Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/0/3137372e31312e36302e302f32322d3234203d3e203532393334.roa
File:                     3137372e31312e36302e302f32322d3234203d3e203532393334.roa (raw, json)
Hash identifier:          H+kCglgobgdYh71bnT0+D2MuQIH7cMx2R9/3qFpTJ2I=
Subject key identifier:   41:9A:B9:3C:13:73:FE:B0:6D:81:14:D0:28:FF:A0:D7:23:DF:70:18
Certificate issuer:       /CN=30F0D45FA9008838BBF85083E8E9A8155A602D9E
Certificate serial:       46B339CE5615E1D7597A2A43FC1F341475E19CF0
Authority key identifier: 30:F0:D4:5F:A9:00:88:38:BB:F8:50:83:E8:E9:A8:15:5A:60:2D:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30F0D45FA9008838BBF85083E8E9A8155A602D9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/0/3137372e31312e36302e302f32322d3234203d3e203532393334.roa
Signing time:             Wed 07 Jun 2023 17:00:00 +0000
ROA not before:           Wed 07 Jun 2023 16:55:00 +0000
ROA not after:            Wed 05 Jun 2024 17:00:00 +0000
asID:                     52934
IP address blocks:        177.11.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b3:39:ce:56:15:e1:d7:59:7a:2a:43:fc:1f:34:14:75:e1:9c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30F0D45FA9008838BBF85083E8E9A8155A602D9E
        Validity
            Not Before: Jun  7 16:55:00 2023 GMT
            Not After : Jun  5 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:e5:60:8f:06:73:0c:c8:7c:b0:4a:80:1a:
                    1d:ef:cb:c2:92:e4:31:4b:33:f3:4c:92:d5:be:0e:
                    1d:8b:26:ea:02:59:fe:ed:64:ab:33:e5:b0:f6:62:
                    ad:a0:22:69:ed:51:05:11:20:93:b3:74:a6:20:24:
                    34:86:df:39:ca:e4:c9:aa:1c:19:5e:c3:57:03:19:
                    29:e6:e5:e4:55:25:75:57:90:8b:cd:1e:fb:90:ea:
                    be:21:d1:81:c2:22:90:64:7b:7b:2c:70:c0:1d:cd:
                    66:f8:5a:dc:c7:f9:ea:50:b9:de:36:68:af:cb:5a:
                    9b:94:da:bf:c9:39:dd:7b:55:a6:3c:7e:a0:c0:e7:
                    b1:8e:f3:97:45:69:4d:f6:81:ed:24:2d:0d:a2:b4:
                    ba:53:64:fe:dc:d6:e5:e3:f8:c2:75:ab:b8:d3:77:
                    e6:c7:d2:1d:87:ff:e5:07:e2:13:e0:92:a6:d1:a4:
                    34:c2:5b:44:18:d3:85:6a:f7:1d:2a:ad:ba:cb:1d:
                    a6:f4:0a:ef:37:dd:77:b2:72:1b:bb:72:d8:5b:ea:
                    14:8c:2a:51:2a:c0:46:28:76:77:a9:95:1f:f3:08:
                    1a:99:63:2a:c8:1e:77:6a:17:a1:bf:b2:ba:26:ee:
                    20:ce:88:03:7f:0f:7c:8e:06:aa:07:b9:59:96:60:
                    97:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9A:B9:3C:13:73:FE:B0:6D:81:14:D0:28:FF:A0:D7:23:DF:70:18
            X509v3 Authority Key Identifier:
                keyid:30:F0:D4:5F:A9:00:88:38:BB:F8:50:83:E8:E9:A8:15:5A:60:2D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/0/30F0D45FA9008838BBF85083E8E9A8155A602D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30F0D45FA9008838BBF85083E8E9A8155A602D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/0/3137372e31312e36302e302f32322d3234203d3e203532393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:18:14:e0:84:cb:68:f8:6c:c1:99:d0:d5:da:ff:e2:fb:cf:
         fd:54:bc:9d:93:56:c6:cf:8e:bc:34:f5:d2:af:7a:83:31:f5:
         cb:e1:2c:2d:0e:fe:f6:96:c5:95:e0:78:cb:3b:0b:23:44:a7:
         f3:b1:67:2d:48:ca:b0:cd:ff:5a:02:2e:fd:37:39:21:16:a4:
         5b:c4:c5:1a:8d:e2:6b:3a:74:7b:41:0b:71:58:26:dc:24:6e:
         33:fc:0e:3f:dc:8b:5c:36:93:1d:e9:0a:99:51:b5:b3:18:ea:
         77:14:35:56:ed:de:3b:d9:93:c8:65:2b:70:e3:e9:7d:26:ef:
         d9:4a:4a:8b:a2:a4:e2:fc:6a:28:ac:3c:87:78:66:80:61:d1:
         93:90:e0:68:b6:1b:b9:91:b8:28:fe:19:85:1e:94:18:b3:e3:
         54:99:f6:ed:77:06:e7:5d:2b:0b:71:24:8e:1c:5c:76:60:91:
         00:39:57:8b:ec:fb:7e:95:1d:d9:47:8c:d9:96:6f:8e:f4:5a:
         d3:f2:f1:20:3b:4d:b0:f4:62:73:53:2c:93:40:5f:40:e3:97:
         43:35:28:63:3e:80:eb:65:1e:db:28:ef:96:ed:3c:18:68:25:
         c0:6e:84:86:84:86:88:73:38:3f:43:cf:94:ea:73:9b:0c:3e:
         ce:98:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org