Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa
File:                     3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa (raw, json)
Hash identifier:          kP3wT7F98aNWZEFy+C63KYtjkzDym6EjfDxqIwOuW44=
Subject key identifier:   BB:F6:F7:9B:07:DD:82:E5:AA:16:D1:E2:2F:25:93:4E:91:03:2C:25
Certificate issuer:       /CN=CC9E345A5443E54716B824EB79F1A5F6060302C0
Certificate serial:       56239DA4D92440D13DF1DE62FA384B3E972845B2
Authority key identifier: CC:9E:34:5A:54:43:E5:47:16:B8:24:EB:79:F1:A5:F6:06:03:02:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E345A5443E54716B824EB79F1A5F6060302C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa
Signing time:             Mon 10 Jul 2023 13:01:54 +0000
ROA not before:           Mon 10 Jul 2023 12:56:54 +0000
ROA not after:            Mon 08 Jul 2024 13:01:54 +0000
asID:                     270917
IP address blocks:        177.200.138.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:23:9d:a4:d9:24:40:d1:3d:f1:de:62:fa:38:4b:3e:97:28:45:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC9E345A5443E54716B824EB79F1A5F6060302C0
        Validity
            Not Before: Jul 10 12:56:54 2023 GMT
            Not After : Jul  8 13:01:54 2024 GMT
        Subject: CN=BBF6F79B07DD82E5AA16D1E22F25934E91032C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:99:67:db:c6:40:85:72:9f:19:7a:ed:ff:ec:
                    e9:1a:07:fc:e1:99:af:e3:ee:0f:ee:1f:4e:43:5c:
                    53:39:d6:10:2b:54:1e:8e:73:37:ea:f7:4d:5e:fe:
                    5a:3e:e8:df:6e:ae:22:c2:d0:89:e1:63:eb:df:8c:
                    aa:f7:fd:2c:5b:b8:91:8b:b9:ef:54:a4:1a:97:b0:
                    10:b1:28:d8:b1:87:da:86:b4:52:20:81:b2:0f:18:
                    c1:d2:6d:a6:3e:be:29:ad:31:7b:92:02:74:e9:da:
                    cb:0b:ca:44:3a:75:24:ac:ca:ed:7c:34:43:64:07:
                    c2:55:c4:4f:d7:55:00:64:0a:5a:d1:d2:78:24:f2:
                    9b:22:d8:7d:0d:9f:1b:97:8e:93:48:26:c9:c0:02:
                    d2:d0:e8:8c:ed:d9:80:a4:8f:21:7c:14:8e:59:b6:
                    14:99:c2:6a:70:78:8f:48:2c:00:28:98:2a:40:e0:
                    8c:d1:87:a6:81:e2:e2:7e:6e:b7:25:93:fa:76:4e:
                    ae:69:f6:28:70:74:35:a7:7e:06:6a:0d:62:bb:26:
                    4b:6b:fe:83:b8:0a:cb:cc:5d:1c:7c:6a:35:96:f3:
                    de:c4:ad:30:2a:14:d4:12:86:f8:83:fa:a5:81:73:
                    40:3c:5a:7f:40:e7:cb:28:4a:19:49:50:e4:11:91:
                    49:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F6:F7:9B:07:DD:82:E5:AA:16:D1:E2:2F:25:93:4E:91:03:2C:25
            X509v3 Authority Key Identifier:
                keyid:CC:9E:34:5A:54:43:E5:47:16:B8:24:EB:79:F1:A5:F6:06:03:02:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/CC9E345A5443E54716B824EB79F1A5F6060302C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC9E345A5443E54716B824EB79F1A5F6060302C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:80:3a:14:29:9d:8c:00:13:8f:e3:f1:0e:63:9b:8e:cc:37:
         af:a0:ff:c7:de:98:3a:84:d6:24:54:f1:ee:52:da:8c:1b:7b:
         cc:fc:2b:61:67:fb:e6:d6:07:97:b6:80:14:8f:df:d9:b0:c8:
         71:3a:1a:53:f9:79:b3:b6:28:1e:d9:c1:6c:56:2c:15:be:fd:
         f6:46:5d:fa:4e:d8:70:ed:f2:c1:6f:d4:5c:73:4d:98:60:09:
         4b:3b:d7:15:78:a7:66:6a:c1:87:31:6d:cf:0f:91:6d:02:97:
         41:10:ca:ac:15:f0:8e:4d:d1:77:f3:35:61:5f:37:94:67:b5:
         ac:4d:c6:c8:d0:44:86:6e:93:2f:08:b4:a6:47:44:1c:dd:46:
         8c:fd:83:1d:bd:aa:06:58:bc:26:66:ed:fe:34:4a:28:d2:2f:
         45:a6:3a:b4:49:65:a5:0a:f0:ba:de:1e:f2:e7:0c:0f:2c:00:
         d6:ec:f9:ca:4c:17:53:df:f7:70:3d:e1:ad:16:95:fe:5b:9a:
         4d:a7:26:68:64:88:74:14:ab:58:d3:47:1a:ea:0e:f0:41:57:
         54:91:49:96:1a:37:b1:a8:ba:e7:8e:91:31:23:cc:b5:43:8e:
         64:bc:43:96:c0:7a:29:1e:74:04:ba:94:3f:ee:0d:41:69:d9:
         da:34:2e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org