Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e35362e302f32312d3332203d3e20323638303138.roa
File:                     3137372e33392e35362e302f32312d3332203d3e20323638303138.roa (raw, json)
Hash identifier:          4TW0OpjkdUfKQNd+qEihyWbLyWlR26zchFQQYu3nntU=
Subject key identifier:   FC:0D:B4:91:51:42:38:65:B7:C7:EB:1C:A4:00:AC:19:A1:8E:7D:B9
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       50171635EF127E4FF74CB212A5A95AD78AA46F59
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e35362e302f32312d3332203d3e20323638303138.roa
Signing time:             Mon 30 Oct 2023 23:04:42 +0000
ROA not before:           Mon 30 Oct 2023 22:59:42 +0000
ROA not after:            Mon 28 Oct 2024 23:04:42 +0000
asID:                     268018
IP address blocks:        177.39.56.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:17:16:35:ef:12:7e:4f:f7:4c:b2:12:a5:a9:5a:d7:8a:a4:6f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct 30 22:59:42 2023 GMT
            Not After : Oct 28 23:04:42 2024 GMT
        Subject: CN=FC0DB49151423865B7C7EB1CA400AC19A18E7DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:97:53:c8:5f:43:25:1d:0f:e0:db:42:7b:
                    c5:c5:0d:b4:ae:c2:13:69:60:71:ae:9e:de:43:37:
                    eb:c4:50:94:7e:a6:60:b1:fa:1b:96:9f:06:eb:87:
                    3c:dc:29:15:c2:94:aa:02:cb:35:2c:90:41:f0:89:
                    6d:7a:74:56:55:f2:34:16:aa:6f:c7:92:c3:cd:dc:
                    59:8d:21:ef:02:4e:0c:f7:89:1c:d2:b8:1b:61:4f:
                    7d:7b:8d:d5:17:28:e5:c3:cd:4f:02:e3:f5:ae:4e:
                    1d:35:98:e4:51:b3:76:75:44:2d:be:ac:3c:11:c6:
                    79:c4:0a:44:e4:f8:70:11:62:55:19:78:75:c5:13:
                    ef:bb:30:b1:f1:6f:cd:c1:a2:bf:bd:36:ec:94:f1:
                    e3:08:dc:d4:96:be:f1:fa:54:fd:f9:c2:99:ad:bd:
                    a5:02:00:a7:28:a5:ab:d5:cf:99:ad:2e:f8:ba:73:
                    b5:72:e1:bc:8e:f1:f4:32:81:90:7b:50:6c:df:6f:
                    46:92:36:9b:44:4a:03:80:29:a4:d9:c7:6c:0f:24:
                    69:c2:35:3a:13:1b:15:5c:03:ac:5c:11:99:18:cb:
                    ad:47:34:78:43:bc:4b:e9:7c:b6:91:5f:bb:93:78:
                    c7:5a:59:0f:42:3e:e5:c9:5f:bc:87:e9:29:38:96:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0D:B4:91:51:42:38:65:B7:C7:EB:1C:A4:00:AC:19:A1:8E:7D:B9
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e35362e302f32312d3332203d3e20323638303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:05:cb:3d:ba:d0:de:02:40:14:a6:b4:35:2d:ba:7c:09:00:
         5f:3e:aa:51:50:08:cd:3e:35:b6:f4:35:cc:d0:32:51:99:d0:
         38:9e:c6:65:7a:f6:65:59:63:de:23:fc:58:b6:83:8d:90:d4:
         a2:b8:4b:5b:ee:7c:95:91:8d:28:8a:cd:92:90:76:ac:44:ea:
         84:48:a8:19:83:5f:07:4e:80:17:88:b0:10:64:bf:6e:9d:e5:
         12:12:28:83:20:9f:36:af:a9:22:cb:83:2d:10:9d:4a:56:8d:
         9d:23:8d:21:a4:a9:83:f2:e2:8c:fb:59:2b:45:5f:3e:69:02:
         a0:8d:e9:a4:40:26:f6:66:69:0f:52:7d:62:8f:e5:0b:de:32:
         df:34:22:64:61:d6:5b:c7:68:2e:21:ec:bf:d0:fa:1f:a7:88:
         2a:e6:df:cb:7d:5b:05:34:c0:a6:8a:a9:f4:8b:c6:29:cf:7d:
         dc:bc:44:56:20:4a:d2:5c:94:64:09:a2:59:48:5c:d9:19:74:
         c9:88:3d:43:fa:b7:1e:76:79:0e:d2:f8:f5:73:07:95:f2:f2:
         71:0c:7c:cc:0c:ca:2a:a4:e0:04:4f:25:5a:b5:4b:0e:a2:eb:
         5f:af:0b:a5:b9:03:1c:38:4c:5c:7b:0e:07:9a:da:38:1d:65:
         39:5f:5f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org