Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e38382e302f32312d3233203d3e203238323737.roa
File:                     3137372e3133362e38382e302f32312d3233203d3e203238323737.roa (raw, json)
Hash identifier:          Cj4SWgHNuIXoCjSAdSTJunXkjgDbv7rZaOmq2yzyZlw=
Subject key identifier:   DF:50:47:0E:EE:42:68:E2:DF:B3:A5:F0:01:C3:D0:26:2C:A3:57:C7
Certificate issuer:       /CN=B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF
Certificate serial:       7E94BE722A5855CCE2F5B7AF840ECB5E2701C199
Authority key identifier: B9:2A:7D:29:F2:28:4F:4F:BC:E5:8E:9F:B1:88:3B:BD:15:BE:3D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e38382e302f32312d3233203d3e203238323737.roa
Signing time:             Thu 26 Jan 2023 18:54:54 +0000
ROA not before:           Thu 26 Jan 2023 18:49:54 +0000
ROA not after:            Thu 25 Jan 2024 18:54:54 +0000
asID:                     28277
IP address blocks:        177.136.88.0/21 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:94:be:72:2a:58:55:cc:e2:f5:b7:af:84:0e:cb:5e:27:01:c1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF
        Validity
            Not Before: Jan 26 18:49:54 2023 GMT
            Not After : Jan 25 18:54:54 2024 GMT
        Subject: CN=DF50470EEE4268E2DFB3A5F001C3D0262CA357C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:54:c1:57:95:73:97:a2:17:22:a7:8e:bd:
                    50:8b:d9:f6:6f:86:e0:66:50:9b:bb:eb:9f:3d:0a:
                    58:56:73:4b:55:94:17:f7:ab:01:3b:1a:3d:20:19:
                    f9:af:ca:fa:c7:5f:47:00:2d:0b:bb:05:09:af:66:
                    55:51:72:4b:eb:70:cc:57:78:41:7c:ee:a5:12:6e:
                    c9:77:2b:9d:87:be:d7:ab:48:b2:ff:7d:3a:b4:c2:
                    32:ae:71:e9:2d:88:a8:92:76:06:00:1e:d3:3e:ef:
                    7e:1b:e4:d9:2e:e8:79:4b:07:8b:d1:5f:f9:b9:9f:
                    3d:67:73:be:d5:a3:b2:93:6e:6c:11:ab:45:de:71:
                    04:b7:b7:ee:50:14:51:53:5e:c7:d4:5d:f3:50:7e:
                    63:2c:94:41:ce:2d:e1:be:66:72:5d:49:e7:2c:35:
                    aa:58:b8:00:c5:ab:ac:ea:ec:19:2f:b5:f1:68:f3:
                    9e:47:77:92:ad:f2:0a:c1:f1:59:d1:66:1f:7b:46:
                    b9:25:99:e2:e8:d3:0f:6c:62:a6:53:6b:4a:b8:2f:
                    a1:0c:7e:20:2e:d5:d9:f8:bb:d0:bc:d7:77:5c:31:
                    0b:84:30:b1:23:21:03:ef:92:d9:5e:0e:e4:d2:d0:
                    b2:5f:cb:ce:d1:d3:92:40:dc:56:32:17:f5:36:32:
                    48:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:50:47:0E:EE:42:68:E2:DF:B3:A5:F0:01:C3:D0:26:2C:A3:57:C7
            X509v3 Authority Key Identifier:
                keyid:B9:2A:7D:29:F2:28:4F:4F:BC:E5:8E:9F:B1:88:3B:BD:15:BE:3D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B92A7D29F2284F4FBCE58E9FB1883BBD15BE3DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e38382e302f32312d3233203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:28:5c:6d:d6:b9:9d:79:ad:67:07:2b:4b:29:e4:bf:12:b7:
         a1:9d:ed:a3:00:94:9d:d6:54:ac:40:a9:84:e9:36:5a:4c:c5:
         7c:ed:b5:49:05:71:54:10:6e:e4:a2:7e:e0:20:c7:fd:4c:00:
         70:80:06:e6:a2:a8:e5:4a:02:79:3e:fd:13:29:1e:65:aa:57:
         9e:da:98:bf:4a:55:09:59:9d:3c:72:0f:f3:01:8a:b3:e3:67:
         b8:ce:ac:9b:d0:0b:dc:92:0f:e5:6e:1c:84:50:5f:69:69:9a:
         86:31:c6:d8:f7:1d:1d:dd:30:36:2b:da:79:fd:f9:3b:15:53:
         56:69:96:20:bf:69:e8:f1:34:ef:3c:e8:5a:b3:12:a4:03:af:
         af:e5:32:9e:14:5a:1d:0b:43:79:26:dd:8e:df:42:14:03:54:
         4f:4c:5d:5a:4d:d8:39:47:dc:41:ed:49:5f:4c:6f:65:0d:4d:
         a3:fe:da:96:d8:67:65:a1:c3:cc:6f:f7:81:95:62:1c:51:bc:
         20:2a:a6:b8:90:e3:27:de:58:db:29:ee:72:6a:e6:61:5f:17:
         bd:6e:c7:32:c8:64:fd:aa:14:78:c8:32:d9:3e:55:a9:e0:8f:
         b0:45:d3:6e:31:bc:f2:4a:9b:ed:c0:c6:e1:73:6f:82:60:ac:
         03:6c:e7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org