Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3230382e302f32322d3232203d3e203532393635.roa
File:                     3137372e37322e3230382e302f32322d3232203d3e203532393635.roa (raw, json)
Hash identifier:          F6pTZwlHTbXEng9T1RAeRs2CQUKsjySlxyMiBFf0FHM=
Subject key identifier:   4E:A9:7A:FA:86:0D:9A:EC:CF:0F:C8:BB:95:82:C4:60:3D:30:1B:96
Certificate issuer:       /CN=3235A266D447CA3B72A35513BA9761F5805F23E2
Certificate serial:       2F564DA85D2D9C7F495C0DD25D41E94FD8F946B7
Authority key identifier: 32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3230382e302f32322d3232203d3e203532393635.roa
Signing time:             Fri 10 Mar 2023 11:04:02 +0000
ROA not before:           Fri 10 Mar 2023 10:59:02 +0000
ROA not after:            Fri 08 Mar 2024 11:04:02 +0000
asID:                     52965
IP address blocks:        177.72.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:56:4d:a8:5d:2d:9c:7f:49:5c:0d:d2:5d:41:e9:4f:d8:f9:46:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3235A266D447CA3B72A35513BA9761F5805F23E2
        Validity
            Not Before: Mar 10 10:59:02 2023 GMT
            Not After : Mar  8 11:04:02 2024 GMT
        Subject: CN=4EA97AFA860D9AECCF0FC8BB9582C4603D301B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3c:88:4c:d7:07:7b:bb:7c:e6:47:f4:4a:49:
                    bc:e6:77:e2:f4:57:b4:50:2d:af:40:72:5d:6b:54:
                    1c:d3:22:ad:b5:0b:32:62:39:4e:f7:59:69:01:12:
                    40:7a:f9:6e:f4:e8:60:c9:de:b3:9d:ba:65:ae:d9:
                    66:a6:b6:ad:23:06:c7:e2:37:be:0d:0c:62:90:9e:
                    b3:6a:09:93:69:d6:c5:29:61:d4:77:70:de:fa:bc:
                    40:ba:9c:0d:47:84:36:c6:58:af:9e:a1:35:9c:e3:
                    e4:61:fd:db:f8:31:f9:6a:d9:3a:41:cc:45:73:47:
                    04:f6:d5:86:5b:d4:33:8d:0c:81:e7:7e:49:51:e8:
                    6b:0b:22:dc:3c:49:53:bf:0d:1c:fe:e1:5d:56:5d:
                    10:b5:16:47:4f:a9:e8:ae:6d:04:a2:86:c8:42:99:
                    16:52:50:44:d5:2b:f1:40:ba:e0:f7:ab:53:9f:9f:
                    5d:8a:9e:0b:34:75:69:8e:6a:18:22:34:52:dd:c7:
                    fc:52:a4:b6:97:16:65:3f:5f:5c:1d:80:0d:06:4b:
                    31:74:fb:9e:89:64:72:51:ac:35:3e:12:45:dc:12:
                    c2:9d:3d:11:3d:d7:e3:44:c5:c2:c7:15:bc:76:b1:
                    fe:19:75:5d:de:79:f4:a6:04:15:56:50:a5:b3:ed:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A9:7A:FA:86:0D:9A:EC:CF:0F:C8:BB:95:82:C4:60:3D:30:1B:96
            X509v3 Authority Key Identifier:
                keyid:32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3235A266D447CA3B72A35513BA9761F5805F23E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3230382e302f32322d3232203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:c8:51:e8:6e:3d:ee:26:6b:1d:22:23:75:b8:99:40:2c:9d:
         c7:8e:94:bc:93:6d:1a:32:51:85:25:b5:cd:f3:04:90:cc:05:
         cf:a7:78:a7:ae:93:bf:0e:8d:54:01:8e:f6:3b:75:64:95:6e:
         a4:2b:32:cc:90:fe:ef:60:87:bd:18:b5:75:80:b0:ea:01:a9:
         a8:df:5a:6f:36:16:a6:57:0b:8b:d6:e5:d9:2a:ba:2a:ab:c1:
         0f:45:5f:15:82:b8:ab:1d:ba:71:6b:4f:5e:ff:12:9e:8a:c9:
         0c:f8:57:37:63:5a:60:2e:b7:78:ef:1f:78:d5:6d:86:ce:79:
         53:d7:1d:b9:8b:06:d7:f2:4e:a6:94:ec:d6:e2:96:78:b3:ea:
         47:1c:a9:50:d1:6b:32:ee:f7:81:14:d9:35:63:2f:aa:9f:3a:
         94:a6:c4:4c:0e:31:79:fd:87:a8:01:0b:61:17:e9:88:43:97:
         e5:d0:c7:ba:30:cb:f9:3b:ba:fc:09:b6:3d:bc:83:94:2f:0e:
         d6:cc:56:10:72:b2:38:b6:85:b8:24:e7:e9:ca:a6:08:72:7d:
         72:5f:0f:cc:69:e5:a5:10:37:a2:8f:8c:3d:7e:7b:6a:ab:e2:
         a8:d2:cf:60:8d:ef:c1:95:3e:de:3d:12:34:98:66:45:33:1d:
         95:28:af:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org