Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/3137372e3130372e33322e302f31392d3332203d3e203238333239.roa
File:                     3137372e3130372e33322e302f31392d3332203d3e203238333239.roa (raw, json)
Hash identifier:          aqylSHxRyC5WE7AEHde9iJ+eS4krXZ3pU9WZclsTiX4=
Subject key identifier:   AD:C5:AA:2F:41:21:41:8D:EA:70:6E:EE:3F:B3:C3:A7:66:02:69:19
Certificate issuer:       /CN=D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB
Certificate serial:       326641DC201BEEFD78D943BA2A9D7866E166A7D5
Authority key identifier: D8:08:0D:58:CE:4D:30:EF:B1:40:7E:8D:ED:ED:B0:2B:3C:C9:6C:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/3137372e3130372e33322e302f31392d3332203d3e203238333239.roa
Signing time:             Mon 26 Dec 2022 03:00:00 +0000
ROA not before:           Mon 26 Dec 2022 02:55:00 +0000
ROA not after:            Tue 26 Dec 2023 03:00:00 +0000
asID:                     28329
IP address blocks:        177.107.32.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:66:41:dc:20:1b:ee:fd:78:d9:43:ba:2a:9d:78:66:e1:66:a7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB
        Validity
            Not Before: Dec 26 02:55:00 2022 GMT
            Not After : Dec 26 03:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3b:e9:c9:73:48:3f:cf:2a:42:40:19:9b:b0:
                    c7:08:d5:76:1c:56:5f:ad:94:22:ea:9a:09:cf:99:
                    06:c7:1b:7a:12:91:ad:6a:35:91:0a:01:b3:5a:02:
                    b1:bc:49:1f:e5:41:14:b6:69:02:74:f6:c3:a7:90:
                    c2:83:b8:7f:a2:ac:2b:c1:4b:93:ae:42:2b:6b:c8:
                    0a:05:69:54:ff:77:7b:bd:d3:97:49:73:77:0a:6a:
                    1f:f3:32:bb:7e:9e:ea:84:2c:ff:23:64:3c:b9:40:
                    35:98:6f:0d:bb:1f:b7:99:1c:d4:23:3e:3a:0b:06:
                    67:40:3c:b8:65:0e:e1:05:14:9c:f6:87:14:c5:5f:
                    31:c9:17:1c:7b:73:f8:4f:fc:f8:10:5a:07:7a:db:
                    37:23:cd:f1:f1:26:5d:f2:4a:87:52:86:75:7b:79:
                    ff:42:83:6b:ef:11:19:41:3e:9d:42:09:be:a1:16:
                    e8:0c:3a:55:f8:d3:bd:d8:e3:98:a1:5e:82:aa:cd:
                    98:f1:4b:67:42:66:e7:c4:82:e5:1f:d6:6a:e6:fc:
                    2e:d2:ae:65:c5:40:86:6a:f7:a5:4d:e1:65:c8:7b:
                    ed:ee:57:bd:b9:71:c2:a1:86:90:c4:2e:b2:6d:c5:
                    9e:09:c0:ea:42:35:55:6e:44:49:43:55:0c:55:28:
                    d8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C5:AA:2F:41:21:41:8D:EA:70:6E:EE:3F:B3:C3:A7:66:02:69:19
            X509v3 Authority Key Identifier:
                keyid:D8:08:0D:58:CE:4D:30:EF:B1:40:7E:8D:ED:ED:B0:2B:3C:C9:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/3137372e3130372e33322e302f31392d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ba:d1:87:76:56:66:9a:bf:e5:89:f4:43:73:01:19:d6:03:b1:
         df:b5:84:4f:5f:56:cd:6b:e0:a8:cb:c7:27:70:05:07:ec:91:
         e6:55:b4:f7:9f:1f:06:6a:9e:44:44:20:ad:d4:eb:91:52:7e:
         e9:92:1f:b9:0e:bf:67:4a:26:aa:c5:41:e8:40:48:86:ac:6a:
         24:bd:e6:3d:0d:06:34:ef:1b:69:c4:7b:02:5e:d8:53:97:ea:
         81:77:8c:19:b8:0a:17:67:92:02:02:ad:59:ba:61:aa:f0:aa:
         bd:ec:2b:17:d2:d3:48:93:1c:01:89:b9:59:df:da:b8:42:0e:
         15:8f:47:21:2c:dc:1a:34:e1:03:cd:1a:a8:22:1a:fe:54:59:
         20:32:c6:51:20:97:b3:51:c8:20:b3:98:41:43:84:38:15:f2:
         3b:68:76:ae:6b:44:69:5f:10:5f:13:9d:8b:0d:f6:e8:1a:88:
         19:7d:44:6b:0d:e3:9f:6e:92:9b:f2:b7:8f:25:4d:a2:2d:c9:
         62:99:64:0f:ab:fb:e3:f0:10:d8:81:6d:e5:dc:fa:cd:3d:99:
         f7:94:21:51:3c:00:e2:87:21:9b:68:71:9f:29:18:03:cd:00:
         fe:9c:cd:b0:7b:59:72:0b:7a:c0:bf:43:13:a2:f0:ce:2b:bf:
         68:ed:f4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org