Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/3137372e35342e39322e302f32322d3234203d3e20323632323932.roa
File:                     3137372e35342e39322e302f32322d3234203d3e20323632323932.roa (raw, json)
Hash identifier:          XFENvK1F2svJKwaehzB0zGP1aLKQtZN7C7eF/eVTveE=
Subject key identifier:   D8:0A:77:B0:92:DE:EF:D0:B2:D3:37:00:F9:C4:46:D1:EE:E5:3F:1F
Certificate issuer:       /CN=826A3AA9AA962E4CFF954588EB5BE6A26A3816EA
Certificate serial:       6CBB52A5521542FB716558DA953EE6335C3D6F04
Authority key identifier: 82:6A:3A:A9:AA:96:2E:4C:FF:95:45:88:EB:5B:E6:A2:6A:38:16:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/826A3AA9AA962E4CFF954588EB5BE6A26A3816EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/3137372e35342e39322e302f32322d3234203d3e20323632323932.roa
Signing time:             Wed 28 Feb 2024 21:31:01 +0000
ROA not before:           Wed 28 Feb 2024 21:26:01 +0000
ROA not after:            Wed 26 Feb 2025 21:31:01 +0000
asID:                     262292
IP address blocks:        177.54.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bb:52:a5:52:15:42:fb:71:65:58:da:95:3e:e6:33:5c:3d:6f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826A3AA9AA962E4CFF954588EB5BE6A26A3816EA
        Validity
            Not Before: Feb 28 21:26:01 2024 GMT
            Not After : Feb 26 21:31:01 2025 GMT
        Subject: CN=D80A77B092DEEFD0B2D33700F9C446D1EEE53F1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:82:61:10:ff:d4:9e:27:38:79:0c:53:4d:
                    94:9d:0b:7d:4b:57:1a:f7:1c:5e:d4:86:f4:ad:a9:
                    d1:1f:ec:c4:46:e6:d3:74:94:01:70:31:16:38:05:
                    09:2c:cd:c5:e0:04:78:53:d1:23:7d:bd:fb:8f:b7:
                    2a:32:25:03:1c:c6:6c:1d:72:c0:4a:0e:5e:f0:46:
                    fe:53:c9:9b:c2:e5:98:bf:9b:23:1c:1f:42:25:04:
                    1b:2a:88:5d:d6:cf:f7:77:27:11:f6:70:fc:aa:03:
                    1b:ea:aa:32:9d:06:c9:30:07:e1:16:f5:bb:1e:6b:
                    f8:1d:a8:3b:09:e1:6f:47:1b:c0:b7:12:c4:e7:12:
                    96:5f:1b:17:fb:cb:41:c7:83:a2:df:04:13:26:78:
                    d2:9f:20:97:20:51:eb:fa:77:25:16:62:d7:ec:2b:
                    41:c1:a9:e8:84:df:44:81:21:51:19:88:12:79:18:
                    65:8a:96:6c:30:6d:33:d8:85:88:24:98:7a:96:3f:
                    a7:d5:cb:ad:0f:43:87:dc:ab:31:06:1a:b9:6b:ab:
                    c8:68:43:7f:cd:ca:4a:9b:3b:17:b8:12:52:c1:32:
                    d1:00:2d:fe:67:14:8a:a4:1d:15:3e:31:98:35:9d:
                    da:50:83:b7:4a:32:3d:35:bd:80:3b:f8:eb:1a:a6:
                    cf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0A:77:B0:92:DE:EF:D0:B2:D3:37:00:F9:C4:46:D1:EE:E5:3F:1F
            X509v3 Authority Key Identifier:
                keyid:82:6A:3A:A9:AA:96:2E:4C:FF:95:45:88:EB:5B:E6:A2:6A:38:16:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/826A3AA9AA962E4CFF954588EB5BE6A26A3816EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/826A3AA9AA962E4CFF954588EB5BE6A26A3816EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/3137372e35342e39322e302f32322d3234203d3e20323632323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:30:8c:45:3e:61:a7:b4:6a:49:fb:1c:4e:a0:6a:50:07:48:
         cd:e6:ff:a1:7b:5f:dc:47:fe:3b:6e:8f:99:93:a9:15:1b:3b:
         0a:24:6e:b8:da:b5:25:11:f2:00:e0:1a:ba:65:f2:7c:a6:4f:
         7c:27:cb:b4:e1:17:1f:9a:65:1b:a2:cf:ab:31:28:37:37:a1:
         24:13:aa:6b:da:2f:e9:78:54:7f:22:95:06:80:f2:a2:e6:bc:
         23:fb:c2:7c:94:b6:6a:52:03:40:79:41:02:32:0f:24:15:d0:
         21:b0:c9:e2:00:a7:73:a1:fd:a8:27:13:c5:de:ea:2b:2a:c6:
         dd:84:3a:d9:ae:bd:be:dd:7d:f3:96:0b:31:f7:5a:0f:35:65:
         43:29:00:ed:f3:04:0e:c2:1b:34:b6:eb:c5:f6:d9:70:b0:60:
         6e:27:7e:16:85:b7:df:09:33:3e:46:2c:67:1a:f4:6b:ab:7d:
         67:88:37:ab:bc:ce:7a:37:c2:4e:48:06:a5:49:3b:71:f1:5f:
         f3:c5:4e:8f:16:49:76:82:ea:e4:74:94:9d:ec:26:0a:db:7a:
         7e:99:46:0a:0e:a0:fb:27:c7:45:f6:f1:79:00:df:90:2a:5b:
         4b:9b:8e:fa:ed:dd:d2:a1:55:de:13:26:92:19:4e:d4:4b:1e:
         ca:59:4a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:58 2024 by rpki-client on console-fra.rpki-client.org