Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133342e302f32342d3234203d3e20323731303031.roa
File:                     3137372e3232332e3133342e302f32342d3234203d3e20323731303031.roa (raw, json)
Hash identifier:          yvMXHJie3kIoF+aMT068X7C6fCtbC3oZ5IgOgGZDm/M=
Subject key identifier:   AA:2C:7E:D8:0E:AB:F4:3D:03:5D:83:BF:C7:45:44:91:FE:6F:AC:BF
Certificate issuer:       /CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
Certificate serial:       47595F0554714B82E78B034B70A19602A728B147
Authority key identifier: A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133342e302f32342d3234203d3e20323731303031.roa
Signing time:             Thu 16 Nov 2023 17:54:18 +0000
ROA not before:           Thu 16 Nov 2023 17:49:18 +0000
ROA not after:            Thu 14 Nov 2024 17:54:18 +0000
asID:                     271001
IP address blocks:        177.223.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:59:5f:05:54:71:4b:82:e7:8b:03:4b:70:a1:96:02:a7:28:b1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
        Validity
            Not Before: Nov 16 17:49:18 2023 GMT
            Not After : Nov 14 17:54:18 2024 GMT
        Subject: CN=AA2C7ED80EABF43D035D83BFC7454491FE6FACBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:02:4d:c3:e4:17:0f:6a:ec:b4:62:5f:d3:58:
                    e2:b3:e6:1c:55:ab:95:ba:7d:09:9e:12:81:4a:88:
                    f0:b5:31:f8:83:83:71:b2:6f:70:b8:6a:38:ec:38:
                    50:3a:9c:8f:bd:cd:d7:df:01:04:80:71:44:c4:3c:
                    e7:80:f9:27:03:3b:f4:44:36:5c:e5:01:58:3f:7b:
                    41:b1:20:98:d9:e0:a7:a9:a1:eb:22:26:55:e4:1c:
                    3f:87:18:6b:c2:66:38:82:eb:9e:e1:f8:f6:33:77:
                    42:33:c7:b0:74:21:8b:43:fa:fe:ba:44:c4:83:11:
                    b5:1e:54:ba:67:c0:d0:a5:02:02:91:ca:ee:64:c0:
                    85:0a:ce:56:09:17:bc:8a:b9:0f:d5:cd:5d:60:21:
                    e0:d7:58:f0:46:dc:82:1b:ff:51:c1:01:59:09:52:
                    64:30:19:8a:f9:cc:4a:80:6e:e0:cb:ed:10:f7:91:
                    4b:de:c5:9f:98:71:41:c4:ea:7b:9c:9d:dc:b1:38:
                    46:d0:82:e2:ab:56:07:0d:3b:be:23:ee:36:2d:49:
                    dc:7a:d0:72:c0:5d:3e:72:3b:01:d0:61:94:51:8c:
                    bd:ce:c2:fa:2d:ae:ed:56:f1:be:55:77:0a:e3:57:
                    57:06:b9:21:44:1e:2e:6a:4e:ae:01:3f:46:18:47:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2C:7E:D8:0E:AB:F4:3D:03:5D:83:BF:C7:45:44:91:FE:6F:AC:BF
            X509v3 Authority Key Identifier:
                keyid:A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133342e302f32342d3234203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:92:ea:d5:87:96:6e:72:69:10:af:9b:18:83:20:ac:2c:28:
         ab:fd:2c:83:57:f8:a7:42:40:dd:2a:e1:51:4a:cd:97:ff:fe:
         9f:be:f8:a2:5d:cf:03:82:68:55:76:33:ac:4e:f8:82:b8:c3:
         81:d4:50:93:94:77:fe:68:3c:30:f0:e2:a9:94:da:12:f1:88:
         bc:72:e8:38:d6:ce:19:56:c3:b2:5f:da:1a:df:0a:72:71:64:
         89:a4:7d:09:e0:c9:a1:43:9e:c6:48:a0:bb:9e:d4:9d:8f:54:
         0f:ca:f2:52:46:f3:b2:7c:4f:11:42:c2:bd:f5:bc:e1:b0:52:
         28:94:e8:98:84:86:e3:5a:5e:37:d2:28:8a:23:e6:e8:cb:f9:
         2f:36:93:5b:b5:86:00:bc:14:d6:0a:f8:c2:60:14:bd:23:98:
         1d:7d:92:38:bf:f8:27:29:26:fe:1f:c1:c4:23:0a:cd:a7:af:
         10:9f:8a:b9:df:c1:1f:44:27:9d:da:71:0d:0a:b2:d3:9c:ff:
         5e:f7:fa:9d:d2:7d:c2:97:88:db:20:4c:79:35:ef:c4:19:94:
         1b:b7:97:e1:8a:a2:aa:33:e5:72:b1:e2:53:56:0d:b3:bb:a4:
         9c:9f:25:43:5f:88:2f:fd:20:69:13:a8:25:66:57:60:01:8c:
         21:05:30:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org