Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137372e3132352e33322e302f32312d3234203d3e203238313436.roa
File:                     3137372e3132352e33322e302f32312d3234203d3e203238313436.roa (raw, json)
Hash identifier:          kWGq+zkyunwNJnp3JS9D2vN4DNVcA8UoEPn30YG6kas=
Subject key identifier:   DE:7B:C6:30:28:EA:2D:D5:7B:44:E5:2F:29:57:83:5C:40:23:C0:BD
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       1940D76A0D06A4183DF0142D6584FB1A7037C383
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137372e3132352e33322e302f32312d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:47 +0000
ROA not before:           Wed 21 Dec 2022 17:11:47 +0000
ROA not after:            Wed 20 Dec 2023 17:16:47 +0000
asID:                     28146
IP address blocks:        177.125.32.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:40:d7:6a:0d:06:a4:18:3d:f0:14:2d:65:84:fb:1a:70:37:c3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:47 2022 GMT
            Not After : Dec 20 17:16:47 2023 GMT
        Subject: CN=DE7BC63028EA2DD57B44E52F2957835C4023C0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ba:5d:85:71:6e:2a:c9:0e:c4:de:af:3d:9a:
                    13:61:f7:6c:30:ed:15:e5:96:50:9e:d4:17:07:4f:
                    43:ae:8e:1f:19:5d:d2:62:03:5f:e4:3c:1c:3c:d2:
                    a3:75:eb:8c:71:83:50:f5:e4:e8:22:e1:2e:f6:de:
                    8e:68:97:12:b8:35:2c:df:80:26:f0:59:7e:51:34:
                    01:24:5a:be:6f:3b:56:69:40:a1:e0:18:42:82:c9:
                    00:be:b8:e0:46:f3:02:39:86:db:ad:8f:2d:6f:f1:
                    e6:fe:74:bd:c6:98:96:77:7c:ac:86:44:00:18:ae:
                    16:6d:74:a2:1f:fe:f2:c5:04:99:50:23:a6:b3:91:
                    e6:21:da:53:a4:72:a1:b3:7e:b1:8c:5d:75:b4:1c:
                    7f:c1:06:b1:be:34:de:b7:e4:23:1d:ef:ad:c7:9a:
                    0d:3a:af:17:cd:d0:a2:94:72:98:14:16:ca:fa:dc:
                    c6:21:10:38:d9:c8:68:19:34:ea:9d:cc:8b:bd:67:
                    ed:f7:d6:60:c6:67:8d:d1:14:53:d8:b6:3a:c2:82:
                    c5:47:7b:5d:51:94:5c:3c:05:9b:a4:6b:4b:9f:d4:
                    e2:47:43:c1:d9:10:fe:ec:14:c5:65:83:2a:97:53:
                    cc:19:e0:28:9f:e2:05:9a:39:24:b2:f2:77:4f:4b:
                    b4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7B:C6:30:28:EA:2D:D5:7B:44:E5:2F:29:57:83:5C:40:23:C0:BD
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137372e3132352e33322e302f32312d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:38:a8:ac:fe:b3:20:ed:7c:d1:65:38:52:96:94:b2:f6:5f:
         05:ce:54:d4:35:7a:92:17:17:90:ef:23:8c:0c:22:5c:08:b1:
         03:63:18:a7:0e:0d:7c:84:bb:11:3b:43:38:70:ee:37:3d:3c:
         ec:8b:39:3e:a9:fe:99:5f:ce:c2:ab:8a:25:84:16:67:02:3a:
         b8:9c:4a:0d:34:49:e6:bb:f6:2d:9d:83:29:bb:f5:ee:c3:da:
         aa:0b:b9:06:81:81:29:72:6b:58:72:79:6d:12:37:20:1a:88:
         86:15:10:8a:ca:0d:bf:23:b0:07:28:d0:fd:b0:05:a4:77:0b:
         d3:c5:f6:7d:bb:85:46:72:67:57:a8:99:0e:69:d4:20:6c:10:
         25:7c:ab:1d:c9:87:f5:b8:70:b0:ae:13:f7:95:d4:e7:fb:ec:
         b8:ac:cc:3f:65:ff:57:b5:69:90:25:86:b5:09:fa:2b:5c:ff:
         96:8e:a1:35:f4:79:a5:ef:5c:9d:c4:83:75:de:8b:26:dc:36:
         6e:7f:4a:d7:5b:63:2a:0d:1b:4a:19:e4:a8:17:e8:06:d2:47:
         34:25:5e:55:10:9b:3e:62:78:9e:af:04:2d:da:3a:9d:9a:3b:
         90:21:8b:63:9b:4c:61:9b:12:d5:ea:1e:28:2a:dc:11:94:98:
         3b:f6:43:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org