Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3137372e31322e3232342e302f32302d3332203d3e203631353638.roa
File:                     3137372e31322e3232342e302f32302d3332203d3e203631353638.roa (raw, json)
Hash identifier:          FSMCsCMkFPhRUEZYARHF30k9z18a/vM36fZqIp7JRo8=
Subject key identifier:   22:2B:0C:C1:3E:3C:BA:DE:E1:D6:1C:3F:CD:3A:3D:D8:6B:18:5B:59
Certificate issuer:       /CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
Certificate serial:       1E80E7D54E4F51E1F151EA4D26BCC8CCACB2C543
Authority key identifier: B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3137372e31322e3232342e302f32302d3332203d3e203631353638.roa
Signing time:             Fri 06 Jan 2023 12:50:46 +0000
ROA not before:           Fri 06 Jan 2023 12:45:46 +0000
ROA not after:            Fri 05 Jan 2024 12:50:46 +0000
asID:                     61568
IP address blocks:        177.12.224.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:80:e7:d5:4e:4f:51:e1:f1:51:ea:4d:26:bc:c8:cc:ac:b2:c5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B410EA8A900BE8EFBF0B269413585DCC9799F312
        Validity
            Not Before: Jan  6 12:45:46 2023 GMT
            Not After : Jan  5 12:50:46 2024 GMT
        Subject: CN=222B0CC13E3CBADEE1D61C3FCD3A3DD86B185B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:0e:47:ce:b1:aa:a1:b0:7b:a4:2d:5e:e2:
                    54:1e:c7:18:ca:32:6c:f6:30:35:72:84:f9:06:90:
                    7d:2b:36:d8:e9:7d:25:c6:fc:62:13:32:35:82:05:
                    48:9e:03:76:40:f6:e8:fc:36:f9:da:05:43:06:08:
                    0c:c1:21:cf:ab:e0:6c:2f:5c:27:85:da:b3:5a:e0:
                    bc:a6:dc:d3:f9:46:e3:f8:38:09:c6:3d:1c:f8:c3:
                    2a:b2:4b:0b:09:ab:d2:6a:4a:c5:28:c5:a1:36:0d:
                    56:01:4c:4c:f3:71:e9:26:3a:4f:b1:fb:33:38:6c:
                    29:65:d9:f9:2c:14:c8:74:b5:a5:63:75:3c:b2:f5:
                    95:78:db:f3:b9:71:02:98:50:67:41:2b:22:59:a8:
                    fb:1f:17:1a:8b:82:37:50:33:1b:57:cb:2e:4e:f5:
                    3e:1b:32:09:8f:ca:69:16:1c:99:1e:83:fb:8a:bf:
                    a2:41:ca:59:f3:3f:9f:a3:ef:8d:61:20:36:09:08:
                    0c:f2:c7:c3:d5:78:ee:68:41:05:63:cd:0c:4e:ae:
                    61:99:04:9b:4c:a4:b9:83:90:d7:29:d1:54:22:89:
                    5a:ea:dc:52:27:1f:87:8e:e5:1d:8d:4b:c6:a1:2e:
                    c3:55:e4:8e:69:7b:ad:09:0c:72:78:ec:a1:55:05:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2B:0C:C1:3E:3C:BA:DE:E1:D6:1C:3F:CD:3A:3D:D8:6B:18:5B:59
            X509v3 Authority Key Identifier:
                keyid:B4:10:EA:8A:90:0B:E8:EF:BF:0B:26:94:13:58:5D:CC:97:99:F3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B410EA8A900BE8EFBF0B269413585DCC9799F312.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/0/3137372e31322e3232342e302f32302d3332203d3e203631353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:88:b2:98:5f:1b:c0:56:a7:12:21:e4:4d:15:a3:89:59:53:
         3f:37:ca:fa:e5:9b:47:9b:1c:77:68:49:e3:51:88:07:0e:bd:
         ee:a8:bd:53:f9:74:c1:00:bd:ac:3a:e9:cb:bf:73:8f:6f:bb:
         79:bb:3e:92:1d:b8:cb:00:27:ba:ec:43:7b:7b:95:96:98:ca:
         bb:da:c1:62:d8:52:a4:6c:d5:77:2e:3e:ff:e2:0e:b6:d2:26:
         0c:5e:1a:e9:31:2d:0f:00:a2:9b:0b:08:d9:0c:2d:3f:96:ec:
         c7:0f:74:ca:10:93:4c:23:c7:4b:d6:ac:f4:82:4c:9a:cf:47:
         8f:7c:cf:78:ee:7d:34:e5:c3:fe:cb:55:7a:51:3c:6a:93:5a:
         3e:fb:f9:da:cf:53:d1:9f:13:ad:84:8c:71:64:f1:d1:dd:59:
         a9:d6:14:54:e0:61:67:82:59:94:12:a4:7b:58:95:46:fe:e0:
         25:f6:a9:21:fa:2c:bc:fc:44:21:52:65:b4:49:b2:ae:64:ab:
         6c:3f:c7:ec:72:3e:12:3a:6b:e9:d2:ea:13:6c:0d:a2:9c:2b:
         0a:c4:db:47:b8:17:d4:78:46:a7:9f:92:b4:f3:56:cb:37:3c:
         85:a1:b3:93:7a:57:a9:61:25:c9:2b:40:6e:2d:95:5c:f5:44:
         64:91:4b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org