Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137372e3132352e3137302e302f32332d3233203d3e203532363133.roa
File:                     3137372e3132352e3137302e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          2ESkiKQhH9pD+fAgJEmQulaAnufB6IMSigmrHX2JY0k=
Subject key identifier:   33:39:01:F4:1D:E7:D6:01:5B:4B:17:8C:91:66:43:A8:B9:3A:8F:03
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       106C96A83A390CC1794102C1331253D05CE10B81
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137372e3132352e3137302e302f32332d3233203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:52:00 +0000
ROA not before:           Wed 06 Mar 2024 14:47:00 +0000
ROA not after:            Wed 05 Mar 2025 14:52:00 +0000
asID:                     52613
IP address blocks:        177.125.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6c:96:a8:3a:39:0c:c1:79:41:02:c1:33:12:53:d0:5c:e1:0b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:47:00 2024 GMT
            Not After : Mar  5 14:52:00 2025 GMT
        Subject: CN=333901F41DE7D6015B4B178C916643A8B93A8F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a9:4d:b0:bf:84:77:99:b4:0d:14:b9:c6:1e:
                    78:95:ea:75:e9:8e:94:ef:0d:ab:64:ef:6e:a4:c3:
                    8c:6e:7a:9d:8b:7e:1b:09:b9:49:6d:9e:16:7b:3a:
                    59:f2:b1:59:09:94:74:a3:52:7f:26:b5:cd:6f:1a:
                    4c:75:f0:4c:c2:19:e4:16:ea:f6:52:bb:5a:c5:95:
                    04:87:e0:4a:1d:48:56:36:d4:29:88:81:ff:0c:d1:
                    ea:af:85:03:9e:86:64:fc:f0:58:cc:c5:98:b8:ff:
                    f2:c3:2c:c3:51:e7:ce:fd:ce:f2:76:45:81:51:9f:
                    47:71:50:4b:fa:41:57:01:1d:bc:33:55:59:58:2d:
                    5f:de:3a:83:43:da:ba:cc:7e:2d:28:9c:e8:0b:c5:
                    e4:c3:56:ba:2a:25:8f:21:04:b2:0e:6d:f9:61:96:
                    e7:05:7d:1c:52:a7:78:49:39:16:1d:09:31:a4:46:
                    dd:dd:87:dd:d8:26:6f:6f:2e:be:f5:e5:47:af:67:
                    45:35:b5:0f:70:70:c1:41:25:93:45:69:d3:0a:32:
                    bc:7e:7b:03:8f:93:0c:b7:59:fb:79:4f:ef:7d:7f:
                    17:d9:a5:b7:73:5d:77:04:8a:2e:61:72:b7:f8:61:
                    9e:7a:ab:38:05:26:95:a2:ef:29:19:8e:24:fc:e5:
                    db:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:39:01:F4:1D:E7:D6:01:5B:4B:17:8C:91:66:43:A8:B9:3A:8F:03
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137372e3132352e3137302e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:76:73:b7:94:a6:ac:db:ed:e3:52:66:56:03:34:7f:11:18:
         8f:48:5a:fb:53:9a:85:9a:a1:49:dd:a0:17:e0:77:e6:e1:3b:
         3b:1a:57:21:bd:ad:02:6f:09:d2:09:8b:7e:17:10:89:cb:a2:
         c4:73:a5:80:a5:9d:de:8e:3e:a2:87:53:08:e1:0b:f1:da:6c:
         a1:9d:a8:3e:80:7e:5d:c5:04:d1:22:9a:63:23:8d:0c:03:f3:
         96:5b:e0:c4:be:87:8e:97:59:b5:59:0e:c4:08:66:0d:39:34:
         33:09:c0:0e:c3:42:f2:49:d5:14:e9:86:b4:28:28:a4:2e:ec:
         29:b4:7b:3e:a2:84:0e:4c:f0:85:62:ef:f8:a2:40:fd:64:45:
         c3:5e:1e:b3:44:b2:1b:18:bf:eb:7f:e2:72:c3:8d:65:89:ef:
         b0:c8:7f:ce:46:5c:41:49:11:73:2e:cb:90:c8:37:88:95:5a:
         c9:1d:6d:e7:ff:ab:e0:40:62:05:8d:95:c0:70:08:7c:29:36:
         07:57:ce:0e:0f:05:8f:a5:2c:43:0f:4b:1d:f3:4b:8d:8e:51:
         69:18:b2:85:13:aa:ca:66:34:0d:a5:87:8c:29:e6:18:ea:0e:
         2e:88:ae:9a:33:4f:3b:47:1c:a4:5c:f2:b5:bd:27:85:85:12:
         e7:ba:b7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org