Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa
File:                     3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa (raw, json)
Hash identifier:          SnXdkWWfZILu7OXhKcWRVNgZtBy/BdGJ8bn/tJhjFE4=
Subject key identifier:   C7:41:71:83:D9:51:77:29:BD:BD:82:79:F7:2C:3F:D8:7E:EC:D4:A3
Certificate issuer:       /CN=4502CD1B49644F16402D764130FC71B676EC91F0
Certificate serial:       44DC3E888B67FB8B9A469B3347FB804A2B7D6EE7
Authority key identifier: 45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa
Signing time:             Wed 31 Jan 2024 12:36:51 +0000
ROA not before:           Wed 31 Jan 2024 12:31:51 +0000
ROA not after:            Wed 29 Jan 2025 12:36:51 +0000
asID:                     262893
IP address blocks:        177.23.112.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:dc:3e:88:8b:67:fb:8b:9a:46:9b:33:47:fb:80:4a:2b:7d:6e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502CD1B49644F16402D764130FC71B676EC91F0
        Validity
            Not Before: Jan 31 12:31:51 2024 GMT
            Not After : Jan 29 12:36:51 2025 GMT
        Subject: CN=C7417183D9517729BDBD8279F72C3FD87EECD4A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3d:8a:d8:50:7c:ae:0c:8c:f9:e1:b7:70:ab:
                    ab:0a:39:49:72:0b:8a:b1:23:72:43:7c:21:33:46:
                    ec:86:2f:bf:80:1f:9e:ab:a5:45:78:36:5e:4d:f9:
                    65:29:cd:76:e7:57:88:03:b8:77:df:fd:0b:dc:8b:
                    30:2d:75:80:1e:7a:86:e2:e5:a7:22:20:6c:b4:3c:
                    f7:d9:20:4c:c6:3e:1a:a8:c0:20:4a:e0:e7:25:a7:
                    8e:4d:12:f7:75:34:8e:f9:8a:31:47:42:d1:29:3b:
                    1e:25:84:f9:dd:a9:5f:f6:5a:3c:e1:f9:68:23:0a:
                    c4:84:40:e5:45:bd:39:e8:39:1c:88:70:b4:79:01:
                    cb:4d:90:16:7d:0b:53:dc:55:87:3f:28:70:2e:3f:
                    fd:de:48:94:22:03:68:9b:39:5c:4e:1e:f9:66:d8:
                    a4:0c:5f:eb:52:d7:67:66:4c:ec:5f:db:a1:82:34:
                    ae:44:95:70:5c:ae:c4:4e:8a:a8:59:4c:65:eb:bb:
                    ab:d9:33:07:5b:70:e7:d1:91:d2:8a:f8:b5:cf:01:
                    05:b4:79:c3:08:51:c8:e7:c1:a7:c1:39:6f:ec:eb:
                    38:8b:6b:dc:59:89:fb:c6:7c:57:27:95:72:f7:e0:
                    72:fe:e1:5f:d2:18:d4:9e:36:e8:2a:30:ab:6a:5c:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:41:71:83:D9:51:77:29:BD:BD:82:79:F7:2C:3F:D8:7E:EC:D4:A3
            X509v3 Authority Key Identifier:
                keyid:45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/4502CD1B49644F16402D764130FC71B676EC91F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:16:f2:79:6f:7b:9c:66:42:32:15:40:2d:fe:60:23:54:15:
         3c:ee:d4:2b:f5:49:0b:11:5c:1b:9b:31:96:d6:d8:f6:ca:9e:
         4a:fa:d8:93:cb:64:5e:b6:87:78:8a:21:54:9e:83:a7:fb:5e:
         cb:a7:b5:52:33:55:8a:2e:71:a2:d5:89:ae:37:56:00:65:1f:
         97:63:b5:2d:c5:42:ce:21:27:07:92:63:e1:bc:82:a2:4d:b5:
         97:1f:c9:5c:62:f3:67:bc:cd:3c:53:fc:b9:e0:a6:cc:28:8f:
         0c:88:93:9e:b5:ff:4f:00:a7:78:67:3c:2f:5e:4b:c8:42:03:
         55:5d:b6:cb:6b:67:0b:df:0b:99:88:b2:2a:16:71:e9:bc:2a:
         11:78:c3:04:f5:ac:cf:a4:b9:50:bc:d6:6d:13:a9:d9:c4:c1:
         6b:2d:32:54:06:af:40:ce:78:a2:ef:35:70:2b:09:b1:22:42:
         81:d4:af:cb:9f:8e:11:68:80:e1:8b:41:1c:67:8b:cb:95:7a:
         2a:b5:d0:9a:66:fa:0c:c6:c1:52:3a:c7:3a:fb:66:30:14:f2:
         57:e1:34:da:84:5b:e0:f9:dc:0b:95:7e:c9:04:3c:d0:28:d6:
         af:3f:78:93:9a:0d:db:8b:de:1b:63:09:b5:77:d7:ea:2c:55:
         02:ea:20:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org