Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e35352e3139322e302f32302d3234203d3e203238323130.roa
File:                     3137372e35352e3139322e302f32302d3234203d3e203238323130.roa (raw, json)
Hash identifier:          1v/3/XLCnp4SU5dxoh7yoDNJFpL25Z3agy+LlLA6IgE=
Subject key identifier:   28:0C:F0:B1:3A:A9:81:85:9D:72:E3:A3:87:2A:9B:69:6E:0D:8F:61
Certificate issuer:       /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial:       0261F0FAF209587225CBD052B55D22D8931B536D
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e35352e3139322e302f32302d3234203d3e203238323130.roa
Signing time:             Sat 04 Mar 2023 16:08:45 +0000
ROA not before:           Sat 04 Mar 2023 16:03:45 +0000
ROA not after:            Sat 02 Mar 2024 16:08:45 +0000
asID:                     28210
IP address blocks:        177.55.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:61:f0:fa:f2:09:58:72:25:cb:d0:52:b5:5d:22:d8:93:1b:53:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
        Validity
            Not Before: Mar  4 16:03:45 2023 GMT
            Not After : Mar  2 16:08:45 2024 GMT
        Subject: CN=280CF0B13AA981859D72E3A3872A9B696E0D8F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:37:c6:f4:0e:17:9c:37:ef:83:8e:cc:2f:
                    fa:bd:16:10:2a:df:5e:1e:66:ce:d2:b1:39:d9:e9:
                    1a:36:97:b4:ac:81:85:db:cc:94:e6:d6:a3:f7:ed:
                    73:70:cf:58:57:8e:fd:6a:5f:cb:41:a4:3c:8b:72:
                    f7:de:52:b8:28:72:f8:48:a3:41:02:59:26:af:e0:
                    90:aa:f2:b8:29:81:ce:aa:63:5d:0c:1d:05:ed:5e:
                    f9:1f:8c:07:ff:5f:5e:66:c0:a2:b6:bc:73:b1:b9:
                    89:b7:d4:91:8b:d1:5d:9e:cc:0a:2b:5f:a0:0d:1b:
                    d9:16:e3:03:49:e2:b1:16:75:d6:7f:9b:0f:51:5e:
                    eb:93:1a:cb:b8:db:6a:fe:c6:5d:46:c4:10:fa:42:
                    4a:f8:30:61:07:8b:e5:90:4c:44:08:bd:fb:bf:f5:
                    0f:3a:ff:9a:13:b0:c8:c2:d6:4f:cc:25:f7:75:cb:
                    53:84:17:64:b3:63:0b:2e:03:a1:f4:88:04:12:3c:
                    92:97:da:23:ba:6f:ea:0f:e7:2f:4d:4b:aa:55:1c:
                    8b:5f:75:85:17:41:fa:b5:4d:49:0f:dd:25:83:5e:
                    65:e2:b3:08:42:8a:39:00:01:83:96:b7:44:ba:5e:
                    61:a7:e1:f1:16:96:13:d6:b1:ca:c2:fa:e3:0b:8a:
                    13:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0C:F0:B1:3A:A9:81:85:9D:72:E3:A3:87:2A:9B:69:6E:0D:8F:61
            X509v3 Authority Key Identifier:
                keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e35352e3139322e302f32302d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:86:0f:d6:18:c6:ed:48:e8:1f:ed:2b:d0:91:5e:6e:72:62:
         da:b5:e5:56:78:6b:f5:3d:93:de:cc:f8:ec:3f:06:75:3b:88:
         46:66:3a:64:be:c1:29:b6:eb:a6:2a:7e:0b:ab:bb:e5:84:c5:
         35:d3:f3:1d:44:23:f8:68:2f:b7:a8:f4:90:78:51:de:42:0f:
         73:66:fc:3c:10:01:05:10:d9:ac:bb:48:28:6f:2b:51:c5:26:
         e8:2f:58:2f:1d:a5:e1:03:6f:25:90:45:78:26:c1:c2:6a:d5:
         1c:01:53:3a:72:17:14:f6:c7:2c:a5:8b:9b:0f:6c:f1:7a:99:
         91:c1:91:6d:c1:b9:9f:44:33:be:5f:fc:af:a7:62:62:97:07:
         36:e7:6a:12:ba:4a:7b:20:43:72:a3:9b:db:fa:94:14:01:a9:
         3f:18:0a:23:45:63:cb:19:50:03:84:89:93:77:51:23:b1:3d:
         3a:02:2f:60:cc:7c:cf:bb:c1:c7:68:16:2d:bf:f4:39:cd:93:
         4a:bf:79:02:67:a5:e6:e4:ce:cf:92:93:ad:16:48:96:08:04:
         47:15:7d:5e:dc:8a:62:2c:45:9f:89:d9:c8:10:25:b4:b2:0f:
         49:d2:c3:36:08:d7:dc:78:22:43:f8:33:82:18:32:54:b1:3d:
         02:d4:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org