Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3130322e302f32342d3234203d3e203533313036.roa
File:                     3138372e3130382e3130322e302f32342d3234203d3e203533313036.roa (raw, json)
Hash identifier:          d3ylQBsK+ujTxV66MYlDw9Rf9k/Xgx8SODceBkeE+wg=
Subject key identifier:   17:CE:33:78:09:A2:F9:91:E2:33:D4:2E:9C:A2:22:CE:71:B5:1D:69
Certificate issuer:       /CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
Certificate serial:       10C2247732CF703CFC087773855786CABADE1D13
Authority key identifier: DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3130322e302f32342d3234203d3e203533313036.roa
Signing time:             Wed 05 Jan 2022 15:53:07 +0000
ROA not before:           Wed 05 Jan 2022 15:48:07 +0000
ROA not after:            Wed 04 Jan 2023 15:53:07 +0000
asID:                     53106
IP address blocks:        187.108.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c2:24:77:32:cf:70:3c:fc:08:77:73:85:57:86:ca:ba:de:1d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
        Validity
            Not Before: Jan  5 15:48:07 2022 GMT
            Not After : Jan  4 15:53:07 2023 GMT
        Subject: CN=17CE337809A2F991E233D42E9CA222CE71B51D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0f:c7:66:bb:5c:9b:78:ef:85:2e:21:2f:82:
                    26:93:be:7e:b9:03:81:c5:33:e9:ce:e8:b2:59:d2:
                    32:4a:e5:a2:66:02:4f:a2:13:32:fb:77:fe:8f:ec:
                    99:20:68:c9:49:f0:8d:23:11:92:77:c6:ff:5a:78:
                    26:4c:38:16:58:81:35:46:81:73:70:95:fd:3b:3f:
                    5b:e4:91:96:7c:a2:e5:d4:99:28:fb:12:50:13:65:
                    42:19:36:bd:59:93:bf:5c:09:a6:c7:a6:de:8e:5e:
                    ba:b6:7a:a9:00:8a:f5:a7:1e:82:13:5d:a3:a8:ff:
                    84:56:ea:ee:7e:26:c3:5f:19:de:57:cb:7a:2a:dd:
                    0e:32:92:81:e6:df:5b:9c:fc:42:02:e9:31:d7:cf:
                    de:1c:b7:4c:79:bd:f9:5b:bb:3f:1e:7c:86:39:85:
                    3a:a0:9d:f4:ff:25:96:44:57:3f:23:0f:7b:f5:9e:
                    ea:dd:10:b6:77:5d:89:a6:5b:90:57:12:3b:18:a6:
                    3d:38:51:6e:e3:4d:ae:7a:cf:de:98:77:74:5c:aa:
                    c1:51:4f:82:f2:76:ca:74:65:93:fd:83:a3:f8:cb:
                    96:ca:31:4e:ad:f3:34:50:51:73:fd:08:29:a5:39:
                    6a:95:af:c0:d4:ac:e5:ff:96:c5:b4:2d:85:69:80:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CE:33:78:09:A2:F9:91:E2:33:D4:2E:9C:A2:22:CE:71:B5:1D:69
            X509v3 Authority Key Identifier:
                keyid:DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3130322e302f32342d3234203d3e203533313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:73:21:33:c3:eb:c0:ff:38:ad:45:88:87:87:e1:f4:d4:9f:
         25:bc:3f:8e:db:2f:43:27:78:c7:3d:70:86:57:42:1f:28:32:
         aa:be:6b:fe:b0:b4:ba:f7:e0:d5:ce:8d:07:93:3c:0c:42:d7:
         c9:bb:8d:e0:18:d4:97:46:cb:3a:6f:6f:2a:f6:c2:cd:54:af:
         46:b5:5d:ca:c7:f6:91:fb:6d:31:16:65:6b:84:9e:ef:b9:25:
         69:aa:7d:f3:c4:c4:5a:03:80:01:9e:78:19:b5:32:39:2d:5c:
         97:13:10:f3:7f:b1:89:b2:47:2a:58:23:4c:d0:72:b6:f1:1a:
         96:05:1d:c3:5c:05:25:06:41:3a:3e:63:8d:98:2a:27:bc:95:
         20:48:a5:fa:2b:9d:24:97:72:69:02:aa:a3:fe:a7:d5:03:60:
         67:69:a1:05:23:a3:27:2c:45:4f:17:c8:8c:d8:5d:73:99:fb:
         bb:f3:6f:41:dc:61:32:6d:2e:cc:13:62:57:db:55:3a:f3:68:
         92:e7:55:f0:96:6a:d3:33:72:13:12:ed:89:c1:e2:1b:a5:b2:
         c6:14:2e:62:2a:27:2f:29:c9:41:a9:58:78:38:33:65:d6:9f:
         16:16:61:16:45:82:39:43:3f:8c:c0:81:ce:03:2c:70:21:a6:
         7f:63:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org