Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38302e302f32322d3232203d3e20323632393737.roa
File:                     3137372e3139302e38302e302f32322d3232203d3e20323632393737.roa (raw, json)
Hash identifier:          gWome6cMcDFps1ego0XRY+uA9mR591ZH+WOgLCH8Ols=
Subject key identifier:   E8:6D:8D:3D:B5:4C:C2:22:5B:A0:0B:0E:D3:D3:E2:81:92:6F:BE:02
Certificate issuer:       /CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
Certificate serial:       25D4E63D90B76E78211C88B4DCC95A1D392CE051
Authority key identifier: 11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38302e302f32322d3232203d3e20323632393737.roa
Signing time:             Sun 07 Jan 2024 13:41:14 +0000
ROA not before:           Sun 07 Jan 2024 13:36:14 +0000
ROA not after:            Sun 05 Jan 2025 13:41:14 +0000
asID:                     262977
IP address blocks:        177.190.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d4:e6:3d:90:b7:6e:78:21:1c:88:b4:dc:c9:5a:1d:39:2c:e0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
        Validity
            Not Before: Jan  7 13:36:14 2024 GMT
            Not After : Jan  5 13:41:14 2025 GMT
        Subject: CN=E86D8D3DB54CC2225BA00B0ED3D3E281926FBE02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:82:cd:61:35:99:ae:38:0f:6a:ad:d3:5c:
                    21:fd:67:9a:8e:86:6f:09:82:9c:33:70:50:44:0c:
                    4f:71:84:9d:0f:3b:de:09:93:ce:62:ae:f8:37:34:
                    2b:04:93:75:7b:0d:88:96:b8:11:28:8e:a4:51:c6:
                    36:59:b7:6a:12:7f:46:94:33:e0:13:fa:6c:db:5b:
                    84:ae:86:2f:b1:99:c5:51:b6:82:05:7f:46:45:d8:
                    d5:a2:8b:a8:a3:38:33:eb:c7:e5:fb:d0:ac:84:b3:
                    31:01:d5:f2:89:a7:7c:ad:17:61:75:5b:6f:90:e6:
                    97:fc:e9:59:d4:29:4a:35:93:93:dc:94:24:30:5a:
                    99:27:c8:b6:fd:dd:e7:f9:76:cd:20:06:56:ec:01:
                    b8:ee:27:f8:fa:b0:13:a2:f4:26:c1:c9:ac:fe:5d:
                    17:01:cc:e8:e5:17:0a:c4:b4:0e:af:ef:4f:b6:c5:
                    a2:5a:91:e4:04:2f:b0:5d:15:23:aa:1f:1e:3a:51:
                    4c:9d:e9:cb:96:b4:c6:e5:b1:76:86:1a:12:f7:e2:
                    7d:e0:16:59:d8:1b:09:60:0a:a1:f5:57:d4:d1:92:
                    51:44:d5:83:c8:cf:bd:46:27:4b:98:f0:d3:c7:6f:
                    d1:d2:d0:43:f9:37:c2:d3:81:25:51:43:59:55:a1:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6D:8D:3D:B5:4C:C2:22:5B:A0:0B:0E:D3:D3:E2:81:92:6F:BE:02
            X509v3 Authority Key Identifier:
                keyid:11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38302e302f32322d3232203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:59:b1:64:fe:c8:11:f9:ab:74:e9:3a:ec:a2:ef:8b:10:16:
         ac:a9:e6:29:89:86:a9:85:a9:41:5b:22:43:eb:67:b2:d8:06:
         d8:0a:2d:d0:5d:d8:03:fb:d7:69:ca:bf:d7:81:95:df:4e:24:
         4c:27:7c:d6:8c:4d:04:8f:73:86:ff:e3:22:e8:28:d8:60:81:
         08:3c:68:c6:5e:3f:4b:33:dc:42:60:e2:28:44:64:4b:26:05:
         36:3b:31:2d:e2:89:7f:0e:4a:1c:61:83:87:7f:e1:07:f7:1f:
         e7:8a:0d:c4:82:c6:75:70:3f:dc:a0:25:63:40:ce:8b:32:82:
         b2:ea:62:f7:70:ee:f3:b8:ee:23:5f:ad:f4:b4:44:40:45:89:
         a4:ad:b8:e7:1c:1b:d3:5c:72:6e:8a:de:f0:22:9c:dc:77:ae:
         d3:0f:00:af:7c:da:0a:7b:38:99:8a:be:d9:0e:1d:60:bd:c2:
         25:60:76:1d:21:c3:7d:39:84:26:b3:a9:b4:2b:f6:45:c3:5e:
         fb:07:15:7f:1d:33:77:b4:ed:09:ac:83:c1:d0:56:f0:cf:fc:
         e2:e4:04:30:f8:7c:31:50:f4:dc:7f:3f:0e:4e:9d:6f:26:4c:
         bd:27:c3:91:a7:64:4e:89:0c:77:21:58:54:fd:27:e7:f9:f4:
         2c:bc:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org