Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3235322e302f32322d3232203d3e20323632343738.roa
File:                     3137372e34372e3235322e302f32322d3232203d3e20323632343738.roa (raw, json)
Hash identifier:          Jd5sQHPv9ENcoLw9JM1jQfj/hd4p4zUKF9dGEk5QEeE=
Subject key identifier:   20:6D:BE:1D:D9:5F:3D:A6:72:9D:88:FB:C4:08:65:46:43:1E:8B:AC
Certificate issuer:       /CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
Certificate serial:       0EF1BC6243802EACD41C40D9C3EEC022C29EA946
Authority key identifier: 83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3235322e302f32322d3232203d3e20323632343738.roa
Signing time:             Tue 28 Nov 2023 14:07:21 +0000
ROA not before:           Tue 28 Nov 2023 14:02:21 +0000
ROA not after:            Tue 26 Nov 2024 14:07:21 +0000
asID:                     262478
IP address blocks:        177.47.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f1:bc:62:43:80:2e:ac:d4:1c:40:d9:c3:ee:c0:22:c2:9e:a9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
        Validity
            Not Before: Nov 28 14:02:21 2023 GMT
            Not After : Nov 26 14:07:21 2024 GMT
        Subject: CN=206DBE1DD95F3DA6729D88FBC4086546431E8BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:d4:07:29:70:0c:b0:2d:d7:b2:3c:24:b8:
                    94:2a:48:37:51:a2:cd:66:3a:8f:bb:70:8d:0d:c4:
                    ce:51:69:2e:7f:63:b1:4f:05:4b:db:1d:a1:9c:49:
                    15:66:43:f7:c1:e3:3c:f3:06:79:81:09:ae:26:ea:
                    80:fb:5c:da:0b:d1:f5:cb:e2:78:15:dd:f4:c9:84:
                    f9:d8:5c:ae:33:df:5a:d8:f1:5a:51:34:c8:c6:de:
                    a9:a7:1e:34:78:7e:bb:0e:44:2b:d0:45:32:d9:ba:
                    f0:97:dc:48:65:a7:c1:d2:04:a3:b7:9e:0d:2b:42:
                    34:ae:5a:38:59:f6:b5:ef:3a:39:cb:71:62:6a:fe:
                    33:00:8a:53:76:58:f2:c0:0b:66:06:03:d2:76:50:
                    2b:db:c9:12:57:d8:14:92:3b:1e:34:32:9c:36:52:
                    ba:ed:ec:b8:b6:4f:58:5c:fa:b8:52:a8:43:b2:6b:
                    7b:60:7d:35:83:f5:57:3c:04:39:d6:cc:02:c1:b1:
                    f4:70:c8:78:08:8d:15:ef:7b:12:ce:2b:44:2d:fe:
                    4c:98:3a:15:d1:3f:be:3e:52:d9:8e:ed:9d:ab:fa:
                    b3:67:83:e7:ff:c2:a6:2f:58:78:9e:83:16:82:26:
                    a8:59:ce:d6:d8:90:90:87:be:02:f5:8a:56:45:64:
                    61:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6D:BE:1D:D9:5F:3D:A6:72:9D:88:FB:C4:08:65:46:43:1E:8B:AC
            X509v3 Authority Key Identifier:
                keyid:83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3235322e302f32322d3232203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:4a:59:6a:71:4e:7e:55:8d:cf:5f:d0:3b:43:a2:77:ec:ab:
         8a:d4:e4:73:f6:88:a4:71:03:02:d7:5d:df:10:11:dd:db:56:
         df:14:68:39:b0:c7:c6:a7:2a:46:52:84:cf:fa:73:48:d9:ed:
         cf:2d:ff:c4:c0:88:e7:03:d4:20:d4:a0:92:88:9c:49:df:a1:
         2e:68:a8:1e:5b:1e:4a:33:2f:81:92:5b:f2:e0:8d:54:b7:ef:
         a3:1c:f5:53:99:3d:bd:ee:1d:fb:bf:c3:5b:12:2e:62:a7:f8:
         4a:48:29:25:47:79:39:3f:da:b0:18:c3:47:f4:1f:a6:f0:1b:
         2e:89:bd:12:ed:2f:52:b3:a7:97:58:a0:41:94:f4:a3:a2:15:
         fc:1d:10:6b:c1:dc:f1:13:75:fe:e5:1a:5b:4e:4a:5a:eb:20:
         c5:91:4e:01:e8:d3:32:dd:2b:0d:19:b3:2a:1b:54:59:97:05:
         f1:f5:9c:3f:b2:02:b7:76:66:e8:20:e0:a1:b1:8a:26:5e:13:
         9d:11:01:96:a4:35:dd:88:34:0a:28:34:5f:0c:ed:87:62:97:
         20:92:75:d1:2b:a1:e8:2e:a8:50:98:83:04:e2:9a:6c:6f:f6:
         ba:7f:3a:8c:0a:87:cb:dd:58:d9:51:cc:1a:3a:46:f1:da:6d:
         e4:45:6e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:24 2024 by rpki-client on console-ams.rpki-client.org