Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32322d3232203d3e203532383733.roa
File:                     3137372e3132382e3230382e302f32322d3232203d3e203532383733.roa (raw, json)
Hash identifier:          4N+E6RjtzeI9/AiX7FO911NSHRY7tNN5vXvfXjrqON0=
Subject key identifier:   2C:17:BD:B9:FE:C4:6C:2E:5F:EA:05:99:17:CA:ED:5A:5C:A7:5D:A9
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       32481FF8E780C93B060AB89A20109C2F7C2DA91C
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32322d3232203d3e203532383733.roa
Signing time:             Sat 27 Jan 2024 23:10:41 +0000
ROA not before:           Sat 27 Jan 2024 23:05:41 +0000
ROA not after:            Sat 25 Jan 2025 23:10:41 +0000
asID:                     52873
IP address blocks:        177.128.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:48:1f:f8:e7:80:c9:3b:06:0a:b8:9a:20:10:9c:2f:7c:2d:a9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 27 23:05:41 2024 GMT
            Not After : Jan 25 23:10:41 2025 GMT
        Subject: CN=2C17BDB9FEC46C2E5FEA059917CAED5A5CA75DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:6c:6b:57:72:b0:2d:0b:01:a5:77:a7:f9:
                    80:28:be:8c:4e:6e:9f:7c:c4:42:b8:1f:62:4c:80:
                    43:ee:62:11:b2:3d:ab:13:1c:41:25:1c:00:f5:86:
                    7b:a8:79:92:d6:ae:77:4e:8a:78:d7:42:db:05:89:
                    d8:b3:39:26:33:0d:e3:30:1e:45:5a:38:30:8e:91:
                    f7:5f:8d:7e:cf:f0:3b:07:e4:bf:f3:ba:7d:8d:25:
                    5e:68:e3:a6:55:cc:c7:3b:db:4a:9e:94:b7:d6:5a:
                    d3:60:71:f3:07:e8:fe:d4:56:e3:b2:8e:a5:c1:75:
                    8a:fb:6b:78:43:88:48:42:87:22:bb:f5:3e:34:ca:
                    fc:c5:c2:32:b3:ff:bf:b2:8b:6f:43:4f:b5:2f:35:
                    c6:6a:0e:b9:db:a2:c7:75:32:4b:ef:c7:43:63:37:
                    e9:43:51:11:b3:53:56:59:3a:b8:20:aa:80:cf:e1:
                    cd:af:a8:86:92:63:98:05:1a:8a:6a:d2:ed:23:bc:
                    78:56:1b:70:ec:92:55:c2:04:a5:ae:93:c1:fe:57:
                    43:8f:48:6d:52:85:0a:a7:ca:c5:fd:4c:a7:12:5d:
                    a8:7f:0b:fb:2c:78:1f:86:67:4a:fe:79:85:96:c8:
                    0d:05:4b:0d:df:f4:38:78:5f:12:c4:18:31:4e:ac:
                    e6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:17:BD:B9:FE:C4:6C:2E:5F:EA:05:99:17:CA:ED:5A:5C:A7:5D:A9
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32322d3232203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:a8:75:2e:d0:c1:70:68:44:99:7f:0b:ce:10:12:c2:09:4d:
         f0:74:56:df:5d:1d:d1:70:2f:ce:47:03:f7:98:cf:69:74:1a:
         37:40:8d:2f:f7:50:d9:18:b2:14:2f:c2:07:49:5c:64:07:d9:
         27:4e:93:06:26:4c:c2:7a:14:30:5f:ce:68:6c:10:57:09:ad:
         b2:ef:3f:88:01:10:a8:43:a5:d1:63:e6:06:9b:58:c7:c9:36:
         3a:78:04:ba:b2:7e:a5:25:2b:e5:9b:90:7c:82:9c:04:e2:3e:
         7d:f8:79:4a:45:95:da:a4:32:9b:e3:37:9a:84:8b:b0:b8:42:
         e2:60:b2:e0:43:ed:08:69:34:f9:30:6c:56:df:ff:0f:fb:47:
         8e:a1:3e:9a:b6:aa:2a:06:97:ce:9a:17:28:cb:31:98:53:59:
         72:eb:7a:18:fe:1a:fa:2a:24:9a:59:71:39:e1:b9:cb:7c:8b:
         ba:64:50:cd:05:a6:c6:91:01:f2:4f:55:9f:e9:11:ef:44:1a:
         2a:bf:2c:7e:37:5b:06:56:8a:58:3d:86:e3:73:2c:f0:8e:3b:
         ad:75:f1:e4:22:08:53:e9:22:c6:c4:c8:57:ab:14:7f:08:0f:
         ae:52:cd:e5:c3:af:6e:f8:f3:3a:85:0c:47:ef:94:37:b5:11:
         ea:3e:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org