Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3137372e36372e3234342e302f32332d3233203d3e20323632353335.roa
File:                     3137372e36372e3234342e302f32332d3233203d3e20323632353335.roa (raw, json)
Hash identifier:          S1rKt3TzvwqIeaveZOOiddnnF93XJIpEuW81EXQEwyI=
Subject key identifier:   7D:E6:C4:80:4F:FF:89:7F:88:BE:CD:42:9D:BC:A6:93:A4:4B:C5:EC
Certificate issuer:       /CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
Certificate serial:       4C2F13CE835FF89CFF9196CD8720C60EC8B5F68E
Authority key identifier: 82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3137372e36372e3234342e302f32332d3233203d3e20323632353335.roa
Signing time:             Thu 04 Apr 2024 07:34:59 +0000
ROA not before:           Thu 04 Apr 2024 07:29:59 +0000
ROA not after:            Thu 03 Apr 2025 07:34:59 +0000
asID:                     262535
IP address blocks:        177.67.244.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2f:13:ce:83:5f:f8:9c:ff:91:96:cd:87:20:c6:0e:c8:b5:f6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
        Validity
            Not Before: Apr  4 07:29:59 2024 GMT
            Not After : Apr  3 07:34:59 2025 GMT
        Subject: CN=7DE6C4804FFF897F88BECD429DBCA693A44BC5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:e2:cf:50:2c:e6:90:d7:4d:db:12:28:37:
                    de:60:a5:24:2b:4b:66:b4:51:a9:4a:96:2e:92:fd:
                    5c:01:5b:97:2a:30:7d:bb:e8:5d:8f:2c:00:7d:9d:
                    94:3a:84:9e:e9:eb:f5:e0:4b:39:b7:67:91:08:86:
                    e3:fa:52:c9:1f:ac:61:56:53:df:4b:04:6b:01:ff:
                    f7:f0:86:d1:73:d5:fa:1b:98:1d:81:a8:68:22:34:
                    c5:fd:04:53:11:4c:90:fd:66:7c:ee:b4:04:32:16:
                    d6:ab:bd:25:79:06:3a:03:3a:3a:ca:34:9f:43:78:
                    ef:30:77:d7:9b:64:80:65:39:ed:c0:58:c9:a0:23:
                    68:a2:14:f5:17:74:3f:12:4e:47:63:a6:4c:f7:bb:
                    6c:4d:01:6d:7c:af:10:55:22:09:bd:89:f1:da:e7:
                    bc:8b:a5:79:b4:c5:70:27:ef:53:88:2b:bd:7e:0d:
                    ec:b7:85:a4:0d:17:bb:46:24:1c:18:f7:d9:57:11:
                    4d:de:b6:36:97:73:ea:fa:61:cc:f6:df:e1:f8:0c:
                    81:38:15:d1:eb:3f:1e:43:07:f5:71:7f:e1:91:e5:
                    0f:99:65:b1:b0:f0:ff:e7:ad:5f:55:52:9d:2d:bc:
                    db:9a:6d:ce:56:60:f3:15:2e:6d:ab:7b:30:5f:b1:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E6:C4:80:4F:FF:89:7F:88:BE:CD:42:9D:BC:A6:93:A4:4B:C5:EC
            X509v3 Authority Key Identifier:
                keyid:82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3137372e36372e3234342e302f32332d3233203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:e5:d9:8d:02:1a:37:e4:38:69:3b:4e:c5:7f:08:9d:f2:57:
         22:fd:5d:c1:51:96:44:53:9f:cd:c8:4f:09:b4:7a:e6:13:bd:
         d6:95:ee:bd:48:cb:95:77:6c:3e:3a:ac:c5:d9:f4:5e:b9:34:
         1a:15:b2:1c:20:0a:d0:f7:82:5d:76:99:dc:15:c0:6d:d7:f6:
         10:e6:fd:ac:41:6d:77:01:c5:49:15:48:83:6c:d1:b4:be:db:
         8f:fb:59:54:e2:bd:fd:0a:21:52:ef:b4:fb:9c:65:ec:42:90:
         44:08:bd:77:a3:42:6f:8c:23:f4:e0:56:67:71:57:f3:f8:d3:
         94:aa:51:30:75:4e:f4:4a:a2:93:05:2e:8b:d4:18:bc:dd:20:
         87:b1:49:0d:e3:68:4d:1b:4c:5c:74:93:3d:ff:8a:43:f8:3f:
         93:35:16:d5:0c:22:f8:fb:4f:3e:02:3b:29:67:5f:94:95:b4:
         5a:91:60:4a:fd:49:67:0c:8c:b7:a2:d6:fb:f6:d4:e7:a4:b4:
         ce:e9:0a:b3:91:5f:9c:3f:57:37:99:25:00:b2:51:2e:0d:ca:
         3d:bd:27:4f:e9:e3:c6:1d:25:13:3a:3d:eb:ba:38:8d:92:3f:
         75:8b:dd:13:1e:0a:00:43:06:82:1a:1c:99:42:f8:3e:9e:fc:
         f2:13:74:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org