Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32342d3234203d3e20323731303432.roa
File:                     3137372e33362e31362e302f32342d3234203d3e20323731303432.roa (raw, json)
Hash identifier:          6sCcE1030CVa5YglnE9Hf08VuS8pkNtfr3bqv2dvo/Y=
Subject key identifier:   67:29:FE:A9:B7:0B:AD:D1:EE:18:0C:F4:A9:5F:44:43:69:DA:8B:05
Certificate issuer:       /CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
Certificate serial:       03EAD2A77B1D78D2BEFF46EB7FADBB5424E42F63
Authority key identifier: 61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32342d3234203d3e20323731303432.roa
Signing time:             Tue 07 Nov 2023 16:19:17 +0000
ROA not before:           Tue 07 Nov 2023 16:14:17 +0000
ROA not after:            Tue 05 Nov 2024 16:19:17 +0000
asID:                     271042
IP address blocks:        177.36.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ea:d2:a7:7b:1d:78:d2:be:ff:46:eb:7f:ad:bb:54:24:e4:2f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
        Validity
            Not Before: Nov  7 16:14:17 2023 GMT
            Not After : Nov  5 16:19:17 2024 GMT
        Subject: CN=6729FEA9B70BADD1EE180CF4A95F444369DA8B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a6:99:cb:02:80:f5:e3:0e:a8:2b:c9:0b:3b:
                    dc:ba:b5:28:50:88:2a:c6:af:4f:a9:e7:5d:c8:f0:
                    25:df:a7:1b:5f:23:2b:93:aa:29:ae:94:b0:d9:f9:
                    51:5b:e2:11:b4:ae:4e:f8:65:a0:91:c6:83:a7:1a:
                    00:43:3e:ff:a4:17:07:18:a9:63:0e:bf:d0:a2:67:
                    d8:bb:82:5f:19:2b:e5:83:70:f9:55:f1:05:04:2c:
                    3a:36:ee:1c:fe:77:c5:6b:c5:40:12:b6:e7:10:96:
                    23:5b:c9:ce:3f:30:06:77:25:c6:80:1f:6e:49:1b:
                    8d:8d:37:d4:e9:3b:17:63:72:ae:3a:a4:b2:a4:1e:
                    5d:77:15:31:f5:ee:f5:44:cd:d3:9f:18:00:d7:25:
                    41:d7:db:b1:51:a0:2c:ef:49:40:21:ab:8d:b0:cb:
                    75:7f:87:75:a0:88:3f:3f:9c:88:49:52:cc:6b:99:
                    68:dc:4d:0e:63:a9:1a:f2:b9:41:e1:f6:3e:4e:ad:
                    03:eb:26:ef:a0:98:ac:a2:6d:ac:2f:9a:1e:7f:a0:
                    e0:7b:a3:d0:5a:e0:5e:2c:a7:ae:2f:cc:2a:49:e2:
                    a5:ee:d2:37:98:87:d5:63:0c:5b:f3:51:e6:16:bb:
                    a6:7d:8b:35:6d:82:15:27:eb:c2:4f:62:bd:c4:e2:
                    e1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:29:FE:A9:B7:0B:AD:D1:EE:18:0C:F4:A9:5F:44:43:69:DA:8B:05
            X509v3 Authority Key Identifier:
                keyid:61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/3137372e33362e31362e302f32342d3234203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:0f:ec:0c:40:a2:f7:88:20:de:ad:dd:c4:a7:7f:e1:01:
         b4:26:ce:0b:3b:d6:3c:05:50:49:1c:03:48:51:a6:c4:df:94:
         97:1f:47:79:8d:d9:2d:53:f1:e8:3e:de:5f:91:2f:3a:5d:dd:
         04:45:24:b2:03:3d:48:aa:df:1b:82:57:69:3e:67:3c:aa:72:
         e9:ea:a3:e0:96:54:eb:25:02:0c:7c:e7:f4:34:07:cf:b6:4f:
         d2:c8:14:5d:0a:e8:4b:fa:0a:4e:d5:1f:40:f9:5c:37:96:c0:
         29:1f:0c:43:af:24:01:bc:e9:13:3c:83:57:8d:20:df:c2:8b:
         97:b0:2c:14:a4:43:8c:5c:b8:0e:c0:9c:ea:4e:2e:e1:df:dd:
         7e:2f:70:42:f5:6b:49:8c:21:fe:b9:d7:63:13:d5:3b:b4:65:
         2e:76:57:14:32:6b:e1:de:87:67:49:e8:0e:9c:db:21:02:9b:
         68:d4:e7:50:03:6e:f7:ec:12:c7:14:27:19:fb:eb:4d:1f:67:
         df:de:06:ff:fc:7f:9b:b6:6c:b4:28:e4:ba:fa:88:3f:3f:b2:
         67:b9:fa:5e:b9:da:e2:59:ad:76:d3:23:38:c4:6a:55:9c:00:
         b4:37:7f:be:7d:82:57:f9:e8:6b:75:5b:3f:33:51:e3:a7:1a:
         5d:97:b1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org