Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qAEvSyG4CmS9pUetvfaMuB6N6dx9xLGM3zt96KpXZ1j/0/3137372e37312e302e302f32302d3234203d3e203533313331.roa
File:                     3137372e37312e302e302f32302d3234203d3e203533313331.roa (raw, json)
Hash identifier:          39+CHCkpmCZRh16HssYV4vRwbufE8Tjt+0i6/PvVWB4=
Subject key identifier:   39:21:FC:00:45:C2:BA:FC:31:73:B6:8C:C5:32:1A:9E:A4:4D:C6:EF
Certificate issuer:       /CN=DC8BE94516C2F55C80C38786159A289962CBF023
Certificate serial:       22E82666079AFAC0A8B673E56BDA09C01B02346B
Authority key identifier: DC:8B:E9:45:16:C2:F5:5C:80:C3:87:86:15:9A:28:99:62:CB:F0:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8BE94516C2F55C80C38786159A289962CBF023.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qAEvSyG4CmS9pUetvfaMuB6N6dx9xLGM3zt96KpXZ1j/0/3137372e37312e302e302f32302d3234203d3e203533313331.roa
Signing time:             Sun 27 Nov 2022 22:00:00 +0000
ROA not before:           Sun 27 Nov 2022 21:55:00 +0000
ROA not after:            Sun 26 Nov 2023 22:00:00 +0000
asID:                     53131
IP address blocks:        177.71.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e8:26:66:07:9a:fa:c0:a8:b6:73:e5:6b:da:09:c0:1b:02:34:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8BE94516C2F55C80C38786159A289962CBF023
        Validity
            Not Before: Nov 27 21:55:00 2022 GMT
            Not After : Nov 26 22:00:00 2023 GMT
        Subject: CN=3921FC0045C2BAFC3173B68CC5321A9EA44DC6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:eb:0c:e1:65:b5:0b:83:a5:b7:78:ed:eb:
                    d6:83:08:da:ab:20:94:75:34:94:06:70:69:19:b0:
                    90:e8:b9:54:94:67:30:5f:cc:f9:1c:26:b5:56:18:
                    a1:b0:51:02:17:61:29:4a:04:3e:e9:21:b8:1c:0f:
                    b3:4b:c4:af:13:08:c7:c7:0c:7c:0f:80:2f:ed:2c:
                    30:ba:00:0b:44:88:10:93:37:3b:1f:76:8c:fd:85:
                    57:4a:fe:d2:15:60:03:8b:3d:8c:1f:4a:73:0f:d2:
                    e9:23:2d:7a:f9:dc:ba:9c:34:05:5b:9a:3c:e6:29:
                    85:03:51:97:80:1b:5a:bc:17:c8:b6:16:5c:f9:a8:
                    33:6e:1e:d9:5c:52:2b:42:81:8c:e6:b4:ff:91:ad:
                    13:a1:9f:cc:dd:7b:ca:4f:17:d0:5b:fa:2b:be:1b:
                    c0:09:f0:bb:97:77:ae:67:14:85:ba:c8:06:ae:e6:
                    09:cd:df:4f:0b:20:ff:aa:3e:f0:fd:b0:5b:40:c9:
                    3c:bb:5c:17:33:62:d1:2f:51:64:ad:f4:e8:42:2f:
                    6a:28:6c:8b:74:80:60:ea:b0:c7:83:f4:8e:3a:32:
                    4b:de:0d:29:ab:dd:07:da:36:bd:c6:c0:79:d2:f6:
                    4d:6e:2a:6d:1d:c3:fe:7b:13:c6:77:93:b2:3e:3d:
                    b3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:21:FC:00:45:C2:BA:FC:31:73:B6:8C:C5:32:1A:9E:A4:4D:C6:EF
            X509v3 Authority Key Identifier:
                keyid:DC:8B:E9:45:16:C2:F5:5C:80:C3:87:86:15:9A:28:99:62:CB:F0:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qAEvSyG4CmS9pUetvfaMuB6N6dx9xLGM3zt96KpXZ1j/0/DC8BE94516C2F55C80C38786159A289962CBF023.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8BE94516C2F55C80C38786159A289962CBF023.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qAEvSyG4CmS9pUetvfaMuB6N6dx9xLGM3zt96KpXZ1j/0/3137372e37312e302e302f32302d3234203d3e203533313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:9c:e3:bb:c3:1c:dc:bd:c0:3d:73:b0:11:94:ef:e7:62:40:
         bc:da:ee:8d:4a:e3:97:46:57:51:4d:1e:17:1f:e3:e7:d1:f9:
         56:c5:00:e1:a7:9e:5d:25:d4:da:d3:67:dc:e4:cd:6c:3a:02:
         ee:d2:51:cf:85:65:22:43:9b:30:40:a0:c8:d0:2e:3c:3e:7d:
         88:41:d5:02:df:46:4f:35:fd:1f:ef:b7:1f:53:4b:01:f1:63:
         60:b6:ff:ee:0f:41:84:14:e3:9b:47:53:2c:6f:6c:cb:a5:8d:
         b7:27:62:6e:d6:64:3e:09:58:29:4f:55:92:a2:33:f5:3f:a8:
         23:61:db:44:1a:0e:00:65:ce:a4:82:0a:1a:68:a6:c0:fa:d1:
         75:24:51:ab:74:a0:92:c8:d1:ce:40:14:db:9e:3d:40:c1:6c:
         c3:1b:19:a4:b8:34:86:42:2d:2a:25:c7:23:c0:57:e3:c2:65:
         33:4e:61:6d:99:26:77:f8:16:67:d5:74:ea:3f:d8:27:70:55:
         77:5d:be:9e:20:45:b4:36:12:f5:aa:f6:41:68:65:f7:d9:1f:
         4b:a3:ff:05:4f:d1:1d:8a:05:ee:8c:d3:3c:eb:2d:93:2a:f9:
         ec:92:c3:33:28:30:2a:ff:43:5e:23:64:74:d4:22:43:12:e0:
         6c:f5:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org