Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3137362e302f32312d3231203d3e20323632353439.roa
File:                     3137372e37322e3137362e302f32312d3231203d3e20323632353439.roa (raw, json)
Hash identifier:          dLvGMgvZttf1dAxAaxMbD1AoAz6bgpAVxuxRAIzjkqs=
Subject key identifier:   DE:3E:A3:EA:40:76:A1:78:60:98:61:AA:FA:27:97:69:57:97:A1:72
Certificate issuer:       /CN=8E929E44F4E460DD232A372077C8427817A7F840
Certificate serial:       56E78368B5DADE7949DC21D5B6889FA3C0F50AEC
Authority key identifier: 8E:92:9E:44:F4:E4:60:DD:23:2A:37:20:77:C8:42:78:17:A7:F8:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E929E44F4E460DD232A372077C8427817A7F840.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3137362e302f32312d3231203d3e20323632353439.roa
Signing time:             Thu 10 Aug 2023 12:13:12 +0000
ROA not before:           Thu 10 Aug 2023 12:08:12 +0000
ROA not after:            Thu 08 Aug 2024 12:13:12 +0000
asID:                     262549
IP address blocks:        177.72.176.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e7:83:68:b5:da:de:79:49:dc:21:d5:b6:88:9f:a3:c0:f5:0a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E929E44F4E460DD232A372077C8427817A7F840
        Validity
            Not Before: Aug 10 12:08:12 2023 GMT
            Not After : Aug  8 12:13:12 2024 GMT
        Subject: CN=DE3EA3EA4076A178609861AAFA2797695797A172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0f:c6:6a:00:e0:57:56:79:b6:f3:7e:04:93:
                    c5:07:93:1a:22:f8:25:1e:2f:00:48:90:61:4d:92:
                    75:9b:af:a9:ae:34:61:fc:16:f2:2c:1f:55:95:d2:
                    da:c9:7a:4b:17:4a:80:ea:15:ca:48:36:13:1e:23:
                    de:b0:fb:c3:b4:61:22:ba:1c:ae:4e:05:12:5b:20:
                    1c:cd:44:6d:b0:ac:cc:5f:57:0f:03:66:87:df:ed:
                    b2:3f:47:47:00:4a:73:13:42:96:b3:25:ca:ad:07:
                    22:98:54:b2:4b:f6:0c:bf:3e:be:25:a7:0c:8a:bb:
                    6a:27:26:34:69:0b:e8:c0:ba:5f:ee:7d:11:ca:a9:
                    29:b6:c3:b5:95:18:84:bc:71:d8:00:aa:e2:c9:c4:
                    51:2d:c0:d1:75:6e:4f:32:72:e2:df:94:b4:86:36:
                    7e:b8:7f:8e:5b:64:d9:2d:74:4b:8f:ea:95:50:8a:
                    a4:92:38:09:5d:98:95:f9:27:4b:49:21:a1:76:c9:
                    c8:38:96:2d:45:40:ff:e0:a9:6d:a3:5b:81:81:e1:
                    b1:a4:13:60:c8:5f:f5:13:18:1b:aa:30:38:38:e7:
                    1a:3d:02:0d:9a:a4:65:2b:76:10:17:3a:83:d4:0a:
                    1a:ab:ba:8e:5d:42:96:e4:b0:bd:bc:20:54:1e:01:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3E:A3:EA:40:76:A1:78:60:98:61:AA:FA:27:97:69:57:97:A1:72
            X509v3 Authority Key Identifier:
                keyid:8E:92:9E:44:F4:E4:60:DD:23:2A:37:20:77:C8:42:78:17:A7:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/8E929E44F4E460DD232A372077C8427817A7F840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E929E44F4E460DD232A372077C8427817A7F840.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3137362e302f32312d3231203d3e20323632353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:3f:4f:03:db:26:29:94:da:21:74:a1:3e:f8:f9:06:32:8a:
         8a:7f:e9:9f:88:03:16:8a:00:65:28:e3:79:a5:9a:03:d4:b5:
         08:6e:63:2c:ce:82:62:a2:ae:b8:29:57:97:ac:1e:e1:a7:21:
         6a:6c:b3:ff:ab:8f:44:d8:b4:c3:82:86:e1:1c:44:04:1e:11:
         03:f1:43:ba:61:62:9f:c2:df:5e:1c:61:94:33:dc:a6:a4:03:
         a9:f0:80:34:4b:ae:7e:74:f8:df:78:f9:7c:83:bd:e1:3f:b1:
         17:96:28:8f:48:6b:9f:aa:32:6d:9c:e7:3e:65:b7:22:71:90:
         ce:08:b8:20:e7:62:a7:be:4f:e3:73:22:c9:b6:88:34:2e:2e:
         4c:7a:bc:44:82:84:ec:9b:a0:9b:d1:d0:e6:8b:53:3e:be:bc:
         a0:29:75:49:cf:df:1b:bb:54:45:15:78:69:69:bd:83:2e:73:
         ff:ff:4f:ea:35:02:5a:9e:4c:22:22:34:75:04:4f:d7:b4:31:
         35:95:d5:fc:14:0f:a5:25:0b:3b:fd:26:64:cf:3b:53:a9:9f:
         d1:db:d6:2d:36:b5:21:4a:82:6e:d5:08:59:b4:56:45:ec:06:
         63:c7:57:ad:19:e2:24:b9:d4:a4:98:13:74:55:5c:03:32:55:
         c6:d2:c9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org