Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3130382e302f32332d3233203d3e203238313335.roa
File:                     3137372e34362e3130382e302f32332d3233203d3e203238313335.roa (raw, json)
Hash identifier:          e57sXeGJe8heunsbbYmI0NGrN9dAzxlkDLyKs/ZK2p0=
Subject key identifier:   B6:10:C8:C7:8B:79:1C:41:74:2E:08:26:49:7C:E9:7A:3E:77:3A:9E
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       4EFAC204AC19146003881F1AA27E270AD9D98787
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3130382e302f32332d3233203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:11:56 +0000
ROA not before:           Wed 12 Apr 2023 11:06:56 +0000
ROA not after:            Wed 10 Apr 2024 11:11:56 +0000
asID:                     28135
IP address blocks:        177.46.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fa:c2:04:ac:19:14:60:03:88:1f:1a:a2:7e:27:0a:d9:d9:87:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:06:56 2023 GMT
            Not After : Apr 10 11:11:56 2024 GMT
        Subject: CN=B610C8C78B791C41742E0826497CE97A3E773A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:eb:0f:e1:d3:32:dd:62:14:ec:e8:8b:fc:41:
                    17:da:76:c0:89:2e:4d:5d:df:8e:70:db:df:17:35:
                    55:f2:f1:be:b4:16:08:19:0c:7a:ec:a7:60:4c:91:
                    bd:81:71:82:ea:17:9e:70:18:fa:d8:52:b1:4d:91:
                    7e:72:99:13:0f:cb:96:85:ed:37:55:fc:a0:3f:73:
                    63:4e:cf:51:ef:de:11:6c:44:c2:43:ea:ae:83:2f:
                    6b:8e:2a:e0:39:3c:99:f8:34:a7:77:de:51:20:f0:
                    98:cc:34:54:c0:c5:fd:8d:2c:97:67:86:de:a0:6e:
                    75:58:1e:c4:ff:a7:e3:fc:3a:02:19:18:96:0b:d2:
                    46:c3:40:d7:54:65:c8:48:48:24:ea:98:97:7d:c5:
                    00:04:3d:a1:a8:b6:96:b5:24:53:b7:c1:ca:45:ca:
                    3d:47:67:36:9e:13:a9:88:91:45:53:80:86:09:8b:
                    0e:bb:2c:bf:8a:c9:4b:18:f3:3d:77:4a:1c:e3:c7:
                    2c:31:73:9a:9c:64:81:4d:ec:91:a2:62:80:b5:d0:
                    13:44:d2:03:a2:30:9c:86:c4:1e:39:6d:c7:8e:6a:
                    b6:01:fa:d1:7a:79:69:38:93:85:29:10:50:f3:d3:
                    f1:d8:7c:63:e8:c8:e8:2a:45:81:95:8e:91:2a:6f:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:10:C8:C7:8B:79:1C:41:74:2E:08:26:49:7C:E9:7A:3E:77:3A:9E
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3130382e302f32332d3233203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:ea:fb:48:d8:7d:00:77:09:eb:e4:eb:f1:83:98:72:48:8f:
         e9:8d:4d:b2:5f:a1:b1:76:3d:c1:f1:bb:16:d8:61:22:e7:b2:
         b7:22:cb:50:2d:ac:69:d4:55:de:5d:77:5f:fb:d5:e4:62:36:
         b3:c3:b0:23:bb:12:00:a0:e7:42:d6:8c:b1:8d:03:aa:0e:12:
         00:e1:ff:7e:98:d5:b0:f9:fa:6c:18:0c:d1:12:4b:2d:3b:1e:
         db:ac:0c:f2:3f:e4:60:2e:3d:0b:3b:9c:c0:84:bc:da:16:7c:
         7a:a4:39:94:49:80:a1:2d:58:34:a2:73:55:7e:40:32:67:dd:
         6c:ad:84:ee:0f:49:c2:88:61:1e:94:cf:04:96:fa:0e:3d:c3:
         eb:70:97:fb:c1:a5:a4:4b:33:9c:a7:92:d5:33:fa:4b:de:71:
         3a:5b:0f:b9:d3:af:dd:49:6c:d9:35:5d:e7:24:da:1e:e3:e7:
         0d:4c:82:ab:c2:0f:8b:f8:e4:e8:56:d6:a2:ab:85:11:f2:8e:
         a9:4b:c5:96:97:d5:26:6a:3f:3f:94:cf:0e:e6:d1:b3:f4:c9:
         65:c8:6e:df:b9:a0:65:47:6b:53:53:6b:6b:0c:bc:09:66:1e:
         46:e6:18:dd:88:c5:97:26:2d:f0:2c:7b:9f:05:28:9d:46:3a:
         f3:6f:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org