Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33322e302f32312d3231203d3e203532383631.roa
File:                     3137372e3132342e33322e302f32312d3231203d3e203532383631.roa (raw, json)
Hash identifier:          2fxKYAfu53dOs3Z8zLkTwSVvZwukD5OqMF6x5KzSULQ=
Subject key identifier:   E6:39:07:40:3B:CB:7F:4C:99:ED:00:85:BD:D3:D4:38:74:CA:AB:85
Certificate issuer:       /CN=836BA4893066A2B7B112A0DB316F1611FD005A58
Certificate serial:       51E6757C9D59BCC9E71F8230D587C4179E39D55D
Authority key identifier: 83:6B:A4:89:30:66:A2:B7:B1:12:A0:DB:31:6F:16:11:FD:00:5A:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/836BA4893066A2B7B112A0DB316F1611FD005A58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33322e302f32312d3231203d3e203532383631.roa
Signing time:             Fri 01 Mar 2024 14:20:39 +0000
ROA not before:           Fri 01 Mar 2024 14:15:39 +0000
ROA not after:            Fri 28 Feb 2025 14:20:39 +0000
asID:                     52861
IP address blocks:        177.124.32.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e6:75:7c:9d:59:bc:c9:e7:1f:82:30:d5:87:c4:17:9e:39:d5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836BA4893066A2B7B112A0DB316F1611FD005A58
        Validity
            Not Before: Mar  1 14:15:39 2024 GMT
            Not After : Feb 28 14:20:39 2025 GMT
        Subject: CN=E63907403BCB7F4C99ED0085BDD3D43874CAAB85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:f9:a2:bf:b5:52:94:75:62:25:04:be:08:
                    b7:e9:5b:43:ef:81:07:ff:62:90:d3:98:c9:62:8a:
                    64:c9:8c:3f:df:ab:81:a5:3e:21:61:a4:47:a8:66:
                    d4:09:25:35:7b:6d:fc:9d:92:4d:a2:57:71:92:3b:
                    6e:2c:f1:39:d9:58:0a:59:79:3b:94:30:26:36:37:
                    1d:40:1b:73:af:7b:ff:a2:e8:f7:0e:1c:72:04:a0:
                    aa:40:f9:d9:c4:08:83:a9:65:d8:96:be:90:e8:0b:
                    75:5e:ff:91:d1:85:5a:79:26:97:36:a9:7d:63:45:
                    ac:1e:72:18:20:6d:9e:f7:da:53:d1:d1:22:29:a5:
                    09:fa:7d:35:90:37:2f:01:9a:ae:72:02:46:51:0a:
                    94:d1:fa:a4:8b:e6:4e:9d:5b:1f:11:00:71:59:35:
                    71:c0:f9:ee:6e:2b:bd:64:42:34:c6:b1:ec:8e:37:
                    38:e1:46:61:5a:2a:c6:3d:4a:89:1d:bd:5a:77:d8:
                    88:29:ea:b4:48:ab:26:14:9b:17:16:12:6f:54:b0:
                    d6:fc:51:fe:15:60:8a:76:f1:bd:03:ba:8c:24:f4:
                    84:e9:58:3f:f7:91:1b:34:f5:d3:17:f4:87:42:49:
                    3f:57:bf:33:9e:48:80:6d:7a:49:b5:35:72:38:7d:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:39:07:40:3B:CB:7F:4C:99:ED:00:85:BD:D3:D4:38:74:CA:AB:85
            X509v3 Authority Key Identifier:
                keyid:83:6B:A4:89:30:66:A2:B7:B1:12:A0:DB:31:6F:16:11:FD:00:5A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/836BA4893066A2B7B112A0DB316F1611FD005A58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/836BA4893066A2B7B112A0DB316F1611FD005A58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33322e302f32312d3231203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:a2:ba:0c:84:8f:5a:e1:23:99:c4:ed:63:98:14:b0:cd:50:
         bd:32:e9:d9:2c:f4:96:05:03:72:10:36:c2:41:3e:45:27:5e:
         b2:c7:11:a7:af:5e:d4:4b:d9:66:18:17:39:e2:68:20:ef:17:
         9e:8d:e1:58:6e:d5:96:0e:e9:66:4f:af:29:d1:b5:bf:3e:90:
         26:e0:a5:11:9e:b8:42:d0:9f:10:04:ab:52:1f:2c:47:28:00:
         a9:a5:30:38:3c:26:9c:e5:dc:49:21:52:df:9f:59:eb:78:f3:
         48:3d:f9:83:86:57:66:ac:45:73:22:b2:95:f9:bb:29:b3:1d:
         43:8b:95:cd:48:6b:f1:89:62:9f:ce:12:fb:4a:d9:c3:c5:ec:
         1c:5f:58:02:98:52:37:77:3e:8b:23:17:33:a0:db:c0:91:01:
         7c:6d:f7:6d:bd:3c:f5:23:fb:30:d0:ef:13:ce:c9:9b:6d:d6:
         f6:88:83:b4:02:e2:13:cf:e0:60:af:c2:eb:06:70:6a:98:c5:
         55:ee:46:cc:5a:3f:8e:10:26:63:8a:35:58:94:51:74:42:36:
         47:ab:4f:45:7d:1f:08:04:ec:7c:2e:c9:82:1e:64:9b:fb:c5:
         6d:db:d2:e1:63:21:87:0a:6a:4c:e8:a2:5b:52:e5:5d:56:2c:
         be:b9:b6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org