Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33362e302f32342d3234203d3e20323633393438.roa
File:                     3137372e36372e33362e302f32342d3234203d3e20323633393438.roa (raw, json)
Hash identifier:          AvvJsIr9mFJR4uFMAm7xp0UZcWQmq/ng7+ynYzuXBfg=
Subject key identifier:   0C:BD:A7:25:D6:42:05:70:1B:1E:ED:7B:32:24:49:BE:04:31:D8:A1
Certificate issuer:       /CN=A1FBC871EB104DDB5E2BB4BC43A63A35148DB820
Certificate serial:       63417ED6FB5309FCB910E35FC1C4A9AB554F39B9
Authority key identifier: A1:FB:C8:71:EB:10:4D:DB:5E:2B:B4:BC:43:A6:3A:35:14:8D:B8:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33362e302f32342d3234203d3e20323633393438.roa
Signing time:             Fri 12 Apr 2024 18:38:53 +0000
ROA not before:           Fri 12 Apr 2024 18:33:53 +0000
ROA not after:            Fri 11 Apr 2025 18:38:53 +0000
asID:                     263948
IP address blocks:        177.67.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:41:7e:d6:fb:53:09:fc:b9:10:e3:5f:c1:c4:a9:ab:55:4f:39:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1FBC871EB104DDB5E2BB4BC43A63A35148DB820
        Validity
            Not Before: Apr 12 18:33:53 2024 GMT
            Not After : Apr 11 18:38:53 2025 GMT
        Subject: CN=0CBDA725D64205701B1EED7B322449BE0431D8A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:31:fd:1d:c1:7b:24:71:94:94:ad:95:0c:b1:
                    f5:11:23:51:8a:f8:6e:31:d1:01:cb:31:5f:e5:ab:
                    b0:30:0f:d5:ed:04:62:15:2c:51:50:bf:18:a6:94:
                    29:6f:02:d3:24:2b:d9:8d:ab:c1:f0:87:44:af:20:
                    5a:e2:c0:59:d5:34:79:02:06:03:e3:c2:ca:03:bc:
                    44:df:4f:ad:22:8c:a5:c9:6f:c5:fb:0e:d6:b6:b2:
                    73:58:4e:98:fc:dd:57:e3:20:3f:dd:19:33:ab:e2:
                    22:de:e0:ea:92:94:a5:f5:26:c3:e7:a2:57:65:b1:
                    7d:b5:72:2d:e8:8e:ad:54:51:65:04:0f:83:0e:4a:
                    b1:5d:b6:c9:75:34:4b:b3:35:f2:a3:e8:60:1d:27:
                    68:c0:56:b5:83:4e:80:cf:d7:d8:95:4e:a7:57:f7:
                    25:34:ba:46:f6:00:92:57:d7:ed:e0:4e:43:07:a8:
                    21:c1:97:33:79:e5:6d:b2:6b:d5:f6:12:c5:e9:f1:
                    e8:96:cc:0d:e4:ae:b5:d8:5d:be:2e:31:ad:ea:5e:
                    56:82:11:c2:a3:14:99:7c:ff:ba:d0:5b:97:e3:62:
                    86:a3:af:70:6a:81:89:fb:d0:29:76:e0:f3:e3:b9:
                    f3:d5:79:7a:3b:7d:66:3d:ab:64:3d:dd:f1:1e:9e:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BD:A7:25:D6:42:05:70:1B:1E:ED:7B:32:24:49:BE:04:31:D8:A1
            X509v3 Authority Key Identifier:
                keyid:A1:FB:C8:71:EB:10:4D:DB:5E:2B:B4:BC:43:A6:3A:35:14:8D:B8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3137372e36372e33362e302f32342d3234203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:93:ed:dc:2d:f1:6b:52:9c:ae:8b:82:10:32:27:17:60:5e:
         a8:59:17:b9:da:8d:dd:7c:d2:df:bb:dd:c5:41:16:43:c0:39:
         45:a4:1a:df:67:42:47:9a:79:cf:ea:66:23:00:23:43:f8:fd:
         2d:43:68:20:36:0d:73:30:92:3d:0f:64:30:aa:14:11:da:a1:
         9e:74:ec:ae:b0:cc:93:06:b3:20:22:e5:8a:51:4c:a2:48:9e:
         70:ad:11:40:c6:17:e8:f7:d3:41:6a:a2:93:c7:d4:9e:d8:13:
         f7:1e:21:76:9b:ec:f3:19:0f:0f:d9:41:98:e3:9b:7e:48:61:
         68:2b:68:1e:5d:66:46:73:4a:c6:50:10:6d:34:59:7b:1e:2e:
         4d:91:27:0f:fc:a6:06:6d:42:ba:3a:30:54:f8:e6:81:9d:ac:
         bb:72:8b:e2:4b:13:dc:8f:a7:7a:92:3b:94:8a:92:a6:88:73:
         b8:2a:21:0f:d2:82:9d:f0:7b:fc:8a:a1:a4:82:e8:2a:76:38:
         16:67:07:90:d8:08:e7:57:48:8b:11:0c:5b:5f:e7:e4:f0:9c:
         62:76:a0:62:2c:8c:16:a5:e3:4b:7b:0a:b9:7b:7a:43:c3:4d:
         84:59:ed:5d:f2:ca:66:cf:77:ce:d4:02:50:df:e3:41:43:53:
         a8:55:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org