Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/3137372e38342e32302e302f32322d3234203d3e203532373135.roa
File:                     3137372e38342e32302e302f32322d3234203d3e203532373135.roa (raw, json)
Hash identifier:          E/UIScDTjTr0tgMiHUMNf0I0w/rA8Uz1rV077gZhPso=
Subject key identifier:   4A:56:3F:2F:FA:86:03:1D:45:45:CC:F0:E2:72:4D:B8:B4:34:7D:31
Certificate issuer:       /CN=7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68
Certificate serial:       7A020735F3ED004F6130F5BA306949E8B13A8E00
Authority key identifier: 7B:B4:17:4D:23:14:B9:F7:4F:7F:2E:3D:2C:18:9C:F2:D3:64:3E:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/3137372e38342e32302e302f32322d3234203d3e203532373135.roa
Signing time:             Wed 24 Jan 2024 12:39:55 +0000
ROA not before:           Wed 24 Jan 2024 12:34:55 +0000
ROA not after:            Wed 22 Jan 2025 12:39:55 +0000
asID:                     52715
IP address blocks:        177.84.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:02:07:35:f3:ed:00:4f:61:30:f5:ba:30:69:49:e8:b1:3a:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68
        Validity
            Not Before: Jan 24 12:34:55 2024 GMT
            Not After : Jan 22 12:39:55 2025 GMT
        Subject: CN=4A563F2FFA86031D4545CCF0E2724DB8B4347D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:cb:1f:c0:76:ce:14:47:19:52:bf:4d:98:
                    49:19:0f:7b:2c:b8:de:6a:0b:a5:1e:c2:f7:79:83:
                    9d:21:9d:31:10:09:69:4b:b8:6d:b3:36:cd:16:02:
                    c8:40:29:92:2f:d3:3e:98:03:86:cb:68:1a:71:22:
                    fe:c5:b3:28:18:6f:b1:bb:ae:46:d8:5c:8a:20:80:
                    9a:81:26:42:74:18:cc:66:d1:dd:ed:8e:96:77:73:
                    45:42:72:3d:64:f8:3d:de:ec:5e:85:48:41:71:8d:
                    7b:d5:b8:f2:5b:a7:f5:a4:53:e4:72:73:83:7f:96:
                    98:ec:bc:49:4d:57:df:f0:0e:10:38:7f:a9:a8:28:
                    aa:3f:8b:c3:e9:e6:66:81:a3:ac:2c:ef:99:24:a8:
                    43:8b:f0:68:33:c7:1d:cd:ce:c7:20:b4:6a:77:63:
                    18:e4:06:3a:63:1b:e4:37:42:f0:74:bc:a0:58:19:
                    4d:01:4c:94:58:b9:9f:1f:9a:46:51:22:d8:64:de:
                    cc:01:7e:ef:14:9b:a5:2b:84:ac:fb:21:4d:df:3c:
                    4e:04:ac:9e:81:ec:25:15:ed:fc:45:91:84:9e:e1:
                    19:ca:93:9a:28:0e:58:de:b4:8e:40:1c:d1:56:fc:
                    52:b9:bc:02:ee:de:f4:c6:2e:92:7a:19:6f:12:04:
                    d6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:56:3F:2F:FA:86:03:1D:45:45:CC:F0:E2:72:4D:B8:B4:34:7D:31
            X509v3 Authority Key Identifier:
                keyid:7B:B4:17:4D:23:14:B9:F7:4F:7F:2E:3D:2C:18:9C:F2:D3:64:3E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BB4174D2314B9F74F7F2E3D2C189CF2D3643E68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/3137372e38342e32302e302f32322d3234203d3e203532373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:ac:77:1a:52:a5:2a:1f:4c:91:a5:12:ef:02:f2:03:17:a4:
         9a:59:ff:9c:23:44:1e:3a:63:3c:16:8b:76:e9:eb:ba:20:12:
         33:08:3f:72:7c:1a:ad:63:de:ab:4c:1c:32:6d:3b:72:57:6d:
         6b:5c:c5:6a:2d:98:67:d1:26:a7:f7:d8:bb:5f:ed:05:b0:d2:
         82:aa:33:82:a6:de:e5:90:ec:2c:23:4b:92:cb:b7:82:b7:4b:
         0e:0e:fd:1e:d9:30:19:71:f1:2f:f1:2c:99:1f:6f:4a:83:8c:
         4f:bd:95:79:c1:63:3a:56:b2:af:6a:f5:cb:01:cc:99:25:fa:
         17:30:a0:01:e6:97:7d:37:25:66:ba:7c:a7:13:71:95:55:75:
         ab:57:d4:b4:04:3d:a7:b0:89:36:4c:ef:91:0e:ca:2f:72:34:
         cc:e6:65:fd:f0:43:91:5b:64:ef:e1:99:1c:0b:f2:99:d9:63:
         18:bd:2a:81:5b:c8:ec:9d:3d:5e:a5:bb:94:69:c0:cc:e3:7a:
         42:53:df:04:34:0b:a6:86:81:4f:cc:75:6a:54:98:bd:66:1a:
         a9:f8:96:92:d9:be:f3:a0:5a:29:76:6f:55:bb:63:d6:06:42:
         0b:91:3a:1f:11:45:40:1b:0e:70:95:1a:0e:64:34:e2:f9:74:
         de:5d:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org