Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32312d3332203d3e203533323039.roa
File:                     3137372e31312e3133362e302f32312d3332203d3e203533323039.roa (raw, json)
Hash identifier:          iwptK1pPqY1qP9NNrZwzxoEN7758uNu7sXV9kfBFP6g=
Subject key identifier:   A8:F3:33:C2:C5:9A:F6:1F:BF:B5:79:A2:C2:83:42:35:28:AC:2D:2E
Certificate issuer:       /CN=4174471032BF86AA31A24302BF994269A134800A
Certificate serial:       6C3308055674543FB98505E2A4BB49154688FC58
Authority key identifier: 41:74:47:10:32:BF:86:AA:31:A2:43:02:BF:99:42:69:A1:34:80:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4174471032BF86AA31A24302BF994269A134800A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32312d3332203d3e203533323039.roa
Signing time:             Tue 18 Jul 2023 14:57:54 +0000
ROA not before:           Tue 18 Jul 2023 14:52:54 +0000
ROA not after:            Tue 16 Jul 2024 14:57:54 +0000
asID:                     53209
IP address blocks:        177.11.136.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:33:08:05:56:74:54:3f:b9:85:05:e2:a4:bb:49:15:46:88:fc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4174471032BF86AA31A24302BF994269A134800A
        Validity
            Not Before: Jul 18 14:52:54 2023 GMT
            Not After : Jul 16 14:57:54 2024 GMT
        Subject: CN=A8F333C2C59AF61FBFB579A2C283423528AC2D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:7a:70:c9:1d:c3:c9:ab:c6:e1:39:91:18:
                    29:10:56:3a:72:ee:67:29:49:dd:03:ff:99:a2:0e:
                    3c:49:e7:e0:cd:18:d3:4f:ec:89:e1:bd:28:c2:86:
                    7c:75:ec:82:57:3f:60:a5:3e:f0:c0:1b:70:e3:41:
                    b5:0b:8d:df:90:d8:fa:15:95:8e:bd:be:68:33:99:
                    a1:47:fc:8f:e7:37:7e:ae:7b:8f:b4:3e:83:61:e6:
                    28:1e:22:16:e9:50:c6:9d:2c:eb:06:a0:6f:cc:78:
                    b1:11:0f:c6:27:29:24:22:65:03:07:df:a1:68:b7:
                    41:17:19:56:5a:72:76:0a:2b:21:72:d3:dc:92:cc:
                    da:f8:a5:6d:1c:d3:34:bc:fd:0f:aa:27:16:38:dc:
                    fc:62:39:6e:c5:81:f4:0f:4e:66:6e:94:15:70:6d:
                    cf:09:6c:66:0f:a9:bc:44:87:e2:19:f0:dc:9a:de:
                    0c:5f:f6:f4:6f:db:60:45:ef:8c:f8:ad:42:98:ad:
                    33:bb:48:7f:3d:45:01:27:09:4d:8f:3a:04:52:06:
                    56:46:87:e2:4e:b8:30:eb:08:ac:43:4a:27:ad:09:
                    99:1a:30:0e:e4:e2:06:6d:c8:2b:c5:8f:8a:2d:4f:
                    60:59:75:7a:27:e8:c2:5d:5d:09:89:bf:56:df:81:
                    92:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F3:33:C2:C5:9A:F6:1F:BF:B5:79:A2:C2:83:42:35:28:AC:2D:2E
            X509v3 Authority Key Identifier:
                keyid:41:74:47:10:32:BF:86:AA:31:A2:43:02:BF:99:42:69:A1:34:80:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/4174471032BF86AA31A24302BF994269A134800A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4174471032BF86AA31A24302BF994269A134800A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32312d3332203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:16:f5:57:6e:d0:1b:bb:97:6a:52:09:20:31:d9:b2:b4:46:
         03:c7:89:a6:7a:5d:6b:53:b9:3e:15:43:4b:83:5c:cb:51:60:
         1c:a3:27:05:3f:2f:fe:c1:57:57:46:11:aa:94:8a:5d:ef:05:
         66:c6:ff:36:50:f1:d4:a4:c3:8f:50:9a:e3:a1:ad:73:86:ae:
         6b:cd:d6:22:57:5c:fb:52:08:99:9d:d0:e4:61:a7:32:e1:2f:
         99:63:40:93:b0:82:82:cb:41:0f:28:b6:cf:c9:7d:59:4c:54:
         eb:14:74:3f:2f:ae:8f:18:73:96:57:2c:53:91:d7:01:fd:14:
         a7:e2:c9:55:f9:e3:da:1b:df:bd:41:fa:15:b8:3e:92:9a:29:
         66:ec:d0:da:1e:83:e7:fd:ec:76:bb:e5:d3:a8:9e:07:9b:2c:
         56:62:6a:91:84:b0:65:02:1e:95:de:99:1e:df:63:a0:f7:da:
         9e:c7:33:c6:3a:e7:c2:58:d8:17:9f:69:0e:6f:39:fb:85:7b:
         1f:5b:a0:80:e7:97:61:ce:e7:f3:7f:0b:ca:c8:78:26:33:75:
         8a:7a:1b:23:d3:f3:eb:14:b2:d1:ed:96:26:62:88:e3:11:99:
         a6:28:ad:79:30:7d:95:78:b4:7f:23:6c:ac:18:e1:b4:6d:ea:
         e5:3a:25:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 18:07:32 2024 by rpki-client on console-ams.rpki-client.org