Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/3137372e33382e34302e302f32312d3234203d3e203532393431.roa
File:                     3137372e33382e34302e302f32312d3234203d3e203532393431.roa (raw, json)
Hash identifier:          cyhtIYK05dJDdUamK/ASImZHqtt/FbGiZoIJCgusyzQ=
Subject key identifier:   F6:C4:2A:F1:F0:1D:14:07:07:27:4C:A7:51:6C:55:5B:BF:8B:A0:5A
Certificate issuer:       /CN=89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A
Certificate serial:       36415F676DEF74B23D22B96A21D81014E58A22E7
Authority key identifier: 89:D3:BA:1A:68:91:74:A6:2F:94:25:DD:D0:F6:89:2E:C0:EE:6E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/3137372e33382e34302e302f32312d3234203d3e203532393431.roa
Signing time:             Mon 24 Jul 2023 04:00:00 +0000
ROA not before:           Mon 24 Jul 2023 03:55:00 +0000
ROA not after:            Mon 22 Jul 2024 04:00:00 +0000
asID:                     52941
IP address blocks:        177.38.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:41:5f:67:6d:ef:74:b2:3d:22:b9:6a:21:d8:10:14:e5:8a:22:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A
        Validity
            Not Before: Jul 24 03:55:00 2023 GMT
            Not After : Jul 22 04:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:3e:0a:31:15:e4:4e:9a:87:b8:eb:d4:07:
                    e8:0a:e4:cb:11:eb:d9:bc:02:71:4f:f4:be:8b:90:
                    a7:f6:ae:9b:1e:78:36:6c:01:ac:7a:98:f7:f1:82:
                    a1:fc:9f:e1:c2:8f:65:25:53:5a:11:69:e8:60:a2:
                    db:67:0b:2c:ac:0c:ee:32:ed:74:86:ac:ec:80:6f:
                    7d:5c:f4:f7:31:d7:7f:ad:d4:88:9f:f8:89:fe:bf:
                    d1:20:e9:56:c7:d8:6c:38:7f:f4:b5:35:1d:8a:be:
                    e8:40:09:36:89:e9:05:7b:51:32:67:da:37:fb:d3:
                    b5:25:3e:e8:20:58:1b:f1:41:dd:63:4e:6f:2c:15:
                    55:1e:2d:6c:16:f1:d2:86:53:90:c5:d1:fd:d5:70:
                    84:4a:a1:e8:76:ed:b0:48:29:da:ad:32:7a:67:43:
                    5f:c9:33:da:83:43:09:a1:c8:55:ab:1b:ff:7e:92:
                    f9:59:1b:b4:a7:f9:e8:6c:89:3c:ec:11:7f:25:72:
                    d6:87:e1:cd:48:65:26:be:5d:d7:a8:b6:13:88:d8:
                    e2:2a:21:e3:f2:3c:ae:d0:f2:fd:18:cb:10:21:51:
                    5e:8c:b7:10:09:04:f0:1d:5e:27:d3:95:e7:5c:1a:
                    ef:b1:1a:5e:e6:22:42:6b:45:74:a3:11:7c:1d:a4:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C4:2A:F1:F0:1D:14:07:07:27:4C:A7:51:6C:55:5B:BF:8B:A0:5A
            X509v3 Authority Key Identifier:
                keyid:89:D3:BA:1A:68:91:74:A6:2F:94:25:DD:D0:F6:89:2E:C0:EE:6E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/3137372e33382e34302e302f32312d3234203d3e203532393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bf:ff:ec:8a:49:fe:71:2f:68:ab:8f:b5:92:41:1b:48:c9:c8:
         35:58:42:3c:0e:c1:45:77:14:d3:b9:53:af:cc:5a:1f:b5:75:
         3f:7e:e6:2f:4c:68:c0:e9:af:f2:5d:53:c8:2d:7a:81:44:e5:
         60:0b:2b:68:52:92:48:ee:66:c8:29:6c:87:fe:8c:c1:7c:73:
         2b:e7:c6:29:17:60:c9:9a:6d:57:55:19:4c:11:da:b7:5d:34:
         cc:c3:43:4e:2a:34:e6:d0:eb:d1:66:12:08:b5:13:d2:8d:8b:
         69:56:aa:bc:85:70:35:2d:99:78:d6:9e:13:93:59:34:3e:fd:
         bc:4b:59:10:71:0b:27:56:c9:ff:77:46:7e:d1:c2:25:f3:fd:
         53:64:0b:4e:6e:a8:38:0a:d4:a9:f4:a5:c3:da:90:36:e8:9c:
         8c:00:1b:eb:a2:4c:22:cf:ac:5c:d4:e9:3b:0c:66:48:05:4d:
         11:77:85:ec:01:28:2e:b8:08:1e:2d:ab:0f:53:91:cd:2e:97:
         ae:56:a4:b0:12:90:29:51:3a:69:fc:1a:27:28:81:7b:c8:46:
         0e:9c:aa:b8:ee:e2:a7:77:7a:2a:36:df:11:32:80:17:c4:aa:
         c6:dd:b4:e9:40:72:b0:7b:05:a6:f9:db:21:41:32:8a:1d:78:
         17:48:54:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org