Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32332d3233203d3e20323632363137.roa
File:                     3137372e38352e3233322e302f32332d3233203d3e20323632363137.roa (raw, json)
Hash identifier:          JS5SAgiqQSd7Ptz63CezvEx2ira4RO4ixzIlnl/zVQQ=
Subject key identifier:   EC:D4:4F:C5:CB:29:12:E2:4E:7D:A8:03:03:30:14:1A:FE:EB:9D:93
Certificate issuer:       /CN=A29A661923968BDFB1DCB02A45952175689C9AE9
Certificate serial:       6FAB731E41A61321082760994386D2FEE7DBB978
Authority key identifier: A2:9A:66:19:23:96:8B:DF:B1:DC:B0:2A:45:95:21:75:68:9C:9A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A29A661923968BDFB1DCB02A45952175689C9AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32332d3233203d3e20323632363137.roa
Signing time:             Wed 18 Jan 2023 17:49:38 +0000
ROA not before:           Wed 18 Jan 2023 17:44:38 +0000
ROA not after:            Wed 17 Jan 2024 17:49:38 +0000
asID:                     262617
IP address blocks:        177.85.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ab:73:1e:41:a6:13:21:08:27:60:99:43:86:d2:fe:e7:db:b9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A29A661923968BDFB1DCB02A45952175689C9AE9
        Validity
            Not Before: Jan 18 17:44:38 2023 GMT
            Not After : Jan 17 17:49:38 2024 GMT
        Subject: CN=ECD44FC5CB2912E24E7DA8030330141AFEEB9D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7b:b9:55:7e:5f:8c:da:cf:8e:60:06:83:7f:
                    1f:f7:de:f6:e4:d8:78:3c:f6:b2:14:9f:8b:5b:79:
                    45:d6:c5:a1:03:0b:0c:f9:ba:e8:c4:00:d0:2c:6b:
                    14:70:7a:81:f9:d5:24:cb:fc:d2:c7:68:9f:ec:bf:
                    53:2f:d3:c4:c9:1a:96:0b:ac:77:09:ec:e0:0a:62:
                    57:7b:2e:f7:dc:bb:4f:10:9e:b4:b6:4f:0c:61:96:
                    39:3f:11:81:34:b2:08:20:22:64:f2:46:78:80:ea:
                    ca:37:fd:55:6d:cf:63:8d:cf:10:db:2c:ed:6a:1f:
                    61:d6:17:b5:62:13:eb:6b:79:26:f4:fc:6e:d0:02:
                    9f:da:3b:93:0c:16:f4:31:83:ba:dd:2f:1c:26:d0:
                    ac:bc:18:82:d9:39:ab:ca:aa:21:8d:b1:2f:2f:90:
                    9f:34:d2:0e:07:3e:0f:f8:e0:3b:12:36:8e:19:1a:
                    aa:f6:a8:5b:ac:15:e1:d1:55:78:12:55:13:1e:24:
                    82:dd:73:39:0f:0e:43:ce:d2:64:3e:e5:87:09:d4:
                    cd:e8:b5:ab:5e:96:e4:8a:32:a7:54:77:7f:97:e9:
                    ab:d7:cf:f5:6f:04:c3:a1:64:c9:49:6e:38:b2:6d:
                    ec:e7:b9:ff:71:ac:28:c0:b7:01:dc:ff:1b:a1:1c:
                    3f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D4:4F:C5:CB:29:12:E2:4E:7D:A8:03:03:30:14:1A:FE:EB:9D:93
            X509v3 Authority Key Identifier:
                keyid:A2:9A:66:19:23:96:8B:DF:B1:DC:B0:2A:45:95:21:75:68:9C:9A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/A29A661923968BDFB1DCB02A45952175689C9AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A29A661923968BDFB1DCB02A45952175689C9AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32332d3233203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:c4:6d:84:e8:d8:5c:82:c0:12:be:f1:29:4c:73:87:f0:37:
         16:80:69:f6:1b:fe:43:c5:be:0b:e7:8e:0d:f4:8f:13:c3:6d:
         b5:ce:e0:0e:84:a3:a9:33:38:7c:cf:2e:d5:1b:bd:49:02:3c:
         bd:59:0b:4c:0d:b0:36:30:18:e7:87:9f:2d:c0:d4:21:b9:e9:
         c4:d4:ab:54:93:f4:a8:1d:a8:4f:57:18:d3:ad:af:85:03:9a:
         08:78:86:53:9a:ab:ec:01:45:5c:0b:a2:a9:6b:b6:ba:df:4b:
         68:f1:c3:28:32:0f:51:6b:a8:25:ff:9e:41:a5:a2:88:54:85:
         f7:bd:87:f9:41:4c:57:55:28:e6:7e:fa:01:11:75:22:74:59:
         fe:4e:ad:cf:4e:5f:79:2d:d6:e7:89:eb:71:85:e3:27:fc:8b:
         67:ff:29:34:a7:bf:18:1d:da:94:80:70:08:48:81:a2:b5:5a:
         26:6f:52:01:1d:6f:7e:b7:95:e1:5e:e5:bb:a1:da:aa:d3:13:
         89:bd:9b:60:7a:14:b1:37:2b:45:6d:27:31:4b:a7:73:9b:b3:
         b8:bc:19:ba:93:78:a3:6f:f0:21:83:2b:f5:5d:db:7e:db:57:
         93:27:39:b2:20:b0:c2:3a:d6:a8:6e:77:ed:7c:6d:1f:44:a4:
         bc:3c:3d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org