Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/1/3137372e36362e33322e302f32312d3234203d3e203532393939.roa
File:                     3137372e36362e33322e302f32312d3234203d3e203532393939.roa (raw, json)
Hash identifier:          rDjF/iBdtu+S27PfF16aIpalR5wE9tcRb4YvvQJ7qtk=
Subject key identifier:   8C:7A:2B:96:52:C3:56:6D:AE:08:B8:F6:08:5C:2D:68:47:F8:BD:E5
Certificate issuer:       /CN=9CB027AE1BD919835115690373E042C5FECD871B
Certificate serial:       09469C2FAEBB651AF3E5482911D79A57CB8EDD07
Authority key identifier: 9C:B0:27:AE:1B:D9:19:83:51:15:69:03:73:E0:42:C5:FE:CD:87:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB027AE1BD919835115690373E042C5FECD871B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/1/3137372e36362e33322e302f32312d3234203d3e203532393939.roa
Signing time:             Thu 04 Apr 2024 06:19:26 +0000
ROA not before:           Thu 04 Apr 2024 06:14:26 +0000
ROA not after:            Thu 03 Apr 2025 06:19:26 +0000
asID:                     52999
IP address blocks:        177.66.32.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:46:9c:2f:ae:bb:65:1a:f3:e5:48:29:11:d7:9a:57:cb:8e:dd:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB027AE1BD919835115690373E042C5FECD871B
        Validity
            Not Before: Apr  4 06:14:26 2024 GMT
            Not After : Apr  3 06:19:26 2025 GMT
        Subject: CN=8C7A2B9652C3566DAE08B8F6085C2D6847F8BDE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:00:b8:7c:59:ba:83:68:d2:3f:27:88:a0:a0:
                    30:81:82:51:e9:b7:8c:7d:63:6c:a2:57:b1:ad:b6:
                    a0:e7:08:1f:77:ed:2f:a4:46:6f:14:51:53:08:42:
                    41:ce:32:c5:3d:13:fa:68:af:26:ba:ce:1b:3e:d7:
                    61:59:a8:1d:b7:e4:5a:85:f2:a7:b5:88:06:1d:de:
                    b0:a4:3a:2e:08:48:04:95:30:a9:6b:60:d2:e3:e1:
                    10:e1:cd:b8:7b:04:46:f0:b8:21:ea:e0:e2:12:01:
                    d2:07:ae:cc:62:d7:5c:c4:3c:be:0c:fc:78:8f:ba:
                    81:ea:85:d4:2e:7f:e9:a3:87:49:41:6a:05:dd:55:
                    6a:b0:46:bc:e7:95:73:2b:dc:a2:ae:91:b8:14:94:
                    21:c9:10:64:ee:d9:61:ab:99:32:6c:16:7e:5f:2b:
                    b6:92:19:31:fc:c7:66:52:79:5f:1c:2a:08:1d:51:
                    f2:41:80:69:95:45:d2:66:d5:fd:6f:d9:e4:3f:b6:
                    17:eb:42:89:f2:16:5b:c4:52:2f:71:97:23:eb:09:
                    33:38:07:25:1d:29:c4:65:9e:c9:cb:e2:e8:73:ea:
                    32:29:68:df:d1:f8:e7:39:4d:62:b8:c6:1a:cc:62:
                    78:b0:e8:8b:d4:57:8d:3f:d2:4e:dc:04:4f:38:52:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7A:2B:96:52:C3:56:6D:AE:08:B8:F6:08:5C:2D:68:47:F8:BD:E5
            X509v3 Authority Key Identifier:
                keyid:9C:B0:27:AE:1B:D9:19:83:51:15:69:03:73:E0:42:C5:FE:CD:87:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/1/9CB027AE1BD919835115690373E042C5FECD871B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB027AE1BD919835115690373E042C5FECD871B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/1/3137372e36362e33322e302f32312d3234203d3e203532393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:33:50:a8:84:7a:f6:bb:72:5f:88:f2:65:8d:c7:be:21:1e:
         22:4f:ce:46:cc:95:40:ce:6e:00:e6:d7:18:1f:cb:89:e1:d9:
         49:40:67:5c:a9:c1:15:bc:85:df:75:15:62:21:f6:78:52:ef:
         da:b5:55:24:84:14:99:ec:bc:f1:57:32:41:95:2a:2e:a8:26:
         61:ed:bf:f6:36:aa:9c:6e:ad:d6:6b:6a:8d:f0:55:30:80:3a:
         51:1d:7f:ce:a6:e4:41:83:4c:18:35:a1:2d:dc:72:88:80:21:
         b3:2d:fb:8a:10:be:6a:05:71:09:3e:fb:b6:46:8b:e5:90:8c:
         46:f2:5b:dd:07:81:c5:51:9e:38:db:9f:d5:cf:9f:8d:9c:c3:
         52:c4:57:e0:09:7d:13:71:33:f5:0f:93:87:97:ec:45:34:03:
         a0:0c:1b:73:e1:cf:18:6e:09:30:33:cc:2c:f1:87:bb:78:0f:
         db:c1:ee:48:19:0a:c6:fc:90:ae:5b:51:cf:b5:84:72:07:08:
         a9:0f:6d:d4:a6:01:14:b8:12:e7:78:9e:5c:ce:12:35:eb:df:
         ff:df:45:a6:ef:57:0a:7e:8e:4b:66:31:00:ed:bd:84:58:81:
         b8:1a:e2:88:96:e8:cb:96:ce:cc:9e:32:ad:7e:7f:c5:c4:3b:
         ce:e1:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org