Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32312d3332203d3e203532363630.roa
File:                     3137372e36362e3234382e302f32312d3332203d3e203532363630.roa (raw, json)
Hash identifier:          llA7D65o2Wavmyt5ibN85ybV9XU+RF6ZAA96lF2rWsg=
Subject key identifier:   D0:6A:FF:F4:A5:7B:A7:93:3F:80:94:02:D8:CF:29:7D:30:38:83:E6
Certificate issuer:       /CN=2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505
Certificate serial:       2F681E1B97E0E8F16AA8A55DA2D4C2E6F4632E6D
Authority key identifier: 2C:7F:42:6F:49:AD:E0:70:F3:0D:2C:7C:2A:CF:B8:DF:CC:1E:F5:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32312d3332203d3e203532363630.roa
Signing time:             Wed 21 Feb 2024 19:04:25 +0000
ROA not before:           Wed 21 Feb 2024 18:59:25 +0000
ROA not after:            Wed 19 Feb 2025 19:04:25 +0000
asID:                     52660
IP address blocks:        177.66.248.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:68:1e:1b:97:e0:e8:f1:6a:a8:a5:5d:a2:d4:c2:e6:f4:63:2e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505
        Validity
            Not Before: Feb 21 18:59:25 2024 GMT
            Not After : Feb 19 19:04:25 2025 GMT
        Subject: CN=D06AFFF4A57BA7933F809402D8CF297D303883E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:74:37:6f:3c:22:55:e2:ff:62:5e:15:d0:
                    d3:69:db:f6:4c:7b:0e:20:30:13:93:1a:cd:f5:41:
                    dd:b1:1b:e4:fb:b4:e9:12:ad:84:70:0e:fe:c9:42:
                    ee:18:86:5c:0a:e2:ce:e2:5d:b7:d2:f3:bc:13:4b:
                    50:7a:8a:16:19:03:e7:62:34:00:31:db:61:b8:c6:
                    48:ad:25:d5:f2:57:41:a8:08:82:93:7e:f9:07:7d:
                    41:8d:5f:2e:69:d7:b0:12:cb:a1:6e:99:23:d1:ec:
                    60:61:d4:20:d8:10:31:e7:d2:21:07:7b:ec:91:be:
                    2e:f7:b0:16:05:67:09:a7:ce:40:56:99:ae:ba:5d:
                    80:76:44:40:5b:0b:d2:93:45:63:6c:4a:f9:9a:02:
                    19:da:94:91:70:d7:6a:da:9a:31:c8:f2:11:b6:8d:
                    39:ad:c8:47:3f:99:9f:b7:3a:0d:da:2f:c0:f1:1a:
                    3b:4f:ba:db:2b:7e:fd:f0:66:7e:58:e5:13:3e:a6:
                    4e:22:10:c5:2b:d3:28:2e:77:74:ef:b3:21:c9:e3:
                    44:4a:84:3d:17:cc:d8:92:b3:9d:2e:32:c0:f7:ed:
                    ed:1d:d9:07:e7:27:3a:e2:81:25:54:ee:d7:aa:c5:
                    ae:f7:9b:a2:03:89:08:ac:3e:86:45:f0:d8:ac:95:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6A:FF:F4:A5:7B:A7:93:3F:80:94:02:D8:CF:29:7D:30:38:83:E6
            X509v3 Authority Key Identifier:
                keyid:2C:7F:42:6F:49:AD:E0:70:F3:0D:2C:7C:2A:CF:B8:DF:CC:1E:F5:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C7F426F49ADE070F30D2C7C2ACFB8DFCC1EF505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32312d3332203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a6:3f:c9:d7:11:2c:39:b5:9b:6f:89:19:e3:af:8f:77:d7:1f:
         e3:6b:21:8c:1c:7d:4f:05:06:54:e7:91:f5:7c:37:f0:a7:0b:
         d6:00:99:3b:23:72:0f:15:5c:15:a0:86:e5:5b:a5:11:20:2c:
         1e:ef:c6:45:d4:01:1f:a7:8e:72:73:08:8b:53:e5:1a:ea:8d:
         54:a0:a3:e0:f8:a9:bb:fa:a8:7e:9b:a2:83:79:4b:d1:33:ff:
         51:b3:02:33:2f:57:f9:28:53:ea:9d:62:03:c2:64:e6:b2:7e:
         77:fc:f0:21:e4:5f:50:26:0b:2b:63:58:12:1d:5d:c7:dc:69:
         85:2c:5d:5a:46:02:15:cf:27:27:df:15:44:c0:1d:53:65:08:
         5f:76:be:71:57:70:88:68:db:d1:7b:a4:76:60:4e:1f:6e:49:
         41:4e:bc:82:29:37:11:e3:65:3f:34:6b:ac:2b:54:fb:a8:5b:
         b8:df:f6:f4:21:6b:13:46:c1:6a:fd:95:37:07:65:21:e3:35:
         f1:f3:49:8b:bf:05:b7:ac:06:5a:ef:e8:58:43:88:a5:76:bf:
         e5:58:74:65:53:df:fd:83:dd:b8:e3:b4:41:a6:ce:8e:f6:c6:
         77:4a:a8:86:a8:7f:a6:a5:59:9e:46:e7:b9:1f:7d:63:5d:3d:
         ff:e4:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org