Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3137372e31322e3232342e302f32302d3234203d3e203631353638.roa
File:                     3137372e31322e3232342e302f32302d3234203d3e203631353638.roa (raw, json)
Hash identifier:          OG30OuqRqja1KISRfzAj9fo7DYgGpWzidf3gm9STkUI=
Subject key identifier:   4D:76:4C:17:25:8C:9C:03:A7:BF:A9:B1:99:57:89:02:68:B0:BA:52
Certificate issuer:       /CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
Certificate serial:       4053F00C585BDAEC1A9D6DA81FB3AA4524DE1F56
Authority key identifier: B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3137372e31322e3232342e302f32302d3234203d3e203631353638.roa
Signing time:             Mon 02 Oct 2023 15:03:37 +0000
ROA not before:           Mon 02 Oct 2023 14:58:37 +0000
ROA not after:            Mon 30 Sep 2024 15:03:37 +0000
asID:                     61568
IP address blocks:        177.12.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:53:f0:0c:58:5b:da:ec:1a:9d:6d:a8:1f:b3:aa:45:24:de:1f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
        Validity
            Not Before: Oct  2 14:58:37 2023 GMT
            Not After : Sep 30 15:03:37 2024 GMT
        Subject: CN=4D764C17258C9C03A7BFA9B19957890268B0BA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:a5:76:a1:4b:2d:42:68:20:a7:20:eb:d8:
                    25:e1:e9:b4:58:06:d1:6b:49:53:0a:ed:8b:4c:70:
                    db:e2:f9:c3:58:64:af:9b:23:69:ac:3c:84:51:88:
                    70:a4:db:7f:ac:06:fe:77:a1:52:3c:a0:a5:fa:12:
                    4b:a6:3f:2c:33:fa:60:12:f1:6a:46:d7:bb:e7:4a:
                    c0:80:aa:f4:45:92:95:a6:2d:5f:71:8f:95:5d:ca:
                    23:a2:92:9d:b8:3d:27:0e:b2:e5:c5:c4:2a:b8:b6:
                    8a:7f:e7:c5:d8:b9:58:89:db:de:f8:02:7b:16:be:
                    54:95:68:5f:45:fc:85:12:27:16:34:b4:6c:08:51:
                    22:e6:db:8f:b9:b7:97:84:0a:e4:67:3c:14:32:4d:
                    ff:0c:d6:0b:81:69:01:58:13:ae:26:f2:54:68:17:
                    dc:cd:1b:16:e7:86:90:a8:c5:62:1f:e7:0a:a0:6f:
                    7d:ab:35:5b:6d:c3:42:f0:2a:c7:72:54:fb:c5:4f:
                    31:19:93:08:f1:fc:65:c2:46:a3:8c:f5:0c:3e:20:
                    20:17:71:41:ca:64:ee:f7:f2:21:1d:e4:75:e0:65:
                    30:19:17:d6:d2:95:ec:21:74:e6:ce:19:63:ce:70:
                    10:4b:33:c6:bc:55:29:94:1a:06:ae:13:5c:74:57:
                    c6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:76:4C:17:25:8C:9C:03:A7:BF:A9:B1:99:57:89:02:68:B0:BA:52
            X509v3 Authority Key Identifier:
                keyid:B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3137372e31322e3232342e302f32302d3234203d3e203631353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:b1:16:3f:6e:c0:a6:43:85:94:96:62:5e:c5:c5:e1:1d:82:
         6a:37:db:d9:ca:a7:9f:71:b5:69:fc:d1:03:96:10:69:9e:03:
         c0:d3:87:17:e6:3f:cb:aa:6d:0d:d4:e4:1e:8e:6c:c1:4b:59:
         78:5e:86:90:73:5e:71:95:9a:ca:41:2a:dc:1f:fe:89:94:4b:
         39:34:01:15:aa:af:35:65:79:4d:42:85:a2:96:44:97:30:a6:
         db:01:a7:ab:c8:2b:d1:af:c7:42:f5:fd:b6:fb:38:95:b7:48:
         13:68:03:1b:70:48:56:09:36:77:85:95:21:68:f8:4e:ea:ea:
         f5:89:34:3f:ba:57:7d:11:30:d9:f8:69:11:c0:ab:a5:84:36:
         ee:54:f5:0d:9d:7d:97:02:6b:52:e3:43:61:b2:53:49:81:f4:
         8c:34:f3:68:12:a4:c7:dd:31:ca:55:d7:3d:6c:dd:82:f5:77:
         ef:ac:49:86:8a:7d:b5:3b:e9:bb:eb:fd:73:4a:8d:75:2f:89:
         6f:1e:30:ff:40:82:0a:b2:80:ec:98:26:4f:1d:34:29:e2:1b:
         b3:81:77:a6:76:0f:7a:ff:64:3c:3e:4e:1d:db:c7:d9:98:38:
         ff:9f:1d:77:71:87:29:44:4b:84:ef:db:ad:f1:0e:52:ce:ea:
         5d:63:b7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org