Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137372e38342e36342e302f32312d3234203d3e203238313731.roa
File:                     3137372e38342e36342e302f32312d3234203d3e203238313731.roa (raw, json)
Hash identifier:          Ru96e1PSANJHH7Bj77R7MaEnm8kPYV//MIF0vrwZ28Y=
Subject key identifier:   B2:1C:50:79:D8:9A:D2:EA:2D:AD:77:B9:B7:39:94:EE:71:02:7F:47
Certificate issuer:       /CN=685127D62A24E86E271BBBBFE4E01D67A0F2C1DD
Certificate serial:       0240B101416250B1B3F7FDB0F2044A4A7EF56BF0
Authority key identifier: 68:51:27:D6:2A:24:E8:6E:27:1B:BB:BF:E4:E0:1D:67:A0:F2:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137372e38342e36342e302f32312d3234203d3e203238313731.roa
Signing time:             Tue 02 Apr 2024 21:00:01 +0000
ROA not before:           Tue 02 Apr 2024 20:55:01 +0000
ROA not after:            Wed 02 Apr 2025 21:00:01 +0000
asID:                     28171
IP address blocks:        177.84.64.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:40:b1:01:41:62:50:b1:b3:f7:fd:b0:f2:04:4a:4a:7e:f5:6b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=685127D62A24E86E271BBBBFE4E01D67A0F2C1DD
        Validity
            Not Before: Apr  2 20:55:01 2024 GMT
            Not After : Apr  2 21:00:01 2025 GMT
        Subject: CN=3082010A0282010100C488202F2770AA58A37789CF5BCD6F99FADC636EDF7332EE448F1084FA641633B583B4C491206C588FBFB4A3BC18E36F229E22B2A4E34807B38607F932C69095808E23E7C3E37A8B8F776AD6A4476CD43883B1E1D276B3962F0522519300C7D8A35C5B2457D6D68D8CFB620465FD54D6B9EB9F7BDDCD3BE6D40515578BB1F3C2C473038A7332797196B5EE4E299D273A11FC855BEB7F5E4AC8C6BEBC95A794025326E91C5A95C790C64C8ACCE55EE175407CA0512A78D0F3D05B9D0BD07CE8B8D94CA6BAD5E828CE0DE07AE1B0F9F28FEA99BD8F82B2DE77D9B657BBCE0AB96BFC7AF8A2189B2F3AA2936CF997AA892D8D907B8EE695602AA4A451EAAEA2EE370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:20:2f:27:70:aa:58:a3:77:89:cf:5b:cd:
                    6f:99:fa:dc:63:6e:df:73:32:ee:44:8f:10:84:fa:
                    64:16:33:b5:83:b4:c4:91:20:6c:58:8f:bf:b4:a3:
                    bc:18:e3:6f:22:9e:22:b2:a4:e3:48:07:b3:86:07:
                    f9:32:c6:90:95:80:8e:23:e7:c3:e3:7a:8b:8f:77:
                    6a:d6:a4:47:6c:d4:38:83:b1:e1:d2:76:b3:96:2f:
                    05:22:51:93:00:c7:d8:a3:5c:5b:24:57:d6:d6:8d:
                    8c:fb:62:04:65:fd:54:d6:b9:eb:9f:7b:dd:cd:3b:
                    e6:d4:05:15:57:8b:b1:f3:c2:c4:73:03:8a:73:32:
                    79:71:96:b5:ee:4e:29:9d:27:3a:11:fc:85:5b:eb:
                    7f:5e:4a:c8:c6:be:bc:95:a7:94:02:53:26:e9:1c:
                    5a:95:c7:90:c6:4c:8a:cc:e5:5e:e1:75:40:7c:a0:
                    51:2a:78:d0:f3:d0:5b:9d:0b:d0:7c:e8:b8:d9:4c:
                    a6:ba:d5:e8:28:ce:0d:e0:7a:e1:b0:f9:f2:8f:ea:
                    99:bd:8f:82:b2:de:77:d9:b6:57:bb:ce:0a:b9:6b:
                    fc:7a:f8:a2:18:9b:2f:3a:a2:93:6c:f9:97:aa:89:
                    2d:8d:90:7b:8e:e6:95:60:2a:a4:a4:51:ea:ae:a2:
                    ee:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1C:50:79:D8:9A:D2:EA:2D:AD:77:B9:B7:39:94:EE:71:02:7F:47
            X509v3 Authority Key Identifier:
                keyid:68:51:27:D6:2A:24:E8:6E:27:1B:BB:BF:E4:E0:1D:67:A0:F2:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137372e38342e36342e302f32312d3234203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:75:99:6c:ac:31:dd:64:e2:7f:64:4d:b4:f1:dc:e0:6f:bd:
         88:92:f4:96:69:d1:db:49:02:a2:75:08:98:48:a5:47:6a:f5:
         7c:4d:fc:a9:d9:a8:e8:19:76:e4:bc:70:14:20:cf:04:1f:6e:
         fc:19:28:9e:4e:64:07:38:e1:5d:6d:b4:38:41:fb:4a:be:d5:
         26:18:d4:41:ea:c4:5e:ed:4c:83:11:47:61:76:8f:9f:55:20:
         01:bd:a3:f8:68:6d:96:4b:ab:b7:6a:24:e0:72:9e:8b:24:77:
         59:82:49:86:7d:80:40:40:bb:5e:e6:3e:8f:74:0d:6e:7d:82:
         c3:89:ea:d5:0f:b1:a5:62:b7:ee:90:2a:20:69:4d:8c:61:80:
         a1:bc:c3:7a:09:91:ac:58:d8:a2:ad:b8:e0:87:0e:fe:9d:89:
         52:99:7c:4d:42:6e:71:81:98:a1:d3:4d:01:77:4a:04:04:74:
         fd:91:3f:23:ac:95:ed:70:cf:58:5c:30:a6:9b:ac:fe:a6:c2:
         93:87:c6:e7:97:c8:0c:bf:1d:86:14:d3:eb:e1:98:0a:42:cd:
         1d:14:df:9e:1c:40:21:2a:cf:22:6c:0b:60:cf:a3:1a:2b:89:
         47:95:a7:4a:76:15:0f:4e:61:dc:6b:5f:71:62:8c:9e:32:f9:
         86:fb:b0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org