dd:d1:6b:ce:9b:0d:14:e1:
         6b:ee:0b:48:9d:40:b7:8e:01:2d:65:00:ee:33:fe:0f:ab:9a:
         c2:c6:3c:6e:a0:5d:82:65:a6:5f:a5:0a:9a:70:71:db:3c:6a:
         76:4d:ce:a7:75:2a:49:d1:bc:66:24:e2:64:af:bf:f2:5d:46:
         09:c7:60:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org