Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/3137372e31302e3233322e302f32312d3332203d3e20323632383830.roa
File:                     3137372e31302e3233322e302f32312d3332203d3e20323632383830.roa (raw, json)
Hash identifier:          Hj4FY6mrUt2yxSvlS5qEI0PZaUNbvK3zI3qgRsiCoeA=
Subject key identifier:   BF:E9:6A:AF:FB:C1:60:35:46:38:F2:5D:65:48:CC:AE:9D:72:26:D9
Certificate issuer:       /CN=4331C75604BDCB26E64B954974D729F616D10D84
Certificate serial:       2410287451FCB50717DA085E0CA13EE6C9C1D6C5
Authority key identifier: 43:31:C7:56:04:BD:CB:26:E6:4B:95:49:74:D7:29:F6:16:D1:0D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4331C75604BDCB26E64B954974D729F616D10D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/3137372e31302e3233322e302f32312d3332203d3e20323632383830.roa
Signing time:             Mon 29 Jan 2024 19:37:11 +0000
ROA not before:           Mon 29 Jan 2024 19:32:11 +0000
ROA not after:            Mon 27 Jan 2025 19:37:11 +0000
asID:                     262880
IP address blocks:        177.10.232.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:10:28:74:51:fc:b5:07:17:da:08:5e:0c:a1:3e:e6:c9:c1:d6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4331C75604BDCB26E64B954974D729F616D10D84
        Validity
            Not Before: Jan 29 19:32:11 2024 GMT
            Not After : Jan 27 19:37:11 2025 GMT
        Subject: CN=BFE96AAFFBC160354638F25D6548CCAE9D7226D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:c9:6e:8c:ee:71:92:28:25:58:d0:07:8c:
                    96:8b:15:c8:35:ea:e7:07:e6:3d:66:23:30:d4:22:
                    4c:30:05:98:f4:4f:ab:93:d1:41:a0:57:1c:48:a1:
                    62:65:e9:db:05:73:04:63:54:ee:28:2f:dd:a5:d2:
                    05:64:cb:db:e2:97:23:47:1f:ec:38:69:c0:33:5d:
                    97:55:30:3f:42:d4:6d:77:f5:38:09:91:9e:fd:f4:
                    87:11:ac:fe:d4:2b:5d:21:5a:47:bf:5b:59:d9:ff:
                    45:75:59:08:ce:ce:5e:7d:48:1a:12:56:d0:2f:8f:
                    36:89:a2:0c:54:39:fb:d8:66:5e:bf:29:e0:7d:98:
                    f6:9e:45:b2:f5:29:cd:f4:53:f6:9f:6e:4f:1a:0f:
                    de:24:f1:ef:25:59:01:ad:5a:a3:d2:1f:06:c0:33:
                    e8:55:ba:8c:c7:e8:1d:58:07:65:8f:fc:46:8f:6d:
                    28:18:2d:d5:c9:f2:05:52:84:dc:ae:1c:92:76:4f:
                    0b:31:10:37:c8:96:1c:6b:f6:7a:d3:22:c5:69:e8:
                    95:4c:d6:d9:0e:86:5b:6a:dd:ae:f3:b5:66:0c:ec:
                    24:ee:5e:60:3b:4e:0d:01:ae:5a:8d:ed:c2:1d:57:
                    f2:02:03:c0:ae:60:b0:17:87:f0:49:f9:f7:1f:83:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E9:6A:AF:FB:C1:60:35:46:38:F2:5D:65:48:CC:AE:9D:72:26:D9
            X509v3 Authority Key Identifier:
                keyid:43:31:C7:56:04:BD:CB:26:E6:4B:95:49:74:D7:29:F6:16:D1:0D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/4331C75604BDCB26E64B954974D729F616D10D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4331C75604BDCB26E64B954974D729F616D10D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/3137372e31302e3233322e302f32312d3332203d3e20323632383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:09:d6:f1:9a:e2:f1:6a:8d:bc:f1:10:61:58:6b:11:67:14:
         ba:0f:7b:eb:83:18:0d:06:1d:73:da:9f:f8:78:a4:34:8b:77:
         dc:61:fd:4c:47:1f:b4:ec:72:e1:25:32:03:aa:34:c2:ac:a3:
         c6:bb:5c:0b:2e:bb:63:68:4c:bb:b1:aa:05:94:9e:1b:33:e9:
         09:af:2e:a5:91:71:5d:5f:0b:a4:fe:48:66:3a:73:07:99:f1:
         6f:5d:ef:77:6a:d8:ee:67:35:a6:da:b6:e2:5a:b0:06:2c:1d:
         fe:ed:b6:6f:3b:a4:6a:b6:82:c3:da:4c:c9:04:96:a8:35:6c:
         28:1d:34:e7:60:0c:10:77:76:91:1a:e5:65:a3:55:13:71:6e:
         b1:87:6f:71:0b:be:84:4f:2b:03:49:50:45:e0:f2:ea:f6:0f:
         b1:f6:b8:f5:b9:6e:62:f8:31:ca:5d:64:3d:b6:4b:44:6c:4f:
         bf:93:1f:c7:81:18:78:a1:e3:bd:bc:3e:41:cb:8a:ab:b0:15:
         9c:52:b1:b4:6b:d7:1d:73:71:c2:db:ff:9b:c0:69:15:6a:b5:
         a5:04:19:db:a4:77:0d:fd:29:d4:e9:94:f9:08:23:dc:4e:2e:
         57:a8:80:96:a8:c6:43:55:49:8e:e9:5e:14:9d:1c:e3:21:3f:
         c8:7a:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org