Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38352e302f32342d3234203d3e20323632393737.roa
File:                     3137372e3139302e38352e302f32342d3234203d3e20323632393737.roa (raw, json)
Hash identifier:          r9CRTNNu0KMgK0ykGQ//Ayyrv4G+u7dBHb9NMsiRkR4=
Subject key identifier:   75:0A:6D:BB:BC:F8:8A:B9:6B:E3:5B:50:E7:8C:54:40:CD:DA:B1:DF
Certificate issuer:       /CN=6FB6B7EF794C174C831FD488C872C21F121032B1
Certificate serial:       5CFDDDF32B52370BF97A0E427191660CEA79C6F0
Authority key identifier: 6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38352e302f32342d3234203d3e20323632393737.roa
Signing time:             Thu 04 Apr 2024 00:35:45 +0000
ROA not before:           Thu 04 Apr 2024 00:30:45 +0000
ROA not after:            Thu 03 Apr 2025 00:35:45 +0000
asID:                     262977
IP address blocks:        177.190.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fd:dd:f3:2b:52:37:0b:f9:7a:0e:42:71:91:66:0c:ea:79:c6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB6B7EF794C174C831FD488C872C21F121032B1
        Validity
            Not Before: Apr  4 00:30:45 2024 GMT
            Not After : Apr  3 00:35:45 2025 GMT
        Subject: CN=750A6DBBBCF88AB96BE35B50E78C5440CDDAB1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:75:df:85:02:93:02:ab:3d:27:07:29:bb:
                    ce:07:c8:f1:56:a0:38:a5:68:79:b9:57:84:95:32:
                    1a:b7:aa:b5:bd:3b:1f:fd:6f:28:d4:a3:b8:a1:4b:
                    d2:df:79:1a:d3:64:8b:60:d6:c8:91:3d:34:18:fa:
                    2d:71:8f:c6:ec:c1:19:03:bf:c1:4a:38:2a:6e:af:
                    a3:19:8d:95:c3:30:49:44:d1:81:68:ad:4e:2b:9e:
                    d0:9a:13:ef:09:15:7b:c7:b3:1a:9a:cc:11:5b:ed:
                    fc:5e:14:f2:29:b2:e7:41:d3:8f:ab:27:d9:81:50:
                    63:59:85:b9:32:e0:da:22:18:15:86:89:79:e2:1d:
                    56:1e:74:6a:35:cc:19:6f:f4:3c:30:34:6a:c9:35:
                    57:ff:70:81:89:9d:6d:9a:eb:eb:d7:7b:5c:2d:a0:
                    a7:bf:55:20:80:b5:b7:34:51:75:c0:97:f9:fe:f0:
                    33:da:27:4f:12:c6:d0:47:61:86:ae:4d:67:c1:e2:
                    23:f4:bf:29:6b:af:be:bf:cd:1d:4f:87:d9:5d:a5:
                    ea:5a:73:7e:c5:70:4f:39:d0:b9:3e:c5:9c:05:ae:
                    6e:64:c9:fe:04:a7:96:2d:b7:9e:19:d9:fd:3d:6b:
                    a6:aa:4e:11:60:df:7e:99:08:11:2f:99:1b:61:3b:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0A:6D:BB:BC:F8:8A:B9:6B:E3:5B:50:E7:8C:54:40:CD:DA:B1:DF
            X509v3 Authority Key Identifier:
                keyid:6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/6FB6B7EF794C174C831FD488C872C21F121032B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38352e302f32342d3234203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:2e:0f:ec:ed:73:d1:92:03:1a:3a:93:ae:01:6e:87:6e:48:
         f5:b9:5d:70:7c:9b:10:7a:95:29:53:02:80:5f:72:45:83:91:
         72:42:04:9e:01:d3:3b:08:c9:ea:fa:62:13:b5:2c:49:d4:b0:
         cd:09:b8:00:3c:83:4d:c2:f8:a5:cc:82:53:6e:bb:23:28:3b:
         02:0b:75:0c:91:a6:4d:ee:ba:d4:af:d2:a9:6f:8e:81:bb:59:
         59:ec:fb:c2:4f:13:30:b6:c5:2c:e9:03:ee:58:e7:f2:4a:ac:
         c0:ea:f6:49:f1:29:78:2f:18:63:4c:86:3c:22:f4:4e:b7:c8:
         bf:f8:8f:d0:5d:3a:f1:db:aa:38:55:54:00:7d:9c:2d:93:0d:
         1a:c9:22:a9:95:a6:13:f4:21:db:a0:0c:2e:44:cd:4d:19:f7:
         43:95:7f:33:11:87:25:66:d2:b0:0b:c1:8e:c1:0d:7c:75:42:
         bd:63:e8:79:a4:85:e9:cc:ea:9a:e0:3e:62:ed:b6:95:37:d8:
         b5:8a:b7:aa:d6:88:13:f2:1c:cd:9c:fd:00:ee:b6:96:e8:79:
         14:d9:0f:74:86:a3:1c:8f:ea:eb:f7:c5:85:60:2b:62:c0:6f:
         94:7e:f4:e9:45:1f:09:38:06:91:3a:56:28:2b:77:97:bb:2a:
         5e:ef:db:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org