Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/3137372e38352e38302e302f32312d3332203d3e20323636313630.roa
File:                     3137372e38352e38302e302f32312d3332203d3e20323636313630.roa (raw, json)
Hash identifier:          J0bBy3b4XOdWC46q1wIubXX7TqcMCHtrYEvXdJ8uT1E=
Subject key identifier:   79:E6:92:D8:D2:24:93:05:57:1C:75:DA:0A:B5:7E:A1:BA:23:84:C5
Certificate issuer:       /CN=45C74F9C01E6DD83D22132E299E129ADA47BAAE6
Certificate serial:       5B1BDA20C5D02A353EA7DE82B18A004001D09D77
Authority key identifier: 45:C7:4F:9C:01:E6:DD:83:D2:21:32:E2:99:E1:29:AD:A4:7B:AA:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C74F9C01E6DD83D22132E299E129ADA47BAAE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/3137372e38352e38302e302f32312d3332203d3e20323636313630.roa
Signing time:             Mon 04 Dec 2023 02:43:18 +0000
ROA not before:           Mon 04 Dec 2023 02:38:18 +0000
ROA not after:            Mon 02 Dec 2024 02:43:18 +0000
asID:                     266160
IP address blocks:        177.85.80.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1b:da:20:c5:d0:2a:35:3e:a7:de:82:b1:8a:00:40:01:d0:9d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45C74F9C01E6DD83D22132E299E129ADA47BAAE6
        Validity
            Not Before: Dec  4 02:38:18 2023 GMT
            Not After : Dec  2 02:43:18 2024 GMT
        Subject: CN=79E692D8D2249305571C75DA0AB57EA1BA2384C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2a:dd:9b:9f:25:42:e9:99:82:89:66:34:ae:
                    4b:00:75:0d:aa:22:b7:5d:46:3c:62:ba:82:0a:78:
                    ec:59:eb:0b:2f:d8:87:04:9a:c5:5a:df:a8:1b:5f:
                    a3:85:c5:23:a3:8d:39:37:2b:1f:0a:1d:cf:ea:0c:
                    26:38:9a:d4:7a:70:63:f2:4d:50:ec:f4:42:f3:97:
                    f4:8e:0d:a2:dd:1b:1c:c0:1a:9c:ac:ab:06:cc:ec:
                    f8:a1:b2:b4:14:63:31:a2:d1:31:9c:07:72:e0:79:
                    f9:8c:76:20:80:64:b1:78:a8:79:2a:99:db:c6:d3:
                    6c:6a:01:c9:98:60:a1:a0:c8:35:ba:15:ab:dc:c5:
                    de:34:54:3e:99:df:ce:4f:1e:81:1d:ac:14:a1:54:
                    10:42:5e:f4:72:68:d8:53:cf:bd:ff:30:3d:0e:47:
                    24:ad:df:16:9d:2d:df:ae:3f:fc:66:30:64:f9:95:
                    b6:6d:ad:9c:97:77:9f:13:58:7a:69:fd:84:ec:cc:
                    6b:55:c9:1a:6f:9a:02:f7:c2:fc:17:69:bb:25:f3:
                    d9:50:a0:82:67:3b:76:f5:35:72:37:78:66:d3:c7:
                    45:60:fb:de:b6:94:79:40:67:a5:60:f7:97:c2:c4:
                    de:df:88:1a:6c:0d:23:ee:1d:4f:8b:05:a9:87:69:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E6:92:D8:D2:24:93:05:57:1C:75:DA:0A:B5:7E:A1:BA:23:84:C5
            X509v3 Authority Key Identifier:
                keyid:45:C7:4F:9C:01:E6:DD:83:D2:21:32:E2:99:E1:29:AD:A4:7B:AA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/45C74F9C01E6DD83D22132E299E129ADA47BAAE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C74F9C01E6DD83D22132E299E129ADA47BAAE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/3137372e38352e38302e302f32312d3332203d3e20323636313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:b3:63:8c:64:f6:c1:57:cf:18:4d:25:87:31:44:a6:24:91:
         42:ee:90:b3:16:58:45:47:9c:fb:08:23:f2:29:29:31:e9:35:
         0c:69:03:0a:41:86:c1:f6:c9:ab:e1:b0:c3:3f:dd:0b:7f:c1:
         23:88:1b:c5:dd:71:98:8e:69:5b:9e:c1:5b:43:77:c3:2e:83:
         02:c7:cf:8a:38:0e:9b:bc:6c:98:1e:0c:7a:13:c7:15:3d:4e:
         32:3b:94:2c:ae:56:2a:46:24:6d:03:dd:9d:16:10:39:75:ea:
         a0:9e:03:3b:d2:cd:9b:2d:fb:2d:ab:51:b6:bd:45:97:f9:6b:
         49:f3:6c:8a:cc:38:f2:fc:a0:79:9e:a2:ac:79:43:9f:06:6b:
         3e:55:c5:55:bd:58:4d:45:e0:cb:34:a2:4c:ab:bb:91:b1:e4:
         63:74:7b:eb:b7:68:9d:21:20:4c:aa:e9:13:c7:5c:a1:98:21:
         1d:68:0f:ca:a8:4c:33:0a:50:d8:bc:78:a2:4a:7a:10:cc:9c:
         a6:e7:e0:b5:b0:f2:5b:33:80:1e:45:9c:41:fb:31:92:df:1e:
         72:af:2f:45:00:f0:06:87:14:9d:dd:01:f2:21:e7:9e:1d:18:
         4a:cc:8d:56:26:7a:78:9b:07:d2:1c:d0:45:87:9f:96:36:d2:
         7d:6a:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org