Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e34382e302f32312d3233203d3e20323632343933.roa
File:                     3137372e382e34382e302f32312d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          Ivfl7bXvNY0DO39d62TfEZgJiRU8RNB9dGFRkQscm6A=
Subject key identifier:   D7:BA:00:92:55:7D:19:12:11:7A:9C:04:A9:6A:27:D9:14:71:AC:98
Certificate issuer:       /CN=7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3
Certificate serial:       47B8A7A6CCB1AF9D98A132C307B9C7555788F3
Authority key identifier: 7D:3D:6B:C4:E2:E9:A5:32:BA:78:32:AA:B9:65:A7:1F:32:B8:86:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e34382e302f32312d3233203d3e20323632343933.roa
Signing time:             Tue 16 May 2023 16:35:19 +0000
ROA not before:           Tue 16 May 2023 16:30:19 +0000
ROA not after:            Tue 14 May 2024 16:35:19 +0000
asID:                     262493
IP address blocks:        177.8.48.0/21 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b8:a7:a6:cc:b1:af:9d:98:a1:32:c3:07:b9:c7:55:57:88:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3
        Validity
            Not Before: May 16 16:30:19 2023 GMT
            Not After : May 14 16:35:19 2024 GMT
        Subject: CN=D7BA0092557D1912117A9C04A96A27D91471AC98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:10:4c:7a:d4:d2:19:11:20:05:00:5f:cc:c6:
                    48:bf:bd:0f:6c:6a:17:03:9a:11:5b:a0:1d:aa:d7:
                    05:38:b1:00:a8:ab:6e:cc:5c:4c:3c:58:f5:d1:8a:
                    c2:39:76:2f:43:16:6a:03:04:8f:ee:5a:4e:cf:cd:
                    4d:aa:97:b1:29:24:75:cb:41:e5:ae:93:ce:99:8d:
                    c5:07:31:e3:8b:a1:58:dc:b5:36:3b:b8:e0:9b:d0:
                    21:9a:9f:ff:4f:ad:6a:41:3e:5e:3e:2d:0b:c8:af:
                    04:d8:5d:b5:1f:5e:6d:25:2e:d3:12:28:70:0b:ed:
                    97:2d:e1:a9:22:ed:41:7a:c2:9a:28:5a:6c:0f:0d:
                    5d:14:92:de:56:8c:e2:ec:37:80:2e:54:f1:05:1f:
                    20:bb:e9:6e:17:6a:38:51:58:5b:ce:19:c5:f2:47:
                    32:39:63:36:c7:ad:f7:49:8d:4b:e1:15:35:66:fb:
                    dd:9d:13:3f:8e:7e:8f:dc:9e:7c:9e:ba:8f:ca:61:
                    90:61:68:24:c1:2d:f9:fd:62:5e:65:4d:87:20:ef:
                    4a:e4:43:9b:d2:3e:d8:67:ac:73:b2:4c:29:40:f2:
                    3b:4f:dd:03:ac:88:95:98:c6:c0:97:76:fd:2a:29:
                    01:79:23:8c:67:34:c9:98:d3:29:6a:fa:f0:11:30:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BA:00:92:55:7D:19:12:11:7A:9C:04:A9:6A:27:D9:14:71:AC:98
            X509v3 Authority Key Identifier:
                keyid:7D:3D:6B:C4:E2:E9:A5:32:BA:78:32:AA:B9:65:A7:1F:32:B8:86:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D3D6BC4E2E9A532BA7832AAB965A71F32B886B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e34382e302f32312d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:3f:73:44:c8:cb:6c:9f:24:10:aa:f1:12:a5:58:9e:ca:4d:
         87:01:27:53:42:ed:95:13:3c:f8:2e:fb:f7:49:ca:b8:88:18:
         e6:8e:0f:24:ac:6c:b5:c2:17:52:d4:7c:c1:db:58:0a:ee:7a:
         4f:a8:70:7c:35:b1:3f:be:37:bf:05:c6:a7:4f:fd:1d:6c:e5:
         27:b0:6e:59:36:5d:93:7b:f3:de:ec:00:06:e9:69:de:95:44:
         ea:89:77:bd:03:ab:a4:c5:aa:e0:25:8e:ff:07:45:71:91:5d:
         c8:9f:99:6a:66:10:0b:cb:83:74:fb:54:d3:a3:da:40:a5:f7:
         fb:8d:06:b4:3a:5b:cc:28:f5:3e:16:c3:c9:7f:bb:0d:db:85:
         15:46:d9:db:68:3e:4f:9e:65:03:db:f0:10:fa:b2:16:83:b0:
         42:7b:33:ee:e4:d4:13:1b:a3:4c:ac:2e:39:33:70:2c:9e:8d:
         2a:c8:e3:1d:e2:79:fe:45:90:0a:ba:97:08:0c:11:93:b3:ea:
         bc:ac:95:fe:22:f1:72:23:1d:c7:ee:12:0d:14:6f:aa:d3:d0:
         48:8d:43:68:30:d0:47:cc:39:f2:a2:ca:e7:11:23:2f:45:68:
         8f:c3:11:13:f2:8c:a4:22:03:40:3d:27:8a:da:b4:50:d3:c0:
         f7:b2:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org