Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rTQPqhjmXRDZCHZATdPFD9ew4sSsdzxM4VaSawTsCjt/0/3137372e33362e32302e302f32322d3232203d3e20323731313335.roa
File:                     3137372e33362e32302e302f32322d3232203d3e20323731313335.roa (raw, json)
Hash identifier:          t3Dt35o3MgYRGM5US6fL2KvLiwtacrNeg0PTWk/P9gw=
Subject key identifier:   80:E4:D3:A6:1D:09:60:8E:CC:DF:11:6D:91:F5:09:2E:E8:DC:7A:B6
Certificate issuer:       /CN=4EF80FC0897BE267EB0FA405C463F766731EE11F
Certificate serial:       136B01C9937BAF64A1E42C4A8BF9D0BFAD407ABC
Authority key identifier: 4E:F8:0F:C0:89:7B:E2:67:EB:0F:A4:05:C4:63:F7:66:73:1E:E1:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EF80FC0897BE267EB0FA405C463F766731EE11F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rTQPqhjmXRDZCHZATdPFD9ew4sSsdzxM4VaSawTsCjt/0/3137372e33362e32302e302f32322d3232203d3e20323731313335.roa
Signing time:             Thu 25 May 2023 18:41:19 +0000
ROA not before:           Thu 25 May 2023 18:36:19 +0000
ROA not after:            Thu 23 May 2024 18:41:19 +0000
asID:                     271135
IP address blocks:        177.36.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6b:01:c9:93:7b:af:64:a1:e4:2c:4a:8b:f9:d0:bf:ad:40:7a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF80FC0897BE267EB0FA405C463F766731EE11F
        Validity
            Not Before: May 25 18:36:19 2023 GMT
            Not After : May 23 18:41:19 2024 GMT
        Subject: CN=80E4D3A61D09608ECCDF116D91F5092EE8DC7AB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:8a:3e:80:67:ad:16:a6:07:85:19:81:da:
                    6a:ef:54:3b:52:c3:59:b6:c9:6c:5b:fd:71:fc:ef:
                    96:35:ec:ea:01:dc:b1:a7:c3:4c:36:40:1f:8d:7d:
                    e2:dc:13:df:78:10:69:75:5f:c6:22:95:f5:d4:17:
                    82:e0:bc:48:bf:05:ba:d3:3a:dd:a9:99:65:08:d3:
                    72:fc:48:7e:0b:f0:82:a3:2b:3d:f8:a0:33:b2:62:
                    3a:01:36:34:10:eb:7a:e2:40:54:37:a4:a4:bc:e5:
                    8d:ae:7f:4b:f6:59:86:4c:09:1b:90:e9:01:9e:27:
                    24:40:45:91:37:92:0a:ab:cc:05:d9:85:61:25:1e:
                    5b:35:9f:6c:2d:3b:a1:98:10:8e:05:53:5c:b5:9c:
                    8c:d0:e2:94:a4:3a:48:8f:1c:f5:20:d5:88:4d:07:
                    96:d5:c0:1b:5f:2e:8d:b4:d1:1c:8c:c0:5f:96:eb:
                    55:3e:bb:38:d4:a7:e1:50:17:0a:0c:86:05:14:46:
                    53:8c:63:62:07:7c:74:97:78:92:74:02:85:f8:10:
                    dd:8c:1c:4d:ee:0d:ef:98:d8:b2:e8:dc:ef:5d:8e:
                    67:5a:7a:ee:0d:4c:1b:93:be:68:84:94:87:34:ec:
                    34:9a:dd:e0:f7:a0:4b:02:c2:75:cc:75:b7:2e:6d:
                    73:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E4:D3:A6:1D:09:60:8E:CC:DF:11:6D:91:F5:09:2E:E8:DC:7A:B6
            X509v3 Authority Key Identifier:
                keyid:4E:F8:0F:C0:89:7B:E2:67:EB:0F:A4:05:C4:63:F7:66:73:1E:E1:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rTQPqhjmXRDZCHZATdPFD9ew4sSsdzxM4VaSawTsCjt/0/4EF80FC0897BE267EB0FA405C463F766731EE11F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EF80FC0897BE267EB0FA405C463F766731EE11F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rTQPqhjmXRDZCHZATdPFD9ew4sSsdzxM4VaSawTsCjt/0/3137372e33362e32302e302f32322d3232203d3e20323731313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:46:21:e6:18:27:e6:d9:aa:f2:61:35:06:91:14:3f:af:3d:
         b4:55:a6:64:3c:9e:8e:d5:41:be:cd:fa:fc:be:da:05:58:e2:
         3f:d5:e7:7c:10:ae:47:7a:40:91:be:e0:e8:a1:b9:fe:50:b8:
         73:74:65:4c:07:e9:c0:9f:21:96:bb:bd:f5:9b:be:89:1c:f9:
         77:1d:e1:4a:a0:5c:c0:be:13:b0:36:da:b8:c0:c4:e5:e8:95:
         1d:94:80:50:98:bf:d1:56:30:3f:1f:75:e8:bf:82:3a:9d:81:
         80:03:fc:3b:dc:dc:a9:1d:5e:f5:c3:46:65:34:ae:16:42:65:
         a2:3f:3f:0c:53:03:22:45:c3:49:d1:11:55:e1:c0:c1:2a:88:
         eb:61:8e:ee:a8:48:f6:de:35:47:71:69:21:39:c9:84:2e:d4:
         9b:21:03:97:c9:ab:2c:c5:a1:65:b3:ea:a0:ca:ac:91:2d:16:
         b3:89:69:df:9e:89:b2:bf:b3:62:cb:96:9d:8b:6d:16:d3:3c:
         b9:37:1a:f1:2f:f3:9d:11:80:28:c3:0d:94:3e:63:2c:0c:ea:
         d9:32:42:1e:8e:89:e6:71:99:2b:b5:01:42:eb:f1:44:d3:dc:
         ec:1b:7c:4b:22:ad:6f:3c:2a:61:0f:f1:70:5f:1b:48:ee:e0:
         64:b6:c9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org