Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa
File:                     3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa (raw, json)
Hash identifier:          2wkfXHRYJKqfQcEnp/YJ+MNyfPaf2PEr3Jb9Vu6jDg0=
Subject key identifier:   46:21:18:08:65:27:0C:24:DA:86:86:FD:6F:65:61:65:45:7D:87:EE
Certificate issuer:       /CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
Certificate serial:       4A44E08C6D70EF4C599AB2332DB396C0C3BFF366
Authority key identifier: FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa
Signing time:             Fri 08 Dec 2023 11:34:41 +0000
ROA not before:           Fri 08 Dec 2023 11:29:41 +0000
ROA not after:            Fri 06 Dec 2024 11:34:41 +0000
asID:                     262374
IP address blocks:        177.128.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:44:e0:8c:6d:70:ef:4c:59:9a:b2:33:2d:b3:96:c0:c3:bf:f3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
        Validity
            Not Before: Dec  8 11:29:41 2023 GMT
            Not After : Dec  6 11:34:41 2024 GMT
        Subject: CN=4621180865270C24DA8686FD6F656165457D87EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:2c:43:5e:52:1e:b9:e7:85:cc:81:94:ef:
                    93:91:3f:7d:e1:3b:24:36:d2:3d:9f:a6:77:a6:9f:
                    7c:fb:54:01:17:04:4d:c7:56:82:df:af:65:13:cd:
                    ae:f6:e0:15:90:27:32:13:c1:63:7e:cc:9e:31:79:
                    96:2c:6b:98:49:82:ae:75:bd:80:b6:0f:6c:04:22:
                    ff:71:da:a5:3b:69:d7:ce:5e:bd:99:31:b5:1f:87:
                    73:c0:32:e7:50:d6:6f:e2:73:d3:ea:71:7e:57:5a:
                    24:b4:76:cc:87:30:f9:92:f3:21:fe:61:31:52:dc:
                    4e:00:e4:1d:85:d5:04:6c:fb:ca:b9:85:66:80:79:
                    93:39:23:ff:ec:92:3e:54:50:d8:d9:61:a2:85:4f:
                    e6:fb:ab:59:24:c2:98:b3:0e:fe:ec:c2:62:d6:39:
                    ea:da:b3:02:5c:76:9d:f1:b8:28:5f:ad:4e:3f:09:
                    20:8e:ce:1d:d0:90:2d:28:8d:8a:d2:a5:b4:14:7a:
                    0c:b7:09:95:d4:50:dd:c9:92:dd:fa:9a:a4:57:b1:
                    6d:d3:ee:e7:3f:01:b1:1b:a1:c8:23:87:31:c8:44:
                    6d:7b:9e:7b:72:2c:4a:e7:67:81:c4:c7:01:6e:91:
                    41:10:49:cb:81:2d:9a:a8:db:09:75:0a:c4:c6:7b:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:21:18:08:65:27:0C:24:DA:86:86:FD:6F:65:61:65:45:7D:87:EE
            X509v3 Authority Key Identifier:
                keyid:FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:a8:d2:f8:06:01:db:c5:99:e1:c9:6d:73:d3:89:87:b8:31:
         c7:1f:8e:bd:d5:97:1d:d8:24:1c:a8:87:83:22:70:61:75:e1:
         49:70:6b:1a:bf:44:d1:a3:16:57:36:58:31:28:3e:ad:93:79:
         49:a9:bc:41:fb:b2:07:3e:25:bc:1b:a8:96:56:6c:f9:90:36:
         84:38:e5:55:32:07:c8:3b:c8:62:09:1e:75:f2:9a:b3:a5:f8:
         c9:a7:5c:44:94:1e:79:e7:80:24:21:7d:43:8d:75:4e:dd:28:
         e0:ea:32:a1:36:08:6c:1e:55:23:40:8a:e8:f9:51:f7:b3:a5:
         d6:82:6a:07:9f:20:77:2e:fb:b1:2e:69:c6:9a:de:92:96:d0:
         f9:9a:7d:df:ca:c7:0d:46:fc:0b:c4:91:ab:0f:6d:51:4c:c0:
         4f:e1:a6:92:24:f2:27:aa:86:4f:1c:4a:fb:c0:b9:66:f0:73:
         55:58:38:99:5f:4e:f8:a0:ab:15:96:13:d0:be:c7:04:db:a1:
         2e:99:df:6d:61:af:c6:63:48:bf:1e:c9:37:04:7f:17:4b:cd:
         0d:65:4a:98:11:df:67:4a:e7:76:fb:9e:a7:a4:9f:e9:d2:65:
         86:37:3f:46:69:29:ef:87:58:92:c1:6e:5d:0b:0c:c1:ed:3d:
         de:ab:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org