Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/3137372e38342e39362e302f32322d3234203d3e20323632353832.roa
File:                     3137372e38342e39362e302f32322d3234203d3e20323632353832.roa (raw, json)
Hash identifier:          jAq3DmPb2sIbRPSLSYCLp0yMBakaexZo+lMIudTP084=
Subject key identifier:   9D:35:39:51:08:FC:0D:CA:BC:FB:E9:A3:05:F3:03:18:33:57:3B:43
Certificate issuer:       /CN=8EB451B27895BC5878C8E33AF6255A3AE9A90554
Certificate serial:       541EBCF64E7A20ED3603EB450A85DD11EF6E92EB
Authority key identifier: 8E:B4:51:B2:78:95:BC:58:78:C8:E3:3A:F6:25:5A:3A:E9:A9:05:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EB451B27895BC5878C8E33AF6255A3AE9A90554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/3137372e38342e39362e302f32322d3234203d3e20323632353832.roa
Signing time:             Tue 11 Apr 2023 14:27:46 +0000
ROA not before:           Tue 11 Apr 2023 14:22:46 +0000
ROA not after:            Tue 09 Apr 2024 14:27:46 +0000
asID:                     262582
IP address blocks:        177.84.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1e:bc:f6:4e:7a:20:ed:36:03:eb:45:0a:85:dd:11:ef:6e:92:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EB451B27895BC5878C8E33AF6255A3AE9A90554
        Validity
            Not Before: Apr 11 14:22:46 2023 GMT
            Not After : Apr  9 14:27:46 2024 GMT
        Subject: CN=9D35395108FC0DCABCFBE9A305F3031833573B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:85:c9:83:60:8d:8b:c5:80:80:96:99:24:bc:
                    80:44:fc:54:a7:1e:b4:41:43:05:51:01:46:ff:8e:
                    0d:02:c7:29:bb:6a:00:a1:ab:8d:00:7f:dd:68:aa:
                    c6:6f:c0:b6:ea:8f:58:48:e5:4c:c7:ea:73:a6:60:
                    f3:0a:ec:2b:00:42:88:73:84:5a:b3:59:db:6b:aa:
                    eb:1c:6f:b4:36:fa:88:49:93:89:c8:7b:6f:71:59:
                    78:3e:78:29:f4:60:c3:1f:8f:4d:26:cf:42:fe:0b:
                    39:13:c3:b7:07:4e:ac:19:cb:25:94:f6:f7:e2:b6:
                    18:2b:7e:91:88:eb:fe:83:c0:db:c6:9e:7d:07:1e:
                    bb:52:21:53:1a:0e:26:4f:18:4d:b2:12:20:91:61:
                    06:b5:7d:c1:b2:ef:7a:a5:d5:b0:10:eb:09:b0:60:
                    86:8e:67:80:5e:e6:71:de:54:9a:7a:34:96:4f:bf:
                    b6:78:fd:04:7b:ca:16:31:64:64:26:5e:68:0e:f2:
                    0d:6c:df:4f:03:2b:79:b9:bc:8e:94:f4:1b:70:d6:
                    3d:f6:f7:56:b8:d1:6d:a2:fe:3d:e1:1b:c8:cc:c9:
                    09:2a:6c:f6:62:d6:b2:0c:10:f3:0b:e0:7b:b0:dd:
                    75:28:b3:db:34:51:51:17:2a:10:43:e7:ff:80:c9:
                    26:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:35:39:51:08:FC:0D:CA:BC:FB:E9:A3:05:F3:03:18:33:57:3B:43
            X509v3 Authority Key Identifier:
                keyid:8E:B4:51:B2:78:95:BC:58:78:C8:E3:3A:F6:25:5A:3A:E9:A9:05:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/8EB451B27895BC5878C8E33AF6255A3AE9A90554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EB451B27895BC5878C8E33AF6255A3AE9A90554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/3137372e38342e39362e302f32322d3234203d3e20323632353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:21:b0:4a:8c:38:e5:d6:06:92:98:aa:a8:24:46:7e:8f:63:
         f6:e4:d6:81:4e:8a:5c:74:15:b9:32:ac:f0:96:4d:20:f4:92:
         ad:66:04:9f:e0:b8:19:f2:82:fe:af:8e:0a:26:29:6b:2a:7d:
         44:e9:e2:b7:7c:3f:fc:c7:89:c2:48:60:f8:6e:59:84:23:b1:
         e8:4a:30:41:23:c2:24:7f:87:54:93:19:e2:fd:a1:e8:9b:0b:
         ea:7b:04:7b:ab:24:24:fa:77:ca:0e:e2:e2:2e:4a:cb:13:56:
         6b:73:74:45:9e:d2:e0:c7:ce:e3:f7:51:3b:e5:33:f9:11:f3:
         d0:6c:ca:5f:ad:7a:a8:31:d4:0a:3b:28:74:9a:5b:9e:c0:f4:
         17:28:1d:f3:6d:6f:56:40:ad:a7:35:2b:7c:da:e4:b9:91:99:
         6a:d6:c5:fa:30:cf:66:1f:46:65:64:e2:44:be:93:41:5d:fd:
         75:b9:1d:e2:f7:a6:37:17:9b:dd:4b:e8:6a:69:9e:39:ac:9e:
         31:98:ad:e7:75:06:3c:59:ee:41:ac:d9:d2:98:fa:7a:9b:78:
         b2:63:b2:00:e4:e7:a4:ac:db:e3:c6:f6:d7:31:c6:27:64:01:
         91:64:9f:0c:e8:a7:43:79:39:85:47:69:80:58:10:59:14:71:
         7f:c7:75:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org