Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137372e39322e36342e302f31392d3234203d3e203137323232.roa
File:                     3137372e39322e36342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          Qx/udD4atVMvbu9e/GvDC6WXYV+YZEwdXhJg/4TAU8A=
Subject key identifier:   9D:4A:C8:92:8B:07:A4:42:C4:93:09:42:60:9A:E0:29:CE:63:9B:86
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       7DFD822DB76C38BDDC11A4BD5285B1B77E7BFBCA
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137372e39322e36342e302f31392d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        177.92.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fd:82:2d:b7:6c:38:bd:dc:11:a4:bd:52:85:b1:b7:7e:7b:fb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=9D4AC8928B07A442C4930942609AE029CE639B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:e8:1c:ae:43:39:49:a3:e3:24:86:41:ac:
                    a4:30:01:57:30:40:7d:02:44:73:b6:e6:fa:80:04:
                    8f:cc:12:eb:fb:8d:9a:15:6e:2a:8c:8c:6f:bd:f3:
                    f1:0d:53:5a:bc:ca:69:c0:da:a1:30:2d:8d:69:9b:
                    30:c4:00:25:0d:3e:59:6e:d1:ca:11:7c:cc:95:e3:
                    fb:8d:cd:89:1b:35:4c:b1:41:91:ec:ce:ed:19:34:
                    94:53:f0:6f:23:8c:89:3f:e0:57:2c:40:3e:19:5f:
                    79:df:f5:14:2a:e2:fe:09:46:89:d5:7e:e5:0a:93:
                    aa:20:9b:dc:40:63:ba:0c:f9:38:e5:65:a9:df:e7:
                    5a:fb:b8:20:e4:1a:bf:7c:85:7a:83:14:6c:2e:64:
                    38:48:49:5a:96:59:f0:fe:7f:c3:80:bd:f5:18:7c:
                    c9:d7:89:8b:8b:99:2e:06:7d:b9:d3:51:37:d3:e1:
                    47:f4:06:e6:fd:9f:95:2d:6f:5c:7e:28:2d:92:b2:
                    d7:a9:49:31:90:b2:bb:eb:63:e8:00:58:ed:e8:71:
                    1a:72:69:ab:11:77:7f:b5:73:b8:f0:1d:b9:c0:c9:
                    dd:6c:fb:0a:4f:8a:1a:e7:80:24:0f:d9:02:37:8c:
                    f1:c0:e9:76:ec:db:8d:2c:65:4d:fb:f4:48:83:1f:
                    b2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4A:C8:92:8B:07:A4:42:C4:93:09:42:60:9A:E0:29:CE:63:9B:86
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137372e39322e36342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:7d:02:d6:1a:d4:c8:44:17:95:e1:e6:9b:96:d1:f9:83:53:
         ed:a1:49:3f:3c:1b:c5:0f:ab:e9:d7:9b:b3:3c:9b:d7:c5:b6:
         77:15:72:c0:c6:0e:0f:fc:60:df:ef:ee:90:ad:db:fc:13:9c:
         c6:30:a0:ad:cd:51:7c:bb:ca:99:ee:07:f0:a1:ba:32:a1:67:
         d9:0f:2d:83:67:31:0a:60:e1:7d:fb:f5:59:21:32:b8:44:6d:
         ed:06:64:7a:31:fa:62:ad:fe:8f:72:f5:3c:88:18:ef:89:14:
         08:73:df:70:96:98:a3:f5:75:e0:ba:35:5a:b2:fb:97:42:a8:
         df:a2:83:a9:4f:c8:9e:b4:32:cf:bb:55:26:5b:d6:96:83:d7:
         6e:24:e6:0a:3c:db:d1:8d:00:c7:57:c8:68:b8:0f:2d:49:ee:
         5b:76:cf:92:30:c7:9a:9a:17:e9:88:76:8a:5e:73:25:89:2a:
         1c:dc:1c:51:bf:2f:e9:a5:1f:0c:cb:b3:4a:28:f9:3f:26:14:
         26:07:07:fe:9c:a8:9e:3f:67:38:54:7f:40:a6:22:96:4d:ef:
         bd:46:b8:23:63:97:54:b8:b4:85:b5:82:92:fb:68:5c:07:ac:
         78:87:8f:91:9d:3d:5c:cd:56:33:85:55:51:dc:6a:3a:87:74:
         dd:27:66:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org