Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36382e302f32322d3232203d3e20323632333136.roa
File:                     3137372e37342e36382e302f32322d3232203d3e20323632333136.roa (raw, json)
Hash identifier:          CB0YM8zlhKpdRhr3N/KEFsN6BFE9/fuuRYCRHiw3jtc=
Subject key identifier:   F2:AE:A0:D5:06:88:31:75:23:A9:55:C2:98:CF:C8:B0:31:C3:D1:B7
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       7D24AAB42220E12B37867605AFA1A7D9EBC3D567
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36382e302f32322d3232203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:39 +0000
ROA not before:           Mon 21 Aug 2023 13:21:39 +0000
ROA not after:            Mon 19 Aug 2024 13:26:39 +0000
asID:                     262316
IP address blocks:        177.74.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:24:aa:b4:22:20:e1:2b:37:86:76:05:af:a1:a7:d9:eb:c3:d5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:39 2023 GMT
            Not After : Aug 19 13:26:39 2024 GMT
        Subject: CN=F2AEA0D50688317523A955C298CFC8B031C3D1B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:89:1d:17:67:b6:91:56:4f:69:f6:fc:09:a3:
                    df:4f:d0:b4:b5:77:51:fa:97:2b:71:d4:82:c8:95:
                    43:f5:a1:b2:8b:17:9c:c4:d8:f8:26:e4:af:a0:6c:
                    e3:a8:f1:fb:eb:f7:f3:e0:8e:a3:9f:6f:81:59:17:
                    91:8f:7f:9d:98:0c:f4:c9:5f:21:58:11:57:29:be:
                    bd:79:97:0e:7e:10:cc:85:16:21:80:73:3c:f9:e4:
                    11:29:50:b4:81:c2:ab:63:76:d3:f7:0a:aa:ea:9a:
                    f8:ab:91:b5:47:b6:f1:7b:17:22:b2:7d:b9:6a:6b:
                    60:6e:e6:5d:db:25:2e:6a:17:25:9a:00:8d:91:5e:
                    9f:5e:5d:3f:07:37:e5:9b:c3:96:e8:d8:de:00:a6:
                    40:e0:cb:eb:07:f1:e6:00:b5:e5:90:4d:d5:2d:42:
                    51:04:f2:45:8c:83:f4:9d:93:52:d4:76:dc:40:35:
                    5d:4f:2e:cd:95:11:2d:af:3c:e2:1e:4a:4a:cd:d7:
                    22:c2:b7:48:24:7d:fa:60:f7:c8:a9:4a:65:61:3c:
                    e8:33:9f:f8:80:10:58:ee:ac:af:55:26:36:d7:ad:
                    5f:4c:6b:0b:a7:a7:f7:6d:32:0d:1a:49:7c:51:91:
                    8a:e1:c2:08:6e:41:4c:39:5b:23:17:b3:1f:a5:53:
                    c6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AE:A0:D5:06:88:31:75:23:A9:55:C2:98:CF:C8:B0:31:C3:D1:B7
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36382e302f32322d3232203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:82:20:79:a8:c3:65:78:01:36:bf:27:bb:29:4b:d9:ae:00:
         db:a4:1f:9a:ab:d3:cb:bd:fe:53:a6:b3:89:62:fd:d6:d9:b2:
         91:35:e4:a7:12:f8:2e:6b:22:b5:40:00:aa:f8:94:77:e3:9e:
         02:a2:c4:3d:6c:7b:f0:bd:ce:83:c6:07:1e:33:ae:48:91:70:
         c8:3a:36:b2:4f:bd:f2:dd:58:ee:cb:d3:dc:52:51:1f:6f:44:
         4c:95:d3:2f:c3:9b:e5:8e:26:76:d5:57:15:49:22:63:96:01:
         d0:e9:b8:b7:da:82:fc:6e:0b:ee:4c:51:86:05:41:0a:b4:c7:
         9b:fe:43:0c:9c:5e:97:72:35:c7:eb:5f:fa:13:16:d1:39:ec:
         40:8d:67:79:a5:1d:37:fd:cd:0e:08:7a:f9:75:02:cf:99:83:
         f3:5d:ce:0b:31:c0:7e:dc:84:24:47:18:1c:7a:cb:43:22:2e:
         43:2b:a5:61:b9:28:9f:36:a7:a5:c6:df:5a:22:01:54:06:53:
         97:ff:6d:d1:27:53:5b:b6:3a:69:9d:fe:89:b5:e9:a0:83:ad:
         43:6f:c5:ca:86:c4:ba:86:11:18:b2:c4:2a:31:ca:88:cf:f0:
         38:ee:ab:fc:89:56:0f:65:4e:c3:61:8f:86:22:a9:2d:9e:72:
         9a:d1:af:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org