Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/3137372e31312e3130382e302f32322d3232203d3e20323731343634.roa
File:                     3137372e31312e3130382e302f32322d3232203d3e20323731343634.roa (raw, json)
Hash identifier:          PUoMvL6sLOALaNMjvtQjdt3TKj8AnjmSF2bPgeF23N4=
Subject key identifier:   12:02:B3:3A:F5:9A:B2:4B:57:AC:00:C9:5C:33:82:06:8C:63:E4:F2
Certificate issuer:       /CN=DB7A300CBD2858F3333D17C91EB007FFEAEA49DE
Certificate serial:       6FC267043B8FB61D1DD02F40B708F87867CD2AB5
Authority key identifier: DB:7A:30:0C:BD:28:58:F3:33:3D:17:C9:1E:B0:07:FF:EA:EA:49:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/3137372e31312e3130382e302f32322d3232203d3e20323731343634.roa
Signing time:             Fri 18 Mar 2022 18:56:27 +0000
ROA not before:           Fri 18 Mar 2022 18:51:27 +0000
ROA not after:            Fri 17 Mar 2023 18:56:27 +0000
asID:                     271464
IP address blocks:        177.11.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c2:67:04:3b:8f:b6:1d:1d:d0:2f:40:b7:08:f8:78:67:cd:2a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB7A300CBD2858F3333D17C91EB007FFEAEA49DE
        Validity
            Not Before: Mar 18 18:51:27 2022 GMT
            Not After : Mar 17 18:56:27 2023 GMT
        Subject: CN=1202B33AF59AB24B57AC00C95C3382068C63E4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:8c:31:50:96:4e:a4:cd:d8:b4:66:1f:ad:
                    4c:40:a6:bd:61:ac:03:a0:98:c9:de:9f:d5:a8:22:
                    4a:40:49:87:b7:29:c1:c2:bd:10:0d:f0:40:c3:db:
                    59:a2:19:d8:51:ec:57:6a:31:2d:b1:12:c1:84:a3:
                    5c:5c:18:57:a8:5e:1b:01:67:7d:1a:f6:03:21:a2:
                    14:fd:36:fa:06:30:08:1e:41:bf:66:4e:65:e2:14:
                    ba:70:af:7b:d5:4c:22:87:f8:5f:2e:d5:d5:6c:5a:
                    c7:0e:86:21:95:c5:56:d3:e6:ac:b4:78:26:94:79:
                    50:1c:18:b5:da:74:f3:a3:c7:6d:73:7e:51:66:64:
                    61:fe:56:ba:a5:d4:3a:e2:f4:e1:87:c9:20:99:da:
                    b1:c1:61:b1:77:01:52:31:23:62:1c:b7:26:23:e2:
                    49:b0:6b:7b:64:6f:43:06:83:5f:57:3e:39:7d:9e:
                    f0:a7:f2:d1:49:1b:d5:9d:28:ea:29:1a:64:7e:59:
                    40:fb:7b:fd:c4:20:9e:11:7a:41:fa:82:48:6a:34:
                    64:25:cf:97:25:e1:ea:41:c8:f4:a1:29:47:f3:0c:
                    45:ac:e6:9b:f8:e8:ca:14:04:46:a6:9b:7c:5f:84:
                    e9:b3:15:f2:e6:bf:74:f2:f0:8b:08:ed:42:90:43:
                    28:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:02:B3:3A:F5:9A:B2:4B:57:AC:00:C9:5C:33:82:06:8C:63:E4:F2
            X509v3 Authority Key Identifier:
                keyid:DB:7A:30:0C:BD:28:58:F3:33:3D:17:C9:1E:B0:07:FF:EA:EA:49:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/3137372e31312e3130382e302f32322d3232203d3e20323731343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:17:af:fe:47:0f:9e:74:be:61:41:41:3c:7d:1c:09:dc:06:
         63:6c:0e:0c:7b:a0:7c:6b:a1:28:00:0a:d1:cd:c7:23:8e:f5:
         5b:87:cd:5e:6b:21:a8:37:59:5c:cd:69:7c:80:79:67:30:23:
         81:d2:a7:d3:2e:e8:8c:38:24:b6:fb:67:b2:53:05:c8:7e:1d:
         c3:53:51:b7:58:91:68:53:10:d9:4e:e7:e4:c3:ed:c6:b2:6a:
         33:50:d7:27:10:d6:c4:aa:58:c8:04:98:5c:96:c9:ec:6b:eb:
         d3:ce:77:72:66:c9:51:26:1c:5d:af:13:23:b7:0c:00:01:64:
         cd:7b:3f:6c:38:8a:91:84:98:4a:84:34:ad:cb:60:d5:b2:16:
         2c:71:fd:7c:21:6c:a2:f5:e7:30:ae:0b:94:b2:9a:ab:a0:63:
         65:ed:2b:d3:ae:67:c3:40:31:e8:a7:26:65:c1:c6:6b:1f:5b:
         bc:5b:80:28:3c:08:c5:69:85:dc:4b:b0:f9:57:26:ff:6c:5a:
         0b:1c:5d:25:c2:2b:04:66:7f:bf:3c:0a:d0:be:13:f2:e2:b2:
         0a:57:46:32:90:32:1b:48:ee:aa:14:29:34:64:0c:cb:41:bd:
         f7:e3:34:b9:ad:72:a7:a4:32:ac:cf:47:c5:51:e7:c3:1e:39:
         af:88:13:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org