Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ynsbsbpRLC3BsP3GuCXATqZAR7jvDNnG71ZJShpjs4v/0/3137372e32332e32352e302f32342d3234203d3e20323730393936.roa
File:                     3137372e32332e32352e302f32342d3234203d3e20323730393936.roa (raw, json)
Hash identifier:          M/VqRQ77QmCBLf7fVqFKO9ZZjYc0a4A6q9JEVicd5Ds=
Subject key identifier:   6D:D8:AC:A1:43:86:14:5A:72:32:2C:41:64:40:E5:65:7A:B6:E4:B8
Certificate issuer:       /CN=CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2
Certificate serial:       16BF4594CB9CC39717A7092617583BDA9453558C
Authority key identifier: CF:4B:7D:9C:BF:77:0F:DE:80:94:E6:B7:92:E5:17:8E:1C:4A:CB:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ynsbsbpRLC3BsP3GuCXATqZAR7jvDNnG71ZJShpjs4v/0/3137372e32332e32352e302f32342d3234203d3e20323730393936.roa
Signing time:             Mon 05 Dec 2022 15:37:54 +0000
ROA not before:           Mon 05 Dec 2022 15:32:54 +0000
ROA not after:            Mon 04 Dec 2023 15:37:54 +0000
asID:                     270996
IP address blocks:        177.23.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bf:45:94:cb:9c:c3:97:17:a7:09:26:17:58:3b:da:94:53:55:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2
        Validity
            Not Before: Dec  5 15:32:54 2022 GMT
            Not After : Dec  4 15:37:54 2023 GMT
        Subject: CN=6DD8ACA14386145A72322C416440E5657AB6E4B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:af:ce:8d:bd:f7:eb:03:87:a5:59:eb:ea:d7:
                    db:a5:e4:66:fc:d8:79:68:aa:a3:50:5a:b6:b1:ec:
                    6b:bf:a8:d6:2b:80:70:f6:cd:4c:c2:c6:de:e8:85:
                    73:96:54:cc:56:b5:4d:18:c1:4d:e9:87:52:f8:f3:
                    e3:56:cb:cc:1d:da:81:dc:b6:7a:31:c6:e7:f0:d7:
                    5b:4b:f0:7b:a5:ad:61:88:41:02:72:3a:b3:ca:b6:
                    34:20:ee:2e:12:3d:ac:a0:1e:3c:3e:55:0e:ca:d8:
                    63:88:69:12:11:69:32:a5:8e:47:9a:05:91:b0:da:
                    11:68:84:ca:f7:e4:1e:ed:48:da:8e:76:55:77:24:
                    79:92:76:83:4d:09:4c:c1:fd:f7:f5:ef:93:81:2e:
                    60:ad:41:27:c3:d7:fd:2f:c5:a6:91:38:be:54:64:
                    25:34:cd:26:9c:9a:d1:17:37:0f:65:55:66:33:fd:
                    6c:b0:29:af:4f:58:3c:14:65:73:11:19:f3:a3:82:
                    7c:ec:00:6b:a3:43:85:3a:9c:49:23:89:d5:45:6b:
                    f9:46:bc:dd:39:9b:96:53:9e:97:6c:cf:09:c9:c4:
                    12:89:c6:33:dc:ef:08:ca:5d:fb:4e:c1:ee:a3:95:
                    f6:8d:0a:0c:ea:8a:7d:fd:3a:2d:3a:af:1f:80:3c:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D8:AC:A1:43:86:14:5A:72:32:2C:41:64:40:E5:65:7A:B6:E4:B8
            X509v3 Authority Key Identifier:
                keyid:CF:4B:7D:9C:BF:77:0F:DE:80:94:E6:B7:92:E5:17:8E:1C:4A:CB:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ynsbsbpRLC3BsP3GuCXATqZAR7jvDNnG71ZJShpjs4v/0/CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ynsbsbpRLC3BsP3GuCXATqZAR7jvDNnG71ZJShpjs4v/0/3137372e32332e32352e302f32342d3234203d3e20323730393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:f6:f5:1a:8d:d2:5b:09:7e:5c:b9:70:ab:16:7a:1a:d0:
         37:5e:ec:b1:ad:18:34:d9:69:5c:7f:b1:57:de:5d:12:e0:5c:
         5a:c6:b6:e5:2d:b2:8b:05:ec:36:bb:2d:68:62:7f:eb:f2:76:
         df:60:18:89:36:35:1e:1e:22:49:92:7e:1d:56:71:82:7d:86:
         44:ba:5d:16:c7:9e:e5:b7:10:b9:09:19:ec:d8:a6:f0:26:c5:
         89:66:c4:1b:55:98:b3:89:ab:2e:5b:62:f4:58:a7:b0:e5:fc:
         6c:5b:60:50:9e:3a:42:d4:6a:71:a6:fa:54:ed:b5:4f:76:77:
         34:c8:b1:31:b7:a7:06:d6:10:01:6f:91:a7:e9:bb:5c:8b:ee:
         42:fc:6f:16:f2:b0:95:00:5a:8d:10:37:93:0d:39:9e:e6:1c:
         36:8e:01:e1:9f:d7:7e:d1:ec:88:e6:56:21:81:ad:20:fa:3d:
         38:6d:6e:1d:6e:05:e5:d6:5a:1e:d9:74:76:64:d8:9f:9c:63:
         86:fb:c8:78:c1:f7:eb:5d:19:d7:bc:05:f3:c9:45:72:5b:83:
         eb:ca:05:f4:d9:0c:a7:a8:20:d3:cc:ba:7d:b6:b7:d4:ec:42:
         21:0a:d9:ff:4d:86:d6:15:2f:5a:0e:ad:ae:4a:47:8b:e0:4c:
         88:e5:0f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org