Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/0/3137372e39322e3134342e302f32312d3234203d3e20323633313230.roa
File:                     3137372e39322e3134342e302f32312d3234203d3e20323633313230.roa (raw, json)
Hash identifier:          k64NxInsE6FyUzhbAktID7fS07gcl4++2krm92BYRpo=
Subject key identifier:   2B:5F:81:87:F4:F1:64:48:28:78:45:28:86:85:C5:7A:7B:B5:F2:D7
Certificate issuer:       /CN=A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5
Certificate serial:       18334775156C35CC005AD2CC4268AF046721B1E9
Authority key identifier: A4:A2:8C:FE:B5:0F:C9:3F:90:5F:F9:7F:3B:8E:3F:A4:F8:B6:F4:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/0/3137372e39322e3134342e302f32312d3234203d3e20323633313230.roa
Signing time:             Tue 10 Oct 2023 21:00:03 +0000
ROA not before:           Tue 10 Oct 2023 20:55:03 +0000
ROA not after:            Tue 08 Oct 2024 21:00:03 +0000
asID:                     263120
IP address blocks:        177.92.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:33:47:75:15:6c:35:cc:00:5a:d2:cc:42:68:af:04:67:21:b1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5
        Validity
            Not Before: Oct 10 20:55:03 2023 GMT
            Not After : Oct  8 21:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:31:84:79:82:45:3d:1b:58:5a:c3:11:39:
                    37:d8:a2:66:24:5d:01:88:fa:15:c3:b3:cd:23:c1:
                    3a:c0:be:4c:42:a3:ce:df:32:d8:b0:24:5c:1b:96:
                    bc:e5:5d:78:32:85:cd:f9:e7:98:e3:93:e5:cc:23:
                    ac:18:d2:88:93:21:f8:12:c9:9c:f6:bf:2d:52:77:
                    fe:dc:22:ad:90:93:07:98:8c:e1:84:02:4b:03:bf:
                    0c:90:d3:c0:29:a1:b7:06:3e:3d:fd:24:ab:95:eb:
                    5e:41:5e:02:16:3a:a4:5c:18:d2:78:7d:58:af:51:
                    8d:b9:c8:71:eb:c0:21:9c:64:b9:71:5b:39:e0:07:
                    07:0e:56:8b:e6:5c:24:a7:3a:4e:9e:12:1e:9a:c2:
                    84:7b:cc:d7:59:92:57:90:01:b2:41:c8:3a:9a:ac:
                    8e:2c:25:f2:36:14:2b:a6:5f:66:95:7e:e5:05:df:
                    f6:e0:33:ec:49:d2:b4:55:38:28:7e:2b:5d:4c:7e:
                    15:db:30:93:fe:57:8e:45:cf:62:f5:ca:4c:a9:fc:
                    c2:71:64:88:9a:45:0f:fb:2f:1c:35:16:02:49:69:
                    a1:c2:e2:da:aa:00:b1:9b:3c:18:58:22:1e:81:9c:
                    5a:bd:b7:c5:10:a9:91:7f:ae:d4:a6:e7:b4:51:29:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5F:81:87:F4:F1:64:48:28:78:45:28:86:85:C5:7A:7B:B5:F2:D7
            X509v3 Authority Key Identifier:
                keyid:A4:A2:8C:FE:B5:0F:C9:3F:90:5F:F9:7F:3B:8E:3F:A4:F8:B6:F4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/0/A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4A28CFEB50FC93F905FF97F3B8E3FA4F8B6F4A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/0/3137372e39322e3134342e302f32312d3234203d3e20323633313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:16:39:eb:ba:f8:16:52:3a:c4:71:1c:bd:76:e4:3b:5e:
         de:af:2c:23:31:92:ac:50:4a:e1:0a:57:14:dd:79:43:eb:73:
         34:6a:87:f6:ba:8b:77:c5:a3:34:6a:8b:8c:c7:e5:4f:85:63:
         5c:e3:60:0d:20:6b:bc:89:66:e8:cb:a2:f2:5a:cc:03:e3:e3:
         bd:06:00:e0:4d:c2:3c:24:3b:11:ce:01:bf:d1:b8:62:52:a8:
         37:dc:93:33:03:d7:5f:37:c1:88:04:ac:87:65:e3:f8:1c:f1:
         76:35:28:29:13:3e:53:e5:0f:7f:0c:83:41:a3:1d:4e:25:68:
         4d:57:6b:bc:16:e2:df:9d:62:e8:6f:3d:2f:25:9f:58:27:9e:
         4e:ba:9a:37:d6:e3:fd:2d:32:70:34:91:59:5c:55:df:e2:b2:
         2c:76:da:df:3a:8c:80:68:89:20:96:91:7b:f8:fd:a4:c5:92:
         32:65:ad:be:d1:5a:29:5f:6c:1b:f4:e9:94:b7:cc:a8:81:d3:
         e1:81:4f:0c:cb:9b:c7:83:3d:5b:17:06:cd:7d:01:dd:0e:f9:
         95:84:44:15:50:59:92:af:42:b3:67:23:09:e6:45:6e:6b:b0:
         dd:a2:ac:12:f7:f8:c6:b6:6a:89:2d:50:20:59:38:a4:c5:2e:
         57:53:ca:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org