Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231322e302f32332d3233203d3e203532383733.roa
File:                     3137372e3132382e3231322e302f32332d3233203d3e203532383733.roa (raw, json)
Hash identifier:          0hHNBwzMLYRm1aRwWLNvb1B5V9JX1s2Vo9sFHKHCVH4=
Subject key identifier:   55:0B:61:C2:D7:FD:CB:DC:C8:A7:89:F5:F2:B1:A4:08:D7:92:9A:4C
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       7139D138449205981D8F0F028EA0200EF5BAA1F5
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231322e302f32332d3233203d3e203532383733.roa
Signing time:             Sat 27 Jan 2024 23:10:42 +0000
ROA not before:           Sat 27 Jan 2024 23:05:42 +0000
ROA not after:            Sat 25 Jan 2025 23:10:42 +0000
asID:                     52873
IP address blocks:        177.128.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:39:d1:38:44:92:05:98:1d:8f:0f:02:8e:a0:20:0e:f5:ba:a1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 27 23:05:42 2024 GMT
            Not After : Jan 25 23:10:42 2025 GMT
        Subject: CN=550B61C2D7FDCBDCC8A789F5F2B1A408D7929A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:87:d6:21:d1:47:ff:6e:19:bc:84:a8:6e:
                    2f:f6:a6:42:96:bb:2b:ef:20:4c:3e:18:fc:d0:ef:
                    8f:f2:a3:75:8b:76:c0:f6:4a:0d:f0:a2:84:28:ed:
                    cc:0f:0c:14:81:64:6b:e0:27:7a:1a:b6:55:dd:fc:
                    0b:84:5d:42:f9:bb:4d:9c:c0:0b:c4:37:b9:d6:64:
                    1b:66:a1:c7:8e:60:55:77:23:ca:62:97:f6:85:d0:
                    d9:93:2b:92:45:af:b7:8b:04:85:e4:93:01:66:e9:
                    2a:5b:6a:8a:da:2a:d3:e9:3f:28:3f:91:49:bb:e4:
                    a6:5f:2b:b4:d9:a9:a1:de:bf:50:5c:5b:58:d8:24:
                    58:fa:81:6b:3e:7e:99:85:21:47:52:8a:e5:91:4b:
                    6f:b9:4f:77:4f:02:16:d1:b2:04:0f:9a:a1:b7:6c:
                    41:5c:31:1b:e4:5d:ee:b6:4a:cc:27:03:60:1b:a4:
                    e3:09:85:49:ec:8a:2a:f6:a9:62:ef:ef:ea:1e:6f:
                    99:eb:25:d0:31:5c:eb:fa:68:c7:27:8d:67:cb:2c:
                    41:12:65:18:80:b3:ec:b2:b5:5c:63:2a:f2:fb:bd:
                    62:e5:fa:b5:ca:f1:69:7a:c7:bd:fd:cb:88:f3:22:
                    77:c6:13:03:44:bc:37:0b:2e:a6:bc:56:f4:11:ec:
                    1f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0B:61:C2:D7:FD:CB:DC:C8:A7:89:F5:F2:B1:A4:08:D7:92:9A:4C
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231322e302f32332d3233203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:dc:3b:3a:8f:86:e5:34:5d:2d:55:f3:ce:c2:f1:b3:24:da:
         9d:96:4e:88:2a:a3:33:ac:ab:e1:30:f0:8c:ff:43:45:8e:4c:
         8f:72:7e:5c:0a:26:ce:b4:82:1a:d0:fc:bf:f0:0e:5a:a0:2d:
         fa:17:41:79:6e:64:64:24:71:55:1a:05:52:23:ff:c0:7e:ba:
         34:98:aa:ab:90:40:9b:32:8f:c4:7c:ef:8e:ff:b9:ba:24:2d:
         a2:b1:31:a0:b3:64:0c:da:4a:55:1d:60:58:48:54:5f:ee:dd:
         9a:21:54:61:a0:7e:b8:c1:73:3d:18:7d:45:37:44:ae:e0:63:
         34:b2:6e:b4:21:ee:c6:f3:b6:72:9c:68:89:7a:aa:43:77:bb:
         f9:83:9a:81:a1:84:10:50:81:45:9c:d3:69:e2:b5:e5:38:83:
         4d:c4:9e:c7:0a:c2:ac:47:b4:e7:6f:8e:94:da:11:8a:bb:53:
         d3:a0:d2:34:b1:e4:cb:59:e2:07:3c:06:b6:53:be:13:c7:14:
         3c:91:f0:a9:f0:fe:7c:c1:e5:fc:c1:e2:8c:5f:d7:79:ad:4e:
         80:4a:e7:0f:2c:a4:98:7c:cc:e4:d3:e4:1c:36:93:f8:c9:41:
         f1:03:02:a8:95:d6:5e:05:fd:32:63:2a:4f:45:dd:11:0f:ec:
         cc:81:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org