Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/3137372e35342e36342e302f32302d3234203d3e203238313534.roa
File:                     3137372e35342e36342e302f32302d3234203d3e203238313534.roa (raw, json)
Hash identifier:          jHovIqXet80r80nL506QTJmeBJzY3++3/fEK5hLc+Iw=
Subject key identifier:   7F:D6:6D:C4:17:F7:06:3F:36:B7:57:07:BD:A6:5C:DC:51:C7:C9:D7
Certificate issuer:       /CN=1BD51938C8BE6619E7290C7B5046C46C81CD38B6
Certificate serial:       3E8EB2C8677C78DE230C331E6455381DBDD6719A
Authority key identifier: 1B:D5:19:38:C8:BE:66:19:E7:29:0C:7B:50:46:C4:6C:81:CD:38:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD51938C8BE6619E7290C7B5046C46C81CD38B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/3137372e35342e36342e302f32302d3234203d3e203238313534.roa
Signing time:             Thu 19 Oct 2023 18:09:01 +0000
ROA not before:           Thu 19 Oct 2023 18:04:01 +0000
ROA not after:            Thu 17 Oct 2024 18:09:01 +0000
asID:                     28154
IP address blocks:        177.54.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8e:b2:c8:67:7c:78:de:23:0c:33:1e:64:55:38:1d:bd:d6:71:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD51938C8BE6619E7290C7B5046C46C81CD38B6
        Validity
            Not Before: Oct 19 18:04:01 2023 GMT
            Not After : Oct 17 18:09:01 2024 GMT
        Subject: CN=7FD66DC417F7063F36B75707BDA65CDC51C7C9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:08:c9:31:db:88:c5:db:34:8f:f8:ba:7f:8e:
                    dc:2c:df:56:5a:93:fa:f8:79:0d:af:51:fc:df:16:
                    ae:87:6e:54:51:44:a6:80:42:20:d0:96:c2:55:c7:
                    95:15:34:62:cb:3e:45:bd:a2:a0:e9:db:2b:51:e8:
                    70:c0:b6:88:a6:49:4b:3e:f2:89:9a:fa:25:2c:0a:
                    8b:c5:f7:83:0f:25:b4:fa:8f:fe:7d:e5:52:ae:58:
                    4d:5b:73:3d:c4:a9:2e:2c:64:01:41:76:23:45:96:
                    8c:6a:2e:33:a9:2e:ed:e6:05:21:b5:f1:1a:16:44:
                    a0:b9:ca:42:4c:83:42:bc:21:f2:32:67:e2:18:a4:
                    14:21:b1:e3:e4:2b:27:9a:03:c9:d8:1a:73:9d:03:
                    3b:5c:a4:50:56:4d:d3:31:04:58:dd:99:86:9a:ca:
                    21:b8:86:34:98:0c:e4:68:ae:97:28:a2:47:8b:f6:
                    0a:c3:af:08:a3:e3:37:91:3b:5b:c5:e2:ea:fa:4d:
                    6e:ae:d4:aa:b6:1f:ec:51:af:31:f8:03:62:f4:f2:
                    c0:c5:a5:2b:76:c6:01:c9:2e:81:26:0b:cb:bd:e2:
                    49:89:e4:8c:9d:7b:a7:db:5f:5a:06:95:ea:c9:22:
                    a7:4d:8e:95:c9:fc:c3:cb:60:bd:fd:ac:5d:7c:97:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D6:6D:C4:17:F7:06:3F:36:B7:57:07:BD:A6:5C:DC:51:C7:C9:D7
            X509v3 Authority Key Identifier:
                keyid:1B:D5:19:38:C8:BE:66:19:E7:29:0C:7B:50:46:C4:6C:81:CD:38:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/1BD51938C8BE6619E7290C7B5046C46C81CD38B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD51938C8BE6619E7290C7B5046C46C81CD38B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/3137372e35342e36342e302f32302d3234203d3e203238313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:1e:0c:94:13:75:09:fb:e4:1f:a3:14:3d:cb:37:5a:e2:46:
         7d:75:07:62:e2:47:c0:b0:23:5c:ac:85:85:a7:b0:29:1a:a6:
         0d:02:61:e8:bc:9c:38:e9:8e:37:19:c0:b2:2f:2b:54:02:6d:
         cf:5a:36:fc:d6:90:3c:06:0d:1c:fe:cf:0f:ff:7e:15:5d:7f:
         a2:88:c6:08:d6:fa:7e:b1:84:0e:29:0d:2a:88:c3:5c:70:f4:
         61:c4:64:61:62:f1:2a:84:1e:75:90:53:20:e2:90:f4:68:b1:
         7f:63:11:64:70:e1:dc:aa:5f:40:aa:4d:30:c2:67:96:5f:74:
         39:e6:b2:bb:c7:48:08:5b:ee:b6:9c:20:f4:26:d2:e3:6f:39:
         f4:1b:5d:fe:93:72:1a:11:c7:05:f1:5e:f8:9c:e4:67:47:fa:
         41:52:e4:1c:16:1b:18:75:90:3d:86:dc:15:a0:a7:bf:7b:30:
         fe:2f:f5:a5:99:b3:2e:ca:3c:38:57:24:2a:26:98:b5:da:23:
         8a:48:16:e4:31:a1:bd:91:07:34:0b:76:b3:7e:e6:4d:9c:76:
         14:a9:24:75:8e:c7:78:6f:9f:6a:22:d8:ed:47:a0:4c:dd:09:
         28:2a:a8:cd:4b:f8:98:c4:f7:e6:7c:51:73:31:d2:e6:5e:b3:
         a2:bd:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org