Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/3137372e31322e3232332e302f32342d3234203d3e20323730373531.roa
File:                     3137372e31322e3232332e302f32342d3234203d3e20323730373531.roa (raw, json)
Hash identifier:          ilOrUNoztaXo5+lUMpzSzoQOuNz7cm5mYuasTDH7APo=
Subject key identifier:   97:5D:2A:58:00:8B:41:19:1B:62:A2:36:34:2D:2A:A2:FF:E4:F1:8C
Certificate issuer:       /CN=98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D
Certificate serial:       1998B13F0A4AB2DA7E226F90A2E62064F69F90EB
Authority key identifier: 98:A3:C1:67:BE:65:CE:4B:A1:58:5E:8D:4F:90:A6:AB:24:89:F9:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/3137372e31322e3232332e302f32342d3234203d3e20323730373531.roa
Signing time:             Fri 12 Jan 2024 16:00:35 +0000
ROA not before:           Fri 12 Jan 2024 15:55:35 +0000
ROA not after:            Fri 10 Jan 2025 16:00:35 +0000
asID:                     270751
IP address blocks:        177.12.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:98:b1:3f:0a:4a:b2:da:7e:22:6f:90:a2:e6:20:64:f6:9f:90:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D
        Validity
            Not Before: Jan 12 15:55:35 2024 GMT
            Not After : Jan 10 16:00:35 2025 GMT
        Subject: CN=975D2A58008B41191B62A236342D2AA2FFE4F18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:a2:04:4f:fa:d4:83:36:d7:b7:a7:4f:53:
                    c4:fe:48:69:d5:c3:c8:5f:d5:43:82:d9:44:2b:31:
                    17:2d:09:15:81:72:68:6e:99:63:93:cb:55:f4:7c:
                    f1:70:66:f5:e8:22:e9:1c:43:4b:9a:3e:95:b4:30:
                    6f:e1:ec:d2:a7:8b:7d:3d:f6:05:af:e0:67:05:eb:
                    2d:5a:1c:e5:0e:c0:e1:21:f0:4e:27:81:37:35:f2:
                    a1:97:57:93:34:0f:d3:49:c3:bc:ec:8d:8c:f1:4d:
                    d8:79:3c:90:e5:5f:f7:0b:35:6e:10:ff:ff:97:24:
                    f6:32:97:dd:b0:e1:74:8c:08:15:11:13:30:34:49:
                    07:c1:fd:a8:64:59:48:20:9e:94:e8:2b:af:5e:dc:
                    16:a3:f1:ef:fc:8d:cd:4a:ba:53:73:0d:1c:e8:4f:
                    c4:99:f6:da:bc:ea:6c:36:96:59:d2:09:be:a0:2c:
                    07:d5:ed:65:74:c8:c1:b4:c3:3e:6d:12:bd:71:0d:
                    12:51:24:bf:e4:ad:e3:3f:4f:bc:1d:95:6d:1e:df:
                    1c:39:00:2f:62:5c:90:37:3c:57:a9:fd:70:59:fa:
                    6e:80:c5:64:f1:ed:2b:d5:ec:0b:e3:db:bc:26:f7:
                    76:6c:95:8d:bd:81:0f:92:82:cb:fa:c0:2c:44:2e:
                    45:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5D:2A:58:00:8B:41:19:1B:62:A2:36:34:2D:2A:A2:FF:E4:F1:8C
            X509v3 Authority Key Identifier:
                keyid:98:A3:C1:67:BE:65:CE:4B:A1:58:5E:8D:4F:90:A6:AB:24:89:F9:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/3137372e31322e3232332e302f32342d3234203d3e20323730373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:e4:3d:3b:de:76:cb:78:c4:c2:d9:4f:5c:7a:ed:80:04:a8:
         f7:22:47:55:f9:77:eb:95:39:36:2a:10:1e:04:3d:a5:19:01:
         12:c1:6b:e7:f2:c4:10:27:ae:01:1f:72:3c:27:43:f0:a3:96:
         3a:d5:37:9c:a2:16:26:99:5d:8c:c7:fe:59:44:43:7b:da:41:
         5f:1e:ee:6a:49:b4:86:8d:40:29:95:f0:57:20:19:0a:7d:d8:
         96:71:5b:7e:a1:5d:31:38:08:55:bf:61:73:06:1d:4a:aa:b0:
         cf:c8:50:b3:3d:8e:fd:2f:a7:8d:7e:08:3f:75:b0:60:54:29:
         50:55:33:76:06:7f:21:6d:2c:e0:f9:24:b9:21:53:65:e0:6e:
         72:53:31:6d:91:62:9f:57:e3:6f:b4:00:9f:94:79:81:1a:0e:
         6b:14:a8:4e:df:5f:8d:b1:01:1b:85:61:be:ac:5a:29:7e:b4:
         b1:7b:b7:e3:6f:78:af:df:39:6d:81:7f:0c:25:5d:c0:6f:0a:
         b6:35:19:af:b7:6c:35:23:61:e0:ea:cd:94:bd:3c:a5:e8:47:
         ed:cd:43:40:62:3c:9e:8b:60:4d:14:19:a2:22:45:91:f2:24:
         e9:a8:91:b4:2e:24:97:42:32:12:67:70:be:d8:44:06:51:94:
         2e:d2:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org