Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          58AwzwiBNObCgU44t98tNJSdXTDew9garF5uYR1k5xU=
Subject key identifier:   94:4B:5F:9A:5C:13:C3:85:B8:F2:F3:BE:72:0F:49:20:A7:AE:40:8F
Certificate issuer:       /CN=E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9
Certificate serial:       2DF89878E9BAF065CFBE437DAEF0211941254D9D
Authority key identifier: E8:D0:AB:35:90:AF:D5:70:B1:D7:BE:8C:A6:1A:93:9D:37:E0:06:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa
Signing time:             Sun 19 Nov 2023 06:39:51 +0000
ROA not before:           Sun 19 Nov 2023 06:34:51 +0000
ROA not after:            Sun 17 Nov 2024 06:39:51 +0000
asID:                     263584
IP address blocks:        177.129.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f8:98:78:e9:ba:f0:65:cf:be:43:7d:ae:f0:21:19:41:25:4d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9
        Validity
            Not Before: Nov 19 06:34:51 2023 GMT
            Not After : Nov 17 06:39:51 2024 GMT
        Subject: CN=944B5F9A5C13C385B8F2F3BE720F4920A7AE408F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:f8:a4:de:63:25:c7:24:54:56:ac:af:f4:
                    13:57:46:a7:5a:a2:2e:74:36:88:56:95:00:e9:4f:
                    c6:e4:45:16:df:40:a0:13:5d:63:d1:a7:51:db:f5:
                    94:83:ec:20:03:ee:36:64:20:92:aa:8f:21:a4:7b:
                    55:ae:3b:d3:d4:b3:c7:36:f6:6e:89:9e:da:56:59:
                    39:05:2c:39:e9:8e:9f:32:66:2b:31:56:01:60:76:
                    1e:41:6d:5c:10:42:42:b5:09:f3:b3:77:4f:db:40:
                    5e:53:1d:ab:3f:a0:0c:42:4e:d7:55:2c:37:c2:33:
                    a9:ba:0e:1d:3d:7c:dc:93:bb:88:17:19:d6:67:28:
                    f6:1b:6c:0a:5a:7b:85:37:08:d3:16:5d:62:60:05:
                    d7:35:14:91:57:57:1c:52:ee:7e:a1:14:5c:49:85:
                    f1:40:ed:36:3b:62:f2:29:a4:51:fa:fb:51:5d:05:
                    82:eb:6f:19:5a:1f:1a:8f:68:a5:08:45:6e:33:03:
                    86:9a:2c:a9:13:f6:76:05:e0:e7:06:0c:fb:47:a9:
                    79:d3:78:c6:bb:b3:a1:2a:c1:73:0f:9c:ec:38:e7:
                    bb:03:1d:95:ad:34:51:01:f3:cd:bc:c2:d5:7b:5a:
                    4e:19:91:ee:ce:ef:6f:8f:1c:95:90:0a:61:cc:88:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4B:5F:9A:5C:13:C3:85:B8:F2:F3:BE:72:0F:49:20:A7:AE:40:8F
            X509v3 Authority Key Identifier:
                keyid:E8:D0:AB:35:90:AF:D5:70:B1:D7:BE:8C:A6:1A:93:9D:37:E0:06:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:fc:43:7a:1f:7d:30:85:bf:63:45:bb:9f:6d:08:ba:a4:7c:
         74:46:de:93:68:dd:7f:2c:10:e0:fc:62:cf:d2:28:8d:aa:24:
         34:8b:1a:08:d1:7d:46:ac:d6:03:7e:21:6b:2c:3e:e7:c2:53:
         93:76:e9:4b:2e:f2:e2:b8:2f:44:99:22:99:d4:1f:50:43:a8:
         32:ee:4f:12:d1:99:78:cf:03:51:58:41:5d:02:19:d8:47:77:
         7f:c1:91:61:fb:49:73:b1:62:06:74:db:3d:71:eb:5e:a3:da:
         ea:3c:86:93:1e:65:2e:e0:c1:18:18:0d:0c:79:6b:fa:e8:9b:
         8d:57:0e:a5:6e:6a:7b:75:65:85:ea:ee:4e:85:4a:7e:48:a6:
         a0:e4:02:fb:6c:14:6d:61:0b:51:e6:90:81:c4:80:56:9b:36:
         4a:08:28:d5:04:b4:44:50:bb:f8:18:5b:ff:69:84:11:80:d7:
         7d:c8:0d:90:8b:0a:f8:0c:8b:e2:d6:a0:bc:30:be:c9:0e:c1:
         57:c3:c5:91:62:29:f7:8c:19:b4:34:5c:c3:94:ee:d3:7e:9b:
         94:93:88:ca:a4:79:ed:2d:c2:1e:47:3e:54:ce:4a:db:e8:5f:
         5e:5a:d0:3f:3f:28:85:3d:f1:a3:87:4e:76:7d:1d:48:e5:84:
         33:50:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org