Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133322e302f32332d3233203d3e20323731303031.roa
File:                     3137372e3232332e3133322e302f32332d3233203d3e20323731303031.roa (raw, json)
Hash identifier:          WfTRWVMi6pN2+Tfow5BgssDmyhBqBppP+Zn5cW20MDg=
Subject key identifier:   24:4D:B2:93:9B:63:5E:B1:1E:90:57:27:C8:B5:2C:65:9A:6C:B7:A5
Certificate issuer:       /CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
Certificate serial:       2C9FFFA277C3EC9F85E71B3C4C39CFC4EBFEB942
Authority key identifier: A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133322e302f32332d3233203d3e20323731303031.roa
Signing time:             Thu 16 Nov 2023 17:54:18 +0000
ROA not before:           Thu 16 Nov 2023 17:49:18 +0000
ROA not after:            Thu 14 Nov 2024 17:54:18 +0000
asID:                     271001
IP address blocks:        177.223.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9f:ff:a2:77:c3:ec:9f:85:e7:1b:3c:4c:39:cf:c4:eb:fe:b9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
        Validity
            Not Before: Nov 16 17:49:18 2023 GMT
            Not After : Nov 14 17:54:18 2024 GMT
        Subject: CN=244DB2939B635EB11E905727C8B52C659A6CB7A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:01:3c:92:88:cb:e3:16:4d:73:40:11:48:
                    fa:e1:99:bb:ab:4f:45:8a:6b:fb:29:cd:46:da:c0:
                    ed:5f:cc:15:e4:a3:ea:3f:be:65:7f:98:35:8b:cb:
                    c2:a3:69:1c:27:7f:c4:d4:ab:3a:41:51:0e:6a:06:
                    e4:f0:b1:ea:28:d9:08:86:da:41:9e:34:2c:b0:a8:
                    9a:59:46:32:22:69:e9:5e:2d:7e:20:80:9c:3b:5e:
                    ee:87:83:23:f8:c3:29:df:cc:e5:66:a3:bd:7f:51:
                    7c:ee:c2:3a:b8:d5:96:3d:75:d8:c1:20:a7:7e:a5:
                    24:13:5b:82:50:58:5c:46:65:6a:74:65:99:7c:f0:
                    57:28:9f:9b:43:b6:4a:98:4e:70:32:f2:67:ed:bd:
                    bd:2f:d1:02:62:8f:50:e3:49:14:4a:97:6b:14:e1:
                    5a:b5:08:8c:cb:29:0f:a2:a8:5e:c2:fa:fc:5b:89:
                    ba:51:be:b5:30:00:cc:63:c6:f1:a2:b4:94:40:ce:
                    b8:33:93:9c:75:3d:39:a5:d8:25:23:89:a7:4e:6e:
                    69:94:c9:2d:1a:e1:be:70:6c:2a:05:52:5f:ab:82:
                    e9:6f:a1:1d:b8:d8:44:12:80:14:94:30:46:64:be:
                    6b:92:88:2d:06:09:2c:f4:e6:ef:0e:0f:d4:21:4a:
                    1b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4D:B2:93:9B:63:5E:B1:1E:90:57:27:C8:B5:2C:65:9A:6C:B7:A5
            X509v3 Authority Key Identifier:
                keyid:A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133322e302f32332d3233203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:02:b0:04:e8:31:44:61:a7:72:d8:e6:53:4a:ce:cc:0b:ff:
         11:f1:1e:2a:38:f1:30:8e:c3:ba:11:1e:68:1f:f0:ca:ae:21:
         6b:dc:16:34:29:11:e4:0a:0c:6d:a2:60:f8:a2:83:ec:00:db:
         84:1c:a7:15:bb:a0:06:15:12:61:65:a6:fe:10:34:a3:b0:2a:
         b3:5f:11:ac:48:e4:c0:f4:57:a9:51:25:c9:6c:e1:67:c5:2d:
         b0:e7:f6:8e:3b:98:b9:1b:e7:f8:79:65:aa:dd:97:37:ec:06:
         a7:0c:21:5c:39:c4:db:73:0f:31:f8:46:d3:99:b4:4d:c6:b5:
         70:54:76:97:6e:06:c3:73:83:90:3f:9e:e6:a7:66:56:4d:df:
         c9:98:cf:34:ab:40:f5:76:9e:ce:75:da:ff:c5:7a:cf:c2:aa:
         bb:4e:2d:c1:1c:90:e2:e6:b0:70:09:23:07:a4:c8:05:16:2d:
         84:5e:fb:60:b7:c4:c8:50:96:64:03:f0:88:8e:d8:49:81:68:
         95:1f:17:4c:c7:d7:fa:ca:1f:c6:35:4c:42:08:55:6e:88:4b:
         5d:86:3a:7c:24:72:27:e7:4e:fa:b4:b1:00:64:89:ae:56:69:
         5b:a6:05:62:02:3b:78:97:5a:6d:84:1c:51:c3:46:1e:3a:5b:
         45:42:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org