Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/0/3137372e38362e3132382e302f32322d3234203d3e20323632363330.roa
File:                     3137372e38362e3132382e302f32322d3234203d3e20323632363330.roa (raw, json)
Hash identifier:          CpzNkgAqklFYOgSUmEQhQEei0AmjVXgXP+ehCyhE2nY=
Subject key identifier:   F2:8D:FB:86:AE:96:BA:9B:B8:91:46:D5:F8:AE:E1:0F:29:84:08:3D
Certificate issuer:       /CN=47F9E465C80D7A0251BED3AD4BC98C2F2B85253F
Certificate serial:       4B84EA53EAC35EB2EEC999B78EA390D95839893F
Authority key identifier: 47:F9:E4:65:C8:0D:7A:02:51:BE:D3:AD:4B:C9:8C:2F:2B:85:25:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47F9E465C80D7A0251BED3AD4BC98C2F2B85253F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/0/3137372e38362e3132382e302f32322d3234203d3e20323632363330.roa
Signing time:             Thu 31 Aug 2023 16:00:00 +0000
ROA not before:           Thu 31 Aug 2023 15:55:00 +0000
ROA not after:            Thu 29 Aug 2024 16:00:00 +0000
asID:                     262630
IP address blocks:        177.86.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:84:ea:53:ea:c3:5e:b2:ee:c9:99:b7:8e:a3:90:d9:58:39:89:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F9E465C80D7A0251BED3AD4BC98C2F2B85253F
        Validity
            Not Before: Aug 31 15:55:00 2023 GMT
            Not After : Aug 29 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a8:c2:36:d4:e1:4d:23:97:60:c2:d3:37:71:
                    c8:e5:79:b6:fd:a5:23:35:43:a6:53:1e:d7:a3:8f:
                    87:a9:fb:f8:9c:c3:74:7f:56:60:1c:55:a8:4c:07:
                    8f:82:8e:bd:bc:45:e9:a6:8a:b9:0c:78:6b:4a:23:
                    99:06:d3:9d:f8:57:0e:27:88:b2:0c:c4:89:fc:c4:
                    f7:97:64:11:dc:aa:45:f3:90:d4:8c:7a:41:45:43:
                    db:d3:fe:d0:54:54:e0:d2:da:be:05:63:d8:39:d0:
                    9b:93:51:e6:82:54:d2:01:0b:d0:a0:be:30:9f:9a:
                    56:79:1f:d9:18:08:e2:06:c7:89:3a:08:ae:e1:a0:
                    9f:80:0f:a0:6d:01:cb:a9:ca:2c:6c:06:72:c8:a0:
                    b7:86:5d:d5:9f:92:fc:2d:9a:9c:91:e4:da:a6:a5:
                    e8:86:52:ee:63:4a:01:89:6a:23:62:ae:6b:e8:43:
                    f0:50:19:81:c0:f4:0f:60:a9:ca:6e:e3:a4:53:cc:
                    cf:7e:fe:3f:41:a2:0e:f4:06:7d:e5:b0:56:6c:68:
                    3a:20:70:bf:7d:2f:1b:44:37:e0:e0:56:a6:75:86:
                    6d:f5:4a:10:39:c9:b6:51:4a:aa:f6:44:86:20:6e:
                    af:9a:9e:0e:17:d7:de:af:60:60:1e:56:de:a4:61:
                    ec:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8D:FB:86:AE:96:BA:9B:B8:91:46:D5:F8:AE:E1:0F:29:84:08:3D
            X509v3 Authority Key Identifier:
                keyid:47:F9:E4:65:C8:0D:7A:02:51:BE:D3:AD:4B:C9:8C:2F:2B:85:25:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/0/47F9E465C80D7A0251BED3AD4BC98C2F2B85253F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47F9E465C80D7A0251BED3AD4BC98C2F2B85253F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/0/3137372e38362e3132382e302f32322d3234203d3e20323632363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:8c:26:84:81:67:08:8a:2c:17:8c:34:b5:5c:50:08:02:54:
         f0:a2:79:02:2e:ea:d0:fb:64:b9:e5:cd:d5:02:a3:83:4c:6c:
         bc:45:aa:12:8d:0c:d5:8f:67:db:73:95:71:26:bd:19:9b:38:
         68:f6:cc:17:44:9e:09:de:82:bd:9c:31:f4:d4:75:a2:95:8d:
         33:a4:20:93:40:fc:62:d1:d6:b4:75:ae:e9:4a:e4:36:9b:1b:
         e3:80:9e:3c:ef:d6:12:a9:71:9e:30:3e:e4:5d:67:2a:f4:9b:
         23:95:1c:0b:46:ed:f9:da:cb:00:3b:0e:d6:9d:1b:53:25:7b:
         8d:d6:5f:4e:a3:7a:b2:b2:d3:53:ed:43:a6:18:6c:27:d5:18:
         26:09:3b:eb:7a:2b:3f:36:ad:11:ee:8f:aa:38:11:2d:c3:11:
         9d:b8:1e:f6:79:b3:10:1e:96:1b:ba:5b:54:f2:49:0d:2d:e1:
         fd:ae:eb:97:86:51:c0:79:3f:d5:34:47:df:6f:49:0b:6d:c3:
         ab:b2:9c:6a:34:09:ab:b7:cf:f0:73:c5:01:ec:ae:ec:6e:23:
         3c:62:b8:1d:2f:3c:c0:4f:da:e7:0a:f4:4f:d4:0c:ac:d4:30:
         0b:8a:87:4a:c8:aa:36:69:fd:7a:7a:c2:fb:0c:6a:9a:b6:73:
         a5:80:1b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org