Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3138302e302f32332d3233203d3e20323632353439.roa
File:                     3137372e37322e3138302e302f32332d3233203d3e20323632353439.roa (raw, json)
Hash identifier:          5uWpoOy3vC9VfmYxDfePnQeIqAlAuteIMkDfmYf8irs=
Subject key identifier:   34:FB:A0:23:BA:6A:B9:C6:20:CB:78:11:34:D3:AC:1F:30:41:CE:C3
Certificate issuer:       /CN=8E929E44F4E460DD232A372077C8427817A7F840
Certificate serial:       5D6B6E28F9306FE367541EB7C3D18506D9AD7BF0
Authority key identifier: 8E:92:9E:44:F4:E4:60:DD:23:2A:37:20:77:C8:42:78:17:A7:F8:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E929E44F4E460DD232A372077C8427817A7F840.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3138302e302f32332d3233203d3e20323632353439.roa
Signing time:             Fri 25 Aug 2023 11:08:57 +0000
ROA not before:           Fri 25 Aug 2023 11:03:57 +0000
ROA not after:            Fri 23 Aug 2024 11:08:57 +0000
asID:                     262549
IP address blocks:        177.72.180.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6b:6e:28:f9:30:6f:e3:67:54:1e:b7:c3:d1:85:06:d9:ad:7b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E929E44F4E460DD232A372077C8427817A7F840
        Validity
            Not Before: Aug 25 11:03:57 2023 GMT
            Not After : Aug 23 11:08:57 2024 GMT
        Subject: CN=34FBA023BA6AB9C620CB781134D3AC1F3041CEC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:d6:4b:29:e6:f8:5e:c3:bd:3c:d0:25:d7:
                    42:47:06:bd:cb:23:10:82:3a:51:3a:19:06:dd:4a:
                    77:25:d5:f0:fa:3f:8f:81:c4:e2:2d:a8:69:3c:a1:
                    67:b6:ba:64:57:90:8b:ed:d6:4b:52:58:e8:3f:29:
                    9c:8e:41:04:d5:23:40:8b:1c:62:d8:78:79:50:fc:
                    99:49:47:80:49:50:81:e3:f2:b4:0a:f3:97:ee:88:
                    bf:4c:4b:a3:0f:29:4e:39:ea:31:7b:d6:77:8e:5d:
                    71:af:ce:ce:7b:0c:ef:6a:76:35:a5:8f:d5:31:48:
                    1d:a6:f9:42:e8:5c:5b:ae:14:7b:bf:30:99:6c:58:
                    ed:06:f9:c9:e1:4e:86:2f:28:55:14:04:4d:07:c9:
                    03:dc:32:0a:c6:01:81:07:c8:68:04:c4:ab:c4:f4:
                    7a:a3:89:71:4c:ce:52:8c:bb:e7:3c:d0:8b:e9:bc:
                    d8:2a:37:8d:c6:f5:87:05:10:56:fe:51:b0:1d:8a:
                    c2:84:45:76:f2:13:3d:69:a7:be:15:32:a1:fa:1a:
                    32:df:1b:e6:de:66:7c:db:90:f8:13:a3:49:b6:4c:
                    87:24:e5:79:86:71:75:53:e9:4c:0f:35:46:05:1c:
                    7e:0e:f6:c0:fb:69:92:c3:c9:ae:ec:9a:7c:76:af:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FB:A0:23:BA:6A:B9:C6:20:CB:78:11:34:D3:AC:1F:30:41:CE:C3
            X509v3 Authority Key Identifier:
                keyid:8E:92:9E:44:F4:E4:60:DD:23:2A:37:20:77:C8:42:78:17:A7:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/8E929E44F4E460DD232A372077C8427817A7F840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E929E44F4E460DD232A372077C8427817A7F840.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3138302e302f32332d3233203d3e20323632353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:2f:95:ad:f5:a4:22:00:8a:3b:26:9d:b6:bf:36:f3:f9:09:
         58:0c:f6:c0:70:1f:c9:05:56:ce:03:68:1b:22:52:17:55:a2:
         6b:d7:a6:22:f7:25:33:e0:79:1f:eb:93:df:71:4d:09:c0:45:
         25:4b:a4:e4:53:8b:5b:5d:d5:82:a6:10:68:0b:ee:5a:98:87:
         89:88:9a:2d:52:4f:e2:d0:47:75:15:92:5c:2b:40:cf:af:d6:
         55:00:9e:cf:3f:eb:0c:1e:b1:2d:04:cb:b7:54:89:54:3a:99:
         10:2c:a1:68:85:0c:ae:d2:c8:4e:b8:1b:a0:03:2e:fd:2b:fe:
         e3:da:89:7e:26:87:14:dd:e3:03:a8:b8:78:ea:06:ef:eb:40:
         43:7c:06:41:dc:74:47:39:58:91:a1:17:b6:f6:4e:65:48:20:
         81:21:95:99:4f:e2:c5:0d:27:f4:65:ef:22:f2:7c:4a:c3:11:
         12:4e:72:97:95:bf:38:de:2f:d5:07:12:ae:e3:c8:b4:02:af:
         31:b0:9b:bc:11:75:a1:0c:6f:cd:84:bd:b5:a5:d6:7d:73:ff:
         51:fc:f0:b1:de:71:e8:aa:c5:9e:0f:c0:30:06:62:a5:19:da:
         ef:12:ad:79:a6:a4:31:dc:15:d0:da:53:1d:7c:a3:7f:15:a7:
         72:e7:14:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org