Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3137372e3132352e32342e302f32322d3234203d3e203532383636.roa
File:                     3137372e3132352e32342e302f32322d3234203d3e203532383636.roa (raw, json)
Hash identifier:          rVhpDOHHvZ5adYBiUT2BZmThd2N0+oui4l3gWnHzum8=
Subject key identifier:   71:A8:0F:7B:06:8C:98:56:58:58:83:87:24:B5:B8:42:27:09:29:82
Certificate issuer:       /CN=DA7937B89F3B0861490B3DD6174BE1D51AD2A94C
Certificate serial:       536FC1EAC21E94108C01C2B844709A2FC1BE5968
Authority key identifier: DA:79:37:B8:9F:3B:08:61:49:0B:3D:D6:17:4B:E1:D5:1A:D2:A9:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3137372e3132352e32342e302f32322d3234203d3e203532383636.roa
Signing time:             Wed 12 Jul 2023 20:56:45 +0000
ROA not before:           Wed 12 Jul 2023 20:51:45 +0000
ROA not after:            Wed 10 Jul 2024 20:56:45 +0000
asID:                     52866
IP address blocks:        177.125.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6f:c1:ea:c2:1e:94:10:8c:01:c2:b8:44:70:9a:2f:c1:be:59:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA7937B89F3B0861490B3DD6174BE1D51AD2A94C
        Validity
            Not Before: Jul 12 20:51:45 2023 GMT
            Not After : Jul 10 20:56:45 2024 GMT
        Subject: CN=71A80F7B068C98565858838724B5B84227092982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:b4:c4:5e:98:7a:8a:89:c6:e3:72:6f:62:
                    c8:f0:ce:de:2e:23:8c:28:e6:66:c1:08:95:bf:a1:
                    44:03:38:77:05:6d:15:19:8d:cb:95:ac:e0:2e:0f:
                    f2:68:e6:24:76:04:b6:5b:15:df:88:a4:5f:f0:93:
                    ad:fc:70:52:93:a6:92:a4:cd:aa:c8:20:78:0d:84:
                    d0:ad:92:22:6e:df:ad:f8:29:6e:d4:59:5b:cb:ab:
                    56:63:ff:8d:5d:59:81:c7:ec:1a:68:9d:e1:5e:9b:
                    6b:fd:a2:58:d6:31:53:cf:b1:ce:33:3a:b4:0a:f5:
                    d2:2b:1f:81:2e:03:35:df:1a:23:95:80:46:3d:7e:
                    c8:c7:42:ba:0e:b8:4e:63:f8:e6:bd:0f:95:84:55:
                    f6:ef:32:f2:40:6a:e9:6e:ec:89:8d:a7:fb:45:8b:
                    1c:8b:3b:8d:ed:03:7b:9c:b6:46:a1:9f:37:82:6c:
                    99:85:ec:80:2f:c1:52:62:90:f9:f1:fa:5b:cb:6d:
                    2a:aa:84:50:33:56:46:24:37:61:99:a5:52:9d:0f:
                    2c:f2:0b:ab:95:ad:68:e6:90:e3:99:15:9c:96:08:
                    65:18:f8:99:72:29:6b:56:94:d6:bf:51:7e:4c:11:
                    46:1b:5b:d0:0f:b0:a1:5c:c7:f8:d6:9a:92:f9:88:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A8:0F:7B:06:8C:98:56:58:58:83:87:24:B5:B8:42:27:09:29:82
            X509v3 Authority Key Identifier:
                keyid:DA:79:37:B8:9F:3B:08:61:49:0B:3D:D6:17:4B:E1:D5:1A:D2:A9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7937B89F3B0861490B3DD6174BE1D51AD2A94C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/3137372e3132352e32342e302f32322d3234203d3e203532383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:f8:3b:90:dd:ed:a5:87:4d:91:75:c5:64:03:13:3b:3a:17:
         4b:22:46:ed:99:c7:f3:08:d0:31:4f:db:9c:4a:af:b2:1b:a8:
         cf:ce:b8:80:f9:19:18:4b:dd:1c:8a:dd:f6:e1:b2:ab:97:36:
         ca:21:92:95:3d:b1:e9:e8:3b:f9:bb:49:3c:32:db:0c:60:7c:
         6b:a1:96:63:23:4b:e6:16:9d:e3:40:db:b2:36:69:f9:7b:34:
         16:87:66:03:47:ba:9d:2f:41:a9:3b:ec:bc:70:22:0f:0d:c1:
         52:06:5c:34:c9:02:d0:48:2b:02:91:c8:e5:7d:d0:58:2d:3b:
         c7:24:fe:db:fe:77:f9:89:de:8d:6e:e3:a2:3d:a0:17:25:52:
         fe:2b:cb:8e:37:92:6f:8d:b2:79:f0:13:fb:73:87:7a:a7:c0:
         4f:1f:05:83:0c:f8:34:d2:28:ca:86:9c:1f:ba:9a:84:46:ca:
         52:3d:c4:40:b5:48:9b:59:a3:19:8b:10:f5:3d:37:86:70:c2:
         b5:67:53:3c:42:03:0d:01:93:0c:82:dc:e1:f6:38:a5:cd:6a:
         78:2d:32:2c:8e:1f:46:79:c8:48:0b:87:59:dd:48:40:72:2e:
         2a:e9:a0:c9:f9:83:e5:24:40:72:32:c3:13:0a:d5:1b:79:80:
         1a:5a:83:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org