Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/3137372e3135332e302e302f31362d3332203d3e203237373135.roa
File:                     3137372e3135332e302e302f31362d3332203d3e203237373135.roa (raw, json)
Hash identifier:          vRCa/NRmSRrz6U/wmVE0xSBhV+3jEqiczagqpAGkOTA=
Subject key identifier:   39:E6:59:F7:C4:8C:9E:33:9F:08:03:3E:70:2B:DB:79:AB:09:C7:1A
Certificate issuer:       /CN=E18B3E88FEB8431A1C130BD5E2B9012A3C41145E
Certificate serial:       46E1B156415ED28185CC71244C662611F2036766
Authority key identifier: E1:8B:3E:88:FE:B8:43:1A:1C:13:0B:D5:E2:B9:01:2A:3C:41:14:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E18B3E88FEB8431A1C130BD5E2B9012A3C41145E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/3137372e3135332e302e302f31362d3332203d3e203237373135.roa
Signing time:             Fri 01 Mar 2024 20:03:49 +0000
ROA not before:           Fri 01 Mar 2024 19:58:49 +0000
ROA not after:            Fri 28 Feb 2025 20:03:49 +0000
asID:                     27715
IP address blocks:        177.153.0.0/16 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e1:b1:56:41:5e:d2:81:85:cc:71:24:4c:66:26:11:f2:03:67:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E18B3E88FEB8431A1C130BD5E2B9012A3C41145E
        Validity
            Not Before: Mar  1 19:58:49 2024 GMT
            Not After : Feb 28 20:03:49 2025 GMT
        Subject: CN=39E659F7C48C9E339F08033E702BDB79AB09C71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:5b:f7:17:1c:b3:1d:90:b8:8e:b1:aa:22:
                    1c:10:89:d7:20:ad:40:fa:2a:df:d0:d8:34:65:e8:
                    05:f2:e4:40:ba:29:01:62:aa:cb:72:59:14:ec:d1:
                    58:0f:75:4b:c7:f6:af:07:6a:79:37:f8:39:3b:ed:
                    dd:2c:dc:38:d0:56:0f:cc:65:16:27:ee:08:f4:be:
                    44:98:fd:67:fe:e2:64:dc:b3:1e:ea:06:ea:60:40:
                    04:f7:69:09:39:4d:5f:de:39:41:69:53:18:2b:7d:
                    29:43:b6:c5:48:4b:07:38:2a:e1:85:28:c4:24:e8:
                    81:1c:13:cc:3e:ef:1a:9f:e5:75:72:02:ad:da:38:
                    30:67:44:4d:68:a8:aa:20:78:5a:21:4f:f2:e6:d4:
                    3c:3a:7a:6f:27:1e:3b:32:47:98:d3:0e:fd:60:43:
                    0d:f9:ee:85:bc:4e:28:94:1c:e9:1b:d6:cf:55:fd:
                    7a:b8:cd:f6:f0:8e:72:fb:f5:48:f7:8f:9c:4f:f6:
                    76:52:b6:ee:8f:f2:f0:f0:69:19:ed:fd:5c:22:2d:
                    9d:32:50:48:31:b4:71:20:0d:07:1f:65:59:86:e9:
                    5b:9a:61:c2:f2:fc:03:f5:80:29:43:57:53:8c:87:
                    35:6b:33:fb:73:99:4c:09:7d:72:a1:e4:1b:5c:6e:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E6:59:F7:C4:8C:9E:33:9F:08:03:3E:70:2B:DB:79:AB:09:C7:1A
            X509v3 Authority Key Identifier:
                keyid:E1:8B:3E:88:FE:B8:43:1A:1C:13:0B:D5:E2:B9:01:2A:3C:41:14:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/E18B3E88FEB8431A1C130BD5E2B9012A3C41145E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E18B3E88FEB8431A1C130BD5E2B9012A3C41145E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/3137372e3135332e302e302f31362d3332203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:c3:c2:58:ef:3d:93:9c:39:33:82:ad:ce:ea:0a:b3:06:43:
         fd:25:9a:43:41:fc:30:55:1d:b4:29:a4:c4:5e:ff:ac:a4:6e:
         ae:8f:24:7a:63:62:a2:63:80:31:68:8a:0a:70:3c:32:6b:4c:
         c6:ad:df:fc:d4:d9:57:e4:01:cb:c7:3a:a7:12:cc:39:c0:bb:
         c3:06:10:be:f2:c3:8b:2b:35:7f:26:62:86:65:50:43:4f:ad:
         f1:c4:93:00:da:5a:7e:aa:64:a7:6b:a0:bd:86:f2:d4:79:10:
         9c:3e:c3:6b:4c:33:f0:71:e8:c4:61:2e:6d:da:3a:1f:93:4a:
         78:0d:02:cb:06:cf:77:13:f2:b9:f6:16:9a:6b:00:58:d1:45:
         e1:81:4e:ce:ba:6b:59:83:48:1b:70:7b:bf:30:86:7a:4d:3f:
         71:9a:86:f5:cc:b9:83:be:11:64:9a:12:23:de:a8:8f:39:cb:
         22:79:5d:13:42:3f:8f:5f:93:e4:c6:46:1b:ba:a9:e2:66:46:
         26:26:c6:5f:86:ae:d0:dc:b4:54:d4:69:41:d3:56:ec:2a:75:
         13:7f:7e:a5:75:3b:01:e1:dd:4f:09:2d:c4:d8:12:fe:d2:5a:
         09:d6:bf:fb:e4:b0:cb:3e:91:3a:13:7c:da:ae:12:ba:7a:03:
         61:54:35:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org