Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/3137372e38372e34342e302f32322d3234203d3e203532353839.roa
File:                     3137372e38372e34342e302f32322d3234203d3e203532353839.roa (raw, json)
Hash identifier:          oQIWCyYtoohvc0pQejAbhYqaEEuFvUg+k0pnd5ewA0k=
Subject key identifier:   08:02:84:8E:D6:E1:E6:6F:90:20:5F:02:07:4D:67:DD:DD:6B:A2:61
Certificate issuer:       /CN=7D6D4B0ED16D14A94AC98715751FA685F25D5E15
Certificate serial:       793DD86573A1C3DC20992975A43945B986D1CF00
Authority key identifier: 7D:6D:4B:0E:D1:6D:14:A9:4A:C9:87:15:75:1F:A6:85:F2:5D:5E:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/3137372e38372e34342e302f32322d3234203d3e203532353839.roa
Signing time:             Fri 17 Nov 2023 18:15:00 +0000
ROA not before:           Fri 17 Nov 2023 18:10:00 +0000
ROA not after:            Fri 15 Nov 2024 18:15:00 +0000
asID:                     52589
IP address blocks:        177.87.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3d:d8:65:73:a1:c3:dc:20:99:29:75:a4:39:45:b9:86:d1:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D6D4B0ED16D14A94AC98715751FA685F25D5E15
        Validity
            Not Before: Nov 17 18:10:00 2023 GMT
            Not After : Nov 15 18:15:00 2024 GMT
        Subject: CN=0802848ED6E1E66F90205F02074D67DDDD6BA261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:9a:5f:a1:f7:3d:fd:de:cc:fd:22:c5:67:
                    54:68:b6:dd:c6:b3:2b:a2:52:8e:74:2b:9f:ba:d0:
                    ad:9b:75:4a:0a:fd:58:9a:3e:7c:fd:d4:58:a3:6f:
                    d5:4d:29:2a:ad:d2:d7:9a:c7:83:d8:eb:aa:54:34:
                    ce:12:6d:52:5c:de:e4:9e:36:3d:e4:80:59:ec:2b:
                    21:3f:cb:a9:43:fe:c7:02:52:e6:8c:e4:62:db:c8:
                    d2:dd:94:cb:e9:73:98:97:92:e2:51:a5:5f:9c:83:
                    d4:a4:a1:89:e8:f1:36:9f:5b:7c:54:d9:16:18:3f:
                    9c:0d:b5:7a:c0:35:2c:2b:30:c5:3d:68:cd:b0:a2:
                    6c:77:c2:0f:3a:88:1e:51:d8:40:c5:6e:61:cf:a9:
                    36:a1:e1:a7:0c:a9:10:62:d5:b3:cd:80:d5:59:0a:
                    77:8d:83:e4:f5:9d:e1:fc:e8:49:cc:e6:1d:2d:da:
                    0f:43:d4:36:f2:ef:f8:fc:5a:36:66:6c:ac:4e:86:
                    6a:d2:cc:97:56:5c:6e:37:6c:be:61:2d:92:50:74:
                    25:a0:87:55:d0:9e:33:5f:e7:51:b2:ed:4d:b7:69:
                    90:9a:92:04:56:a0:b2:33:73:1e:35:b1:7e:17:d4:
                    80:09:85:67:55:6c:a9:91:b7:68:8f:e6:fa:64:6c:
                    39:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:02:84:8E:D6:E1:E6:6F:90:20:5F:02:07:4D:67:DD:DD:6B:A2:61
            X509v3 Authority Key Identifier:
                keyid:7D:6D:4B:0E:D1:6D:14:A9:4A:C9:87:15:75:1F:A6:85:F2:5D:5E:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D6D4B0ED16D14A94AC98715751FA685F25D5E15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/3137372e38372e34342e302f32322d3234203d3e203532353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:4e:8c:e4:15:80:18:35:de:e8:72:9d:a9:df:aa:26:9b:c4:
         d4:c6:fe:5b:cb:54:e4:c8:6f:ba:9f:48:cf:c7:c9:bb:1b:ff:
         14:1a:23:f9:60:f1:15:5d:02:3f:66:bd:11:c3:74:be:87:a0:
         81:3f:e0:07:f7:50:46:e8:ba:0d:e5:02:19:70:1c:74:e5:b4:
         a5:86:45:4c:b5:d6:96:fb:ca:f8:14:ff:40:aa:3c:73:b9:f0:
         5b:3c:94:8a:07:69:a3:77:7a:29:d3:12:7f:fa:54:ff:9a:e9:
         69:5e:4f:10:f8:4b:28:d2:1c:df:23:4b:30:93:fe:51:d2:b7:
         df:73:65:cf:05:0d:19:61:ab:f6:c7:2f:9d:51:d8:ac:a1:7c:
         4f:fa:3c:65:56:59:43:1a:e1:08:bb:30:2a:ed:dc:15:a8:92:
         b3:a6:52:95:66:f6:da:a2:a3:ab:21:b7:3c:0e:54:08:df:81:
         8f:2b:84:05:ac:3a:a9:99:40:7b:ef:0a:f1:6f:a7:5b:bb:ef:
         d1:f3:25:14:64:56:57:1b:22:46:45:c8:8d:8a:21:63:f4:7d:
         6b:42:8a:f8:fd:d9:0c:e4:c8:c9:0e:f8:72:8e:0c:e8:c1:d1:
         91:69:e1:81:10:b4:57:9f:ca:d0:35:8d:95:85:61:cd:d0:e7:
         09:06:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org