Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e36372e3137342e302f32342d3234203d3e203532393137.roa
File:                     3137372e36372e3137342e302f32342d3234203d3e203532393137.roa (raw, json)
Hash identifier:          0Uo5Wk+UdIhjWJ5EjjwHSqWHF1mqbjUaIn+aiID82wA=
Subject key identifier:   A9:89:DE:0F:4E:9C:13:6F:4A:93:A3:A6:AD:7B:D1:63:0C:46:A8:D5
Certificate issuer:       /CN=D038DE19E8309C7FF68CBBE4DE7976DE4FAE6A84
Certificate serial:       13B3A3B9FB0E601E6430C627D1372BEB8CE0D8E4
Authority key identifier: D0:38:DE:19:E8:30:9C:7F:F6:8C:BB:E4:DE:79:76:DE:4F:AE:6A:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D038DE19E8309C7FF68CBBE4DE7976DE4FAE6A84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e36372e3137342e302f32342d3234203d3e203532393137.roa
Signing time:             Wed 23 Mar 2022 12:52:25 +0000
ROA not before:           Wed 23 Mar 2022 12:47:25 +0000
ROA not after:            Wed 22 Mar 2023 12:52:25 +0000
asID:                     52917
IP address blocks:        177.67.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b3:a3:b9:fb:0e:60:1e:64:30:c6:27:d1:37:2b:eb:8c:e0:d8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D038DE19E8309C7FF68CBBE4DE7976DE4FAE6A84
        Validity
            Not Before: Mar 23 12:47:25 2022 GMT
            Not After : Mar 22 12:52:25 2023 GMT
        Subject: CN=A989DE0F4E9C136F4A93A3A6AD7BD1630C46A8D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:d8:12:87:f4:e6:e2:4e:55:55:a4:60:a3:
                    67:4d:05:c4:e3:5c:96:76:77:eb:7f:ef:94:b2:75:
                    5a:a1:59:89:79:df:67:f4:f0:0e:54:a9:4e:1e:d8:
                    e0:9f:c1:81:f9:bf:b3:a4:16:2a:14:01:ec:ea:c1:
                    1b:b5:16:91:48:b6:1e:b2:8b:50:8a:cf:5f:05:0b:
                    8b:ac:92:9f:1d:5a:db:78:e6:0d:c9:fd:82:d7:8c:
                    78:4a:d4:0c:36:12:e5:b6:d7:22:8a:ad:ce:6d:fa:
                    61:e5:a8:7b:f7:75:e6:73:a1:64:dd:46:ce:67:09:
                    c0:75:2e:dc:42:ad:5d:be:e9:94:e9:28:6c:55:e3:
                    da:10:08:4e:97:ae:35:55:04:a6:a6:3c:e0:21:95:
                    0c:31:61:1a:5e:8b:5e:b9:8e:f2:9c:13:e7:62:b0:
                    23:2a:62:81:4a:26:b8:9b:6e:18:bd:a1:7e:dc:20:
                    9c:c0:90:f3:00:1b:92:42:97:54:ae:dc:10:ea:08:
                    74:3a:cb:fb:a4:7c:0c:8d:ba:c7:8c:26:61:4f:3f:
                    db:bc:37:6b:61:cb:0f:dc:52:ff:cf:35:07:bc:a1:
                    b5:17:39:f4:f8:c0:f1:f0:cc:d7:02:1c:eb:94:a4:
                    fb:a6:07:fc:0c:a0:c0:eb:ee:3d:8f:24:78:79:60:
                    61:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:89:DE:0F:4E:9C:13:6F:4A:93:A3:A6:AD:7B:D1:63:0C:46:A8:D5
            X509v3 Authority Key Identifier:
                keyid:D0:38:DE:19:E8:30:9C:7F:F6:8C:BB:E4:DE:79:76:DE:4F:AE:6A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/D038DE19E8309C7FF68CBBE4DE7976DE4FAE6A84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D038DE19E8309C7FF68CBBE4DE7976DE4FAE6A84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e36372e3137342e302f32342d3234203d3e203532393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:ca:87:08:bd:5c:72:03:ea:55:0e:ab:f2:d4:f8:fb:61:1b:
         32:11:ae:4c:6c:54:84:cd:b5:85:06:58:29:54:17:2d:50:82:
         56:1f:2c:a6:34:fb:10:91:c4:bd:1a:4d:b1:4c:b4:ab:21:6f:
         c8:9f:88:1c:ee:bd:9c:11:24:80:bd:58:a0:50:95:a2:e8:fd:
         6f:09:62:93:9e:21:15:a5:98:54:95:e1:69:78:04:cf:e3:c6:
         ed:c0:c3:e6:dd:2a:85:a1:7d:d9:af:cf:3d:7c:f4:b9:5c:7a:
         b6:91:7b:c4:f9:2c:61:30:4b:c9:4f:cc:fd:1c:21:30:bb:d7:
         a0:8e:4d:70:f3:6b:72:c3:b7:41:4a:d7:3c:e4:0e:dc:b9:de:
         54:ab:29:14:d4:64:c4:07:6e:c0:58:e4:2f:24:e2:73:a2:22:
         b1:ca:09:60:8f:f6:35:97:f3:1a:fe:8d:f3:67:34:e0:a5:b3:
         40:dd:b0:87:17:87:32:8e:38:1c:84:96:bd:f8:81:9d:88:66:
         0e:ed:70:f7:53:8e:22:5c:05:38:92:dd:54:d9:8b:9d:f5:c5:
         d3:a1:65:eb:cd:02:87:d9:8b:7b:1e:00:69:91:e9:dd:d8:0b:
         c4:37:b3:39:ce:7c:34:ce:bb:1f:c2:15:f0:0a:96:62:b5:81:
         12:6e:f8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org