Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/3137372e38352e38302e302f32332d3233203d3e20323636313630.roa
File:                     3137372e38352e38302e302f32332d3233203d3e20323636313630.roa (raw, json)
Hash identifier:          zpzfWon6GfitNhK8vBPgZfzctbgKa5TrtCaJWv7pRf0=
Subject key identifier:   94:6A:BB:07:9B:EF:C1:4D:D1:84:5B:7F:19:7B:AB:75:18:23:89:BA
Certificate issuer:       /CN=45C74F9C01E6DD83D22132E299E129ADA47BAAE6
Certificate serial:       39BD9AD016DC09918BBBFF964A8530770F74510C
Authority key identifier: 45:C7:4F:9C:01:E6:DD:83:D2:21:32:E2:99:E1:29:AD:A4:7B:AA:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C74F9C01E6DD83D22132E299E129ADA47BAAE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/3137372e38352e38302e302f32332d3233203d3e20323636313630.roa
Signing time:             Thu 16 Nov 2023 15:32:39 +0000
ROA not before:           Thu 16 Nov 2023 15:27:39 +0000
ROA not after:            Thu 14 Nov 2024 15:32:39 +0000
asID:                     266160
IP address blocks:        177.85.80.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bd:9a:d0:16:dc:09:91:8b:bb:ff:96:4a:85:30:77:0f:74:51:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45C74F9C01E6DD83D22132E299E129ADA47BAAE6
        Validity
            Not Before: Nov 16 15:27:39 2023 GMT
            Not After : Nov 14 15:32:39 2024 GMT
        Subject: CN=946ABB079BEFC14DD1845B7F197BAB75182389BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:bb:dc:af:16:80:9c:18:9c:16:30:8c:c7:
                    f8:e0:2f:6d:f6:12:78:55:5b:49:f7:38:75:5e:70:
                    6a:68:fa:47:88:a3:4c:3b:11:f5:05:93:f2:e3:85:
                    bc:3d:40:2c:e9:da:89:b7:ac:12:48:90:d1:30:76:
                    e0:a5:91:22:ed:b7:d4:28:5a:b5:ec:99:d3:dc:23:
                    53:3c:bf:d9:7f:8e:1a:1a:67:46:af:7d:3f:62:a3:
                    ef:dc:c2:53:5d:af:d9:cd:dc:8b:41:81:1d:62:c5:
                    bf:54:65:a5:ed:4a:97:ec:19:dc:57:55:f9:68:e2:
                    d3:21:cc:62:cd:b4:d1:31:b5:41:19:b6:e3:ce:ca:
                    c1:2c:96:1e:54:b4:51:b5:1e:7c:87:44:30:e9:dd:
                    d6:e4:b0:22:73:b2:be:5e:b7:25:3d:40:d7:b7:6f:
                    b8:b5:2f:68:1f:82:a1:62:13:1d:07:98:4e:96:f0:
                    19:c3:98:fe:2e:eb:d8:cf:28:ba:94:26:61:ce:11:
                    0d:96:9d:c0:b3:d0:f6:cb:f5:f1:7f:91:72:a2:b2:
                    5a:9d:e3:e6:18:d1:00:6a:46:59:4b:ad:db:9e:3a:
                    d6:fa:af:47:1d:d2:03:15:f8:46:b3:89:d0:2b:26:
                    c2:f5:0d:d2:ac:7a:5a:91:12:a1:f6:aa:62:bc:6b:
                    e6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6A:BB:07:9B:EF:C1:4D:D1:84:5B:7F:19:7B:AB:75:18:23:89:BA
            X509v3 Authority Key Identifier:
                keyid:45:C7:4F:9C:01:E6:DD:83:D2:21:32:E2:99:E1:29:AD:A4:7B:AA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/45C74F9C01E6DD83D22132E299E129ADA47BAAE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C74F9C01E6DD83D22132E299E129ADA47BAAE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/3137372e38352e38302e302f32332d3233203d3e20323636313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:0c:5d:35:dc:63:54:b0:de:a7:4f:be:0c:b2:f1:ab:d1:08:
         72:ed:20:f4:a3:7d:05:fa:8b:90:a9:c5:54:82:af:91:9c:e8:
         51:2c:1a:4a:a2:0e:8b:22:a8:c7:8d:04:a9:28:31:cf:80:68:
         97:66:8c:3f:3f:ca:b9:eb:43:5a:df:61:2a:7d:93:4b:f2:1b:
         5d:b9:65:99:ec:64:e5:ad:6b:47:dc:c2:20:22:1b:97:76:3c:
         b1:2e:35:85:11:dd:b4:22:60:75:39:69:0b:21:94:f1:6a:30:
         ca:29:23:17:df:eb:93:3c:04:f2:df:9d:60:ac:d5:55:ee:07:
         fa:f2:07:d2:cb:d3:b2:bd:34:25:84:b0:c2:7a:0c:1f:2a:1a:
         e9:97:6d:a8:62:6f:f4:15:91:eb:55:a2:49:b9:6e:40:8b:3b:
         88:64:37:c4:fa:0c:7d:ac:14:f0:1e:b8:80:fd:63:49:7b:82:
         a7:c2:01:25:65:13:15:32:d2:51:28:27:15:4e:15:cd:d3:cd:
         1d:6f:f5:ba:b5:6d:55:cb:c4:bf:bb:96:a7:de:0d:29:67:0a:
         d7:e7:1b:d0:f9:82:da:a1:c2:ad:36:8e:5b:4f:d3:d8:36:39:
         c4:a1:6e:9e:50:05:b3:c9:46:fb:91:a0:2d:5d:26:fc:e7:be:
         e6:02:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org