Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32312d3236203d3e203532393437.roa
File:                     3137372e33382e3133362e302f32312d3236203d3e203532393437.roa (raw, json)
Hash identifier:          /ydsHc1BhqxKFkHDhpFps4lmkQUESApjkyF7ABSi/KY=
Subject key identifier:   0D:53:C4:10:2D:52:11:7E:99:09:37:63:C6:7B:57:80:A3:6F:F8:C3
Certificate issuer:       /CN=C13DFF312673AB2309FB2F384BDA7DB79057D3AD
Certificate serial:       061908739442970CC47B17EF82924A7DE4296354
Authority key identifier: C1:3D:FF:31:26:73:AB:23:09:FB:2F:38:4B:DA:7D:B7:90:57:D3:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32312d3236203d3e203532393437.roa
Signing time:             Tue 05 Dec 2023 15:44:36 +0000
ROA not before:           Tue 05 Dec 2023 15:39:36 +0000
ROA not after:            Tue 03 Dec 2024 15:44:36 +0000
asID:                     52947
IP address blocks:        177.38.136.0/21 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:19:08:73:94:42:97:0c:c4:7b:17:ef:82:92:4a:7d:e4:29:63:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13DFF312673AB2309FB2F384BDA7DB79057D3AD
        Validity
            Not Before: Dec  5 15:39:36 2023 GMT
            Not After : Dec  3 15:44:36 2024 GMT
        Subject: CN=0D53C4102D52117E99093763C67B5780A36FF8C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:ae:71:31:8f:11:47:47:5f:95:e1:dd:d3:
                    39:47:9f:b4:a4:e5:66:42:ce:1a:52:f2:6a:dd:a7:
                    0b:08:7d:78:17:f7:4d:4a:a3:98:c3:86:70:80:f5:
                    4e:65:fd:5d:12:45:d0:ae:4c:b2:56:ad:3c:0e:32:
                    5c:62:72:ac:a8:32:82:85:c9:a1:86:00:d2:bb:d9:
                    04:9f:d4:e9:63:c2:7d:ad:48:a8:2e:c5:8c:47:f9:
                    a5:da:b4:26:14:b0:90:2e:b4:20:1c:d2:3e:6f:b9:
                    91:21:cf:a8:ff:b8:48:24:a2:fa:0a:2e:e0:37:77:
                    c1:f2:e3:dd:ef:47:62:17:66:ad:7b:13:8b:6c:a3:
                    4c:ce:ff:72:98:be:ec:96:00:a0:8c:13:7c:80:7d:
                    12:48:4c:da:bd:72:21:76:7e:e6:16:1e:84:af:22:
                    5e:b0:79:6e:51:63:a6:46:02:2f:a3:1b:9d:43:df:
                    ab:3a:7d:8f:d4:3e:b6:1f:ce:ad:85:0f:6a:b1:40:
                    19:2d:6c:93:d7:e3:2d:e8:77:18:9d:02:38:b0:3b:
                    f2:a2:5c:29:64:29:f7:68:b4:66:1b:32:28:ce:2f:
                    ee:11:12:f8:d0:ce:13:c5:5b:46:cb:93:75:b4:e4:
                    2f:76:9c:94:83:96:80:ab:7e:55:8e:39:81:c1:75:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:53:C4:10:2D:52:11:7E:99:09:37:63:C6:7B:57:80:A3:6F:F8:C3
            X509v3 Authority Key Identifier:
                keyid:C1:3D:FF:31:26:73:AB:23:09:FB:2F:38:4B:DA:7D:B7:90:57:D3:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32312d3236203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:64:32:28:f8:f5:4e:2d:e9:c6:3c:92:e5:59:7a:fd:f2:b6:
         c6:1e:8b:a0:43:6e:88:bd:cd:17:75:1f:0c:80:2d:c7:b7:b7:
         02:58:84:3b:36:24:7c:a3:26:0d:9e:4b:b4:52:21:30:0e:66:
         82:65:f1:17:82:f5:24:06:84:9e:4a:b6:58:f0:c9:e5:96:b9:
         fe:8a:3b:b4:b5:82:70:73:a4:66:22:37:54:62:a5:9b:fc:8a:
         03:ff:6c:a6:b4:8d:01:03:ee:4d:d8:81:80:83:eb:af:eb:96:
         9e:03:90:11:f0:91:45:68:3f:00:0d:cb:16:d3:53:c0:1b:d9:
         bf:14:8f:11:1f:89:a9:b4:46:e7:47:37:af:6b:52:15:80:82:
         57:f7:8f:7b:24:cd:6b:99:fa:a5:dc:b0:1b:35:d1:21:ba:90:
         6a:e9:f5:75:0f:4a:c5:06:59:b3:6a:a4:d8:08:79:0a:0b:fd:
         0b:3d:54:2f:54:d1:ec:98:4b:16:13:e3:42:54:84:ad:13:f1:
         43:bb:4d:f0:21:3e:7e:d9:62:9b:7d:5b:c9:14:33:03:1b:6d:
         0b:a9:99:4d:29:be:04:fd:4e:81:97:3d:26:f2:12:fe:0f:5c:
         da:76:ef:8f:cd:65:a5:f2:39:2c:15:ad:ba:f0:9e:e6:ad:46:
         18:b6:49:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org