Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3137382e302f32342d3234203d3e20323632353439.roa
File:                     3137372e37322e3137382e302f32342d3234203d3e20323632353439.roa (raw, json)
Hash identifier:          WS3FmxFz0lP1gqHPfhWj+F0NYKrT+2DNbgPqwL3UuLI=
Subject key identifier:   83:EA:E2:F8:DD:22:5F:35:1A:B3:59:C9:8C:ED:04:1A:2A:D1:81:62
Certificate issuer:       /CN=F287460A646DEE868157EDCCABDA09DBAD094C27
Certificate serial:       09449A2B3D21C2FF8CD27C97ECEAE938E90ADAA2
Authority key identifier: F2:87:46:0A:64:6D:EE:86:81:57:ED:CC:AB:DA:09:DB:AD:09:4C:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F287460A646DEE868157EDCCABDA09DBAD094C27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3137382e302f32342d3234203d3e20323632353439.roa
Signing time:             Sun 08 Jan 2023 17:47:58 +0000
ROA not before:           Sun 08 Jan 2023 17:42:58 +0000
ROA not after:            Sun 07 Jan 2024 17:47:58 +0000
asID:                     262549
IP address blocks:        177.72.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:44:9a:2b:3d:21:c2:ff:8c:d2:7c:97:ec:ea:e9:38:e9:0a:da:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F287460A646DEE868157EDCCABDA09DBAD094C27
        Validity
            Not Before: Jan  8 17:42:58 2023 GMT
            Not After : Jan  7 17:47:58 2024 GMT
        Subject: CN=83EAE2F8DD225F351AB359C98CED041A2AD18162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:27:f7:cb:41:1a:64:37:19:d0:1e:14:fa:
                    f7:03:f6:03:00:53:05:d8:af:29:9c:af:c9:19:90:
                    c0:e3:11:af:bc:43:ab:7b:a0:48:91:cf:d9:dd:1f:
                    da:a4:03:34:31:a8:71:f8:ca:ed:5f:d9:8f:b4:8e:
                    26:35:50:01:72:e1:99:0f:9e:99:04:ec:d2:fd:02:
                    6d:23:ea:8e:c6:4f:d3:9b:50:36:3f:db:a4:2a:f9:
                    e1:f0:02:c7:0b:cf:b8:25:4e:40:19:92:e2:50:8f:
                    fe:95:57:f7:f7:ca:04:5c:63:a1:0a:7a:7e:c2:9d:
                    f6:6d:75:20:12:63:1b:c8:9f:c8:02:28:ec:67:3a:
                    ff:c1:76:87:0b:fa:fa:5b:c8:41:3e:cd:af:56:de:
                    ee:49:03:db:0f:14:92:fc:4b:1a:2b:25:12:8b:f8:
                    c2:6c:ec:67:1d:99:a2:18:e4:33:78:02:e0:dc:9a:
                    01:85:5c:4d:db:c5:5e:c1:69:fe:6d:f9:65:0e:c9:
                    c1:73:52:6b:5f:a3:76:56:a3:56:83:6d:59:28:1c:
                    69:ef:4c:11:b8:97:f3:c5:6c:ef:d8:21:83:07:d2:
                    bb:bc:50:ec:72:8b:5e:66:47:08:dd:0d:48:9b:5d:
                    e4:dd:1f:fd:ce:98:bc:5a:19:65:83:a8:21:d4:b2:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EA:E2:F8:DD:22:5F:35:1A:B3:59:C9:8C:ED:04:1A:2A:D1:81:62
            X509v3 Authority Key Identifier:
                keyid:F2:87:46:0A:64:6D:EE:86:81:57:ED:CC:AB:DA:09:DB:AD:09:4C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/F287460A646DEE868157EDCCABDA09DBAD094C27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F287460A646DEE868157EDCCABDA09DBAD094C27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3137382e302f32342d3234203d3e20323632353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:33:5a:14:2b:c2:98:98:f3:02:06:a4:b4:91:55:ce:9d:39:
         4c:6a:ad:14:a0:94:6b:b9:d5:26:fe:b2:69:5d:8a:66:01:56:
         46:d7:07:1a:c2:8a:3c:e2:18:82:1e:81:42:9a:81:26:fe:2c:
         d9:90:84:e1:9d:f1:67:5c:ef:4f:2b:34:e3:87:74:30:99:ee:
         07:40:e8:6d:23:3c:2d:cc:39:18:cb:ee:1c:98:01:ab:b8:c5:
         a8:5a:58:2b:c2:7d:50:c1:ae:e8:68:1d:4f:fc:64:c8:2c:1e:
         e2:a1:58:2c:09:b9:4d:a2:31:75:9c:a5:12:8f:03:10:52:18:
         71:e3:19:a8:93:08:9f:f9:a3:43:87:cf:cc:38:76:87:e3:57:
         80:f7:a0:39:1f:41:b6:9f:58:7d:b8:d6:26:d5:3b:8e:a8:18:
         36:ea:9c:a6:9a:b7:c0:a8:e0:a0:00:9d:2e:76:bd:23:75:03:
         55:a2:b0:e8:1f:68:03:cb:30:77:bb:e5:01:69:87:a3:3d:72:
         5a:8d:12:11:fa:2e:cb:b5:82:dc:c5:c7:ab:87:71:f6:45:15:
         8c:0d:69:7f:d4:33:fb:b6:66:ac:b3:e9:62:ab:95:9f:7b:81:
         d2:c4:ad:8f:2b:a1:b5:23:59:e3:63:79:90:df:2f:6c:4b:26:
         09:19:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org