Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/3137372e3232332e36302e302f32342d3234203d3e20323633353030.roa
File:                     3137372e3232332e36302e302f32342d3234203d3e20323633353030.roa (raw, json)
Hash identifier:          7guYk9z4stOPOjv+J7Ubh84CGfKgsRq7FbdGAy+sseg=
Subject key identifier:   9D:10:2A:29:D2:2F:F7:F6:1A:7A:21:1E:80:10:46:C6:60:14:55:15
Certificate issuer:       /CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
Certificate serial:       316DE1A9D3C90D5968610D1AE634626DF9448090
Authority key identifier: 26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/3137372e3232332e36302e302f32342d3234203d3e20323633353030.roa
Signing time:             Wed 20 Mar 2024 01:44:52 +0000
ROA not before:           Wed 20 Mar 2024 01:39:52 +0000
ROA not after:            Wed 19 Mar 2025 01:44:52 +0000
asID:                     263500
IP address blocks:        177.223.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6d:e1:a9:d3:c9:0d:59:68:61:0d:1a:e6:34:62:6d:f9:44:80:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
        Validity
            Not Before: Mar 20 01:39:52 2024 GMT
            Not After : Mar 19 01:44:52 2025 GMT
        Subject: CN=9D102A29D22FF7F61A7A211E801046C660145515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:20:65:0e:e1:cf:1e:19:ca:ba:65:89:6e:
                    e3:d1:6b:df:78:c3:e2:e2:9c:c4:66:27:bc:d6:1d:
                    42:8a:cc:f1:84:a5:61:48:50:8e:5b:e4:ae:c4:a8:
                    62:90:54:c2:3e:e3:97:27:4d:86:25:66:95:48:dd:
                    ad:71:f2:9f:97:69:e6:0c:fb:59:f6:1e:a9:7a:ed:
                    d7:03:25:51:03:de:bd:a7:99:5e:e3:f9:ce:96:1a:
                    63:58:cf:ef:df:38:fa:4e:0b:6d:bf:ca:7d:ba:09:
                    e2:ec:bc:e7:ec:f6:60:9e:5c:d6:e7:77:93:6f:e4:
                    fc:c1:e3:2e:96:c7:ac:9a:a5:71:53:9d:81:09:b2:
                    62:d2:47:30:9b:33:f0:46:93:21:b2:f3:b0:e7:dd:
                    af:6f:89:77:f0:c8:6d:85:3d:4a:1c:7f:32:6f:a7:
                    20:d7:c5:86:20:f8:0c:66:a0:39:40:fa:e5:f0:21:
                    a2:f4:f8:e1:8b:1e:e3:07:21:b7:c5:85:e0:71:e8:
                    e9:b1:55:c8:00:61:14:16:1b:ea:d7:81:74:07:dc:
                    19:4c:8e:48:00:94:f2:51:64:40:49:7f:8c:b1:8a:
                    da:78:03:ab:ce:e5:b9:3a:e8:2d:86:5c:c7:40:99:
                    19:eb:df:43:1c:c4:59:5d:96:dd:3e:39:a2:a9:e0:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:10:2A:29:D2:2F:F7:F6:1A:7A:21:1E:80:10:46:C6:60:14:55:15
            X509v3 Authority Key Identifier:
                keyid:26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/3137372e3232332e36302e302f32342d3234203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:ab:14:73:45:e6:35:13:94:8a:dd:15:6c:49:eb:a8:ac:37:
         01:70:f9:5a:ce:99:cc:62:21:e5:26:09:26:48:cc:59:6b:90:
         aa:81:7f:97:bc:54:fa:de:55:59:76:2a:5d:90:fc:36:8f:69:
         f8:2e:85:b8:c5:1d:fb:56:d8:df:80:3a:70:c7:95:7a:7e:5f:
         62:14:0d:4d:a1:72:5e:ba:1a:77:99:9d:85:95:7d:41:8b:03:
         be:8d:7d:e5:c4:de:2d:f4:b7:78:f8:3d:ea:28:4a:b7:8f:fb:
         fa:42:ba:e6:19:c6:b0:80:8d:f4:eb:27:a0:8f:e7:99:b7:c4:
         33:72:03:e4:a9:54:04:79:df:17:b4:bf:c2:7b:2e:86:fa:ea:
         ce:a9:79:e4:ec:64:66:f9:f2:02:34:2f:b9:30:cb:bf:80:70:
         a3:8f:bf:32:01:0a:fa:fd:f9:21:eb:e0:6d:f6:ad:08:6e:6e:
         c2:76:7d:3b:ef:63:c8:16:59:a4:71:c3:12:1e:6e:d0:be:0c:
         f9:c3:f5:2f:4d:16:23:fe:0f:63:de:a2:08:d7:f2:d9:10:3e:
         10:7b:38:05:3d:bd:eb:1f:ee:cd:fc:3f:ff:3f:af:b3:c6:45:
         8c:36:88:13:3b:62:b2:3f:ab:11:6d:d8:c5:35:cd:22:8e:83:
         c3:c9:1d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org