Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa
File:                     3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa (raw, json)
Hash identifier:          gx/8b1r+nKWOs2DV46y3a5CRvsyIVh3Prw2FOtibtE8=
Subject key identifier:   E1:61:E1:76:F6:EB:12:5B:E8:C3:18:53:F4:DB:72:E8:4F:CF:DF:C7
Certificate issuer:       /CN=3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2
Certificate serial:       7AE3A2645AD839F0657A82AE90FA90213CE7B5D9
Authority key identifier: 32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa
Signing time:             Tue 19 Dec 2023 12:53:05 +0000
ROA not before:           Tue 19 Dec 2023 12:48:05 +0000
ROA not after:            Tue 17 Dec 2024 12:53:05 +0000
asID:                     263441
IP address blocks:        177.91.128.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e3:a2:64:5a:d8:39:f0:65:7a:82:ae:90:fa:90:21:3c:e7:b5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2
        Validity
            Not Before: Dec 19 12:48:05 2023 GMT
            Not After : Dec 17 12:53:05 2024 GMT
        Subject: CN=E161E176F6EB125BE8C31853F4DB72E84FCFDFC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5f:c9:14:8d:5d:51:ed:07:12:66:b5:98:35:
                    97:a0:5d:f4:19:5b:4a:74:b3:ce:84:91:4c:3e:93:
                    84:93:f6:21:df:ad:0d:5a:ca:c3:68:71:1d:e9:bb:
                    15:b3:3a:3d:c5:fe:e4:f4:15:b6:37:c7:a4:65:77:
                    15:d9:cb:b4:f4:8b:a7:83:8c:f7:93:37:4e:b7:2d:
                    b6:3e:60:02:b1:16:e9:bd:4d:e8:4f:f4:b4:05:25:
                    47:43:0d:92:59:90:e0:c4:d7:5c:ce:16:9f:8a:23:
                    c0:3a:84:a2:89:48:7b:f5:5c:1f:b3:43:fd:4f:9c:
                    09:e9:f6:45:6a:c7:5b:72:4e:e4:73:8d:62:5a:29:
                    0b:7d:09:d5:e4:55:f9:31:c8:d3:34:46:5a:e5:2b:
                    30:0e:92:5d:7b:6c:ee:3e:31:ee:70:08:ae:7f:41:
                    ad:af:5e:7a:dd:36:87:fb:2d:31:7b:c5:f3:d1:e8:
                    c9:f8:ab:89:e6:78:71:7b:aa:c0:34:8b:02:4b:05:
                    dd:74:0a:03:d8:78:2a:d2:6f:75:46:0e:e9:56:55:
                    5f:62:9f:3c:3c:c9:d8:e0:28:d6:27:5e:08:b5:37:
                    8b:cc:d6:b3:fc:17:56:dd:c6:4a:29:03:84:b4:0a:
                    12:00:82:3a:be:c3:a2:bf:00:63:1f:d5:74:cf:6a:
                    0d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:61:E1:76:F6:EB:12:5B:E8:C3:18:53:F4:DB:72:E8:4F:CF:DF:C7
            X509v3 Authority Key Identifier:
                keyid:32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137372e39312e3132382e302f32322d3332203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:f4:52:1b:0d:74:ae:46:07:71:3e:33:d0:6c:4a:39:34:a6:
         19:81:65:3c:6f:26:84:12:e6:c3:ee:14:36:ae:5d:7d:0b:e0:
         93:4b:a8:21:e4:3f:b4:d4:04:10:28:69:6e:8f:e8:09:8e:e6:
         3d:88:59:d2:0b:8d:68:7f:0b:c4:b4:5e:ff:c6:cb:c0:2a:a0:
         0b:e6:80:d0:4f:af:ee:3d:92:81:87:bf:cf:82:1f:79:b6:99:
         54:16:7d:71:94:df:8e:a0:a9:81:a7:7f:00:c4:8f:92:59:83:
         55:53:1d:68:8c:a9:71:05:0a:c3:a3:20:91:af:8b:e4:43:20:
         5a:53:71:7c:dc:3e:3d:5a:a2:0c:0d:3b:1a:23:75:74:45:8c:
         18:48:5c:0e:14:c2:e6:d9:be:2d:24:41:76:4c:5b:03:c0:90:
         85:af:c8:0c:1e:37:39:55:3f:ae:f3:d9:33:0f:88:64:78:b3:
         bd:4f:f7:70:9f:1b:18:dd:20:a4:d1:9d:41:97:de:52:ff:6a:
         dc:3b:9f:fc:17:bc:11:c2:ac:d6:5d:f3:e9:bf:86:f0:3e:15:
         09:4e:80:6c:b3:d3:d4:a8:40:6e:a1:b8:41:31:ac:ef:d0:54:
         0a:5d:94:07:60:9a:dd:2c:8a:75:9b:08:1e:55:8b:28:bc:84:
         1a:a3:c5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org