Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3137372e31302e32302e302f32342d3234203d3e203532393136.roa
File:                     3137372e31302e32302e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          pZbSEcRZkt3CInszyez56Bb5vBydG11ojWkhAoZcxv4=
Subject key identifier:   4E:55:D3:FB:22:7A:BA:1F:43:DB:C0:FE:AC:F5:F6:0E:5E:77:52:FE
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       7F07287E441E12A7018AD95C4636EF26DEC27CE5
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3137372e31302e32302e302f32342d3234203d3e203532393136.roa
Signing time:             Sun 09 Jul 2023 01:08:42 +0000
ROA not before:           Sun 09 Jul 2023 01:03:42 +0000
ROA not after:            Sun 07 Jul 2024 01:08:42 +0000
asID:                     52916
IP address blocks:        177.10.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:07:28:7e:44:1e:12:a7:01:8a:d9:5c:46:36:ef:26:de:c2:7c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Jul  9 01:03:42 2023 GMT
            Not After : Jul  7 01:08:42 2024 GMT
        Subject: CN=4E55D3FB227ABA1F43DBC0FEACF5F60E5E7752FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:f8:84:b6:7f:41:f3:b6:27:29:7a:6e:7a:
                    c3:ca:c7:c9:22:d0:f9:df:dd:88:21:5b:8b:37:c7:
                    20:c1:7e:6e:c7:db:d9:b0:b9:4d:41:f8:10:7b:9f:
                    65:e6:1b:59:e1:ea:28:a2:ca:bd:20:07:23:a0:de:
                    b8:83:e9:81:d1:3b:b4:16:8a:c7:cc:31:3c:f9:e2:
                    2b:0b:3a:b6:c0:b6:08:ce:aa:8a:3b:34:f3:1f:4c:
                    ce:42:32:97:74:81:97:1e:b9:c0:d1:c1:cf:b7:9c:
                    7c:c9:6e:f4:3f:b9:45:db:05:8a:23:38:a7:72:ca:
                    ae:56:af:dc:12:42:a9:8c:c1:c3:e7:84:88:f0:ca:
                    fb:d5:62:d1:00:34:c1:94:83:fc:09:97:71:8f:61:
                    4d:b4:a3:d2:a8:55:78:b6:f3:48:37:9e:e4:2e:75:
                    8a:0f:82:a2:43:53:a3:a6:3e:98:b1:00:f0:2b:23:
                    54:d4:56:82:db:2a:9e:38:d0:ac:29:89:e2:0a:4d:
                    09:da:21:bf:f5:f2:50:12:66:7e:1d:c8:de:5d:af:
                    4f:29:b9:8c:b4:3e:fe:93:a1:2d:a8:c0:df:a1:2c:
                    c7:c8:da:ac:0d:9c:74:c4:b7:fb:91:e5:ad:f1:9a:
                    75:1e:0f:53:f1:e2:0d:94:43:24:ae:dc:c3:2a:98:
                    8d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:55:D3:FB:22:7A:BA:1F:43:DB:C0:FE:AC:F5:F6:0E:5E:77:52:FE
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3137372e31302e32302e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:e0:4e:f6:38:4c:79:b5:0a:cf:3c:7e:51:3f:6c:8d:a0:5a:
         81:f5:3a:e7:61:55:32:6c:6f:d9:9f:38:60:5e:ab:a6:b0:ee:
         6c:4a:e2:76:e7:d0:46:6d:b6:58:5a:bc:31:62:26:3b:52:9f:
         2f:87:bc:8d:4b:8f:e4:ae:94:2d:14:9d:31:51:21:53:df:1f:
         06:b3:e6:88:0a:c5:e2:d2:11:7a:73:79:78:aa:51:89:dc:9a:
         09:2f:57:90:0b:7d:69:da:81:44:b5:7d:f2:a2:0a:cf:2b:51:
         f6:c7:c0:23:05:ac:ca:41:64:ea:1b:4f:c7:58:1c:92:b6:dc:
         36:d8:9c:34:45:b3:ac:5c:4e:a4:7e:3c:4c:35:bd:db:bc:93:
         ca:73:35:40:38:d5:b3:0b:a5:1f:41:bc:fe:cf:9f:d9:7b:be:
         38:3a:54:74:3b:bd:7c:03:a9:a5:77:9c:8a:f2:49:64:87:9b:
         a6:7c:72:8c:fa:d5:f9:88:de:1d:7a:e9:ee:84:aa:20:bb:0d:
         35:59:1f:67:27:ff:7c:a3:69:a0:1f:ea:08:10:d1:b8:56:c8:
         22:86:1e:d8:d6:74:ae:c1:f8:2b:b0:4c:ce:7b:27:7c:c3:46:
         14:64:2b:a8:cf:89:31:26:a5:1a:81:e3:78:8d:f7:7e:da:19:
         70:02:ed:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org