Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3137372e3133302e39362e302f32302d3234203d3e203238323837.roa
File:                     3137372e3133302e39362e302f32302d3234203d3e203238323837.roa (raw, json)
Hash identifier:          M/oQLek1llzboRcCJ2KvNl8PXcbZ9GrTRKcjPrb/HHc=
Subject key identifier:   36:40:8E:65:01:03:3C:10:24:31:07:7B:6B:80:3E:22:C9:BD:22:D7
Certificate issuer:       /CN=0234F91A291644025C2C2460D355272A046B58DD
Certificate serial:       2E907B136FE76F357F7EC9DF60C682E61224DC79
Authority key identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3137372e3133302e39362e302f32302d3234203d3e203238323837.roa
Signing time:             Mon 22 Jul 2024 18:02:15 +0000
ROA not before:           Mon 22 Jul 2024 17:57:15 +0000
ROA not after:            Mon 21 Jul 2025 18:02:15 +0000
asID:                     28287
IP address blocks:        177.130.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:90:7b:13:6f:e7:6f:35:7f:7e:c9:df:60:c6:82:e6:12:24:dc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0234F91A291644025C2C2460D355272A046B58DD
        Validity
            Not Before: Jul 22 17:57:15 2024 GMT
            Not After : Jul 21 18:02:15 2025 GMT
        Subject: CN=36408E6501033C102431077B6B803E22C9BD22D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:18:29:6b:ec:e6:38:af:c1:19:e8:cc:9e:
                    0b:59:3a:a8:ce:2a:fa:46:89:87:2b:ed:52:86:a5:
                    bd:ca:d9:e7:79:41:ca:40:37:94:d8:27:6b:9e:6a:
                    8a:ef:70:0f:e0:7f:5b:0c:c1:d5:c3:e5:31:f6:d1:
                    ec:32:21:16:80:be:69:21:34:3b:7d:2d:e9:03:61:
                    7c:6f:e8:47:2e:45:72:a3:ec:2f:2c:1a:c3:e0:cb:
                    94:45:fe:e1:56:57:3e:01:6a:7d:b3:12:4a:b8:2f:
                    19:b1:f8:16:a6:28:9c:0d:71:d3:8f:49:db:e4:bb:
                    d5:a2:58:58:e7:eb:02:b6:ff:67:a6:07:d8:e9:ee:
                    ef:f5:f2:21:ba:c5:99:3c:d4:b8:a0:dd:be:a9:9c:
                    9c:fb:71:ec:7c:fe:f9:f3:66:f3:8b:e3:d6:36:6b:
                    5e:68:67:ed:29:cd:fe:38:06:94:29:80:6b:7e:03:
                    12:5b:fd:67:ee:42:e5:31:f6:c5:2a:c0:fe:77:ca:
                    56:d4:ab:a1:cb:3b:84:6c:32:5d:51:7f:80:de:99:
                    55:2e:44:d6:5d:d1:c3:ef:e5:3a:e5:f9:9f:a2:3f:
                    02:fe:b8:14:01:6d:0e:af:a5:fa:bf:6e:aa:f5:e5:
                    65:5c:49:16:fb:43:aa:39:11:e8:61:e1:18:f3:84:
                    f6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:40:8E:65:01:03:3C:10:24:31:07:7B:6B:80:3E:22:C9:BD:22:D7
            X509v3 Authority Key Identifier:
                keyid:02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3137372e3133302e39362e302f32302d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:62:fe:a4:ad:29:ca:66:f3:18:3f:da:32:20:f7:39:80:e3:
         97:28:6f:35:7c:1e:05:ed:cb:8b:bd:9a:10:3e:1d:d0:04:cb:
         95:a2:b6:6e:21:f0:9a:a8:d0:83:aa:2a:47:0e:87:0e:90:b4:
         79:86:a3:b1:6d:05:e1:71:b9:eb:45:d7:e4:50:18:de:a1:22:
         66:2a:ef:77:f1:ab:c9:ba:d6:23:32:5d:28:67:69:04:e3:e1:
         8b:53:eb:ac:37:f8:56:4e:d2:ab:68:10:7e:a2:ae:79:b4:f3:
         db:8b:6b:2c:25:fb:2c:4f:f5:95:64:ce:df:c8:02:5d:d9:b5:
         2d:8d:36:f0:e7:8a:75:c1:a7:5b:b1:6b:ae:f2:31:fb:02:b7:
         8a:d8:1d:b9:e3:d0:95:7d:8d:c1:d1:15:e2:09:ff:f2:8b:fb:
         1c:b6:61:ba:8f:bb:a5:78:01:76:43:34:d6:10:33:73:86:da:
         e5:96:c3:0e:ba:ce:cc:8c:d1:2c:bc:65:6a:e9:fb:3d:6f:8c:
         3d:55:10:ae:c2:e2:51:5b:3a:24:65:1e:6b:99:a8:76:1f:5e:
         b9:27:b2:c6:d3:3e:dd:8a:f6:98:48:16:62:48:cf:5d:bf:31:
         d8:dd:9d:e8:70:fe:85:2a:8a:c5:32:c2:fd:8b:ca:e2:43:d4:
         6e:75:17:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:32 2024 by rpki-client on console-ams.rpki-client.org