Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3131322e302f32302d3230203d3e203238313335.roa
File:                     3137372e34362e3131322e302f32302d3230203d3e203238313335.roa (raw, json)
Hash identifier:          qlfRXLv9KqSFC8IySRmLzff9mn6lgXcFW2ii/Qso7Hs=
Subject key identifier:   C3:AC:05:EF:5F:47:01:65:EF:BC:B4:85:90:C8:2B:7C:BF:C6:1B:0E
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       7ECC5F55C7D1510C09DAC2C5C996FC002231D880
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3131322e302f32302d3230203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:12:11 +0000
ROA not before:           Wed 12 Apr 2023 11:07:11 +0000
ROA not after:            Wed 10 Apr 2024 11:12:11 +0000
asID:                     28135
IP address blocks:        177.46.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cc:5f:55:c7:d1:51:0c:09:da:c2:c5:c9:96:fc:00:22:31:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:07:11 2023 GMT
            Not After : Apr 10 11:12:11 2024 GMT
        Subject: CN=C3AC05EF5F470165EFBCB48590C82B7CBFC61B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f9:7a:c2:52:68:db:95:fa:10:17:24:af:80:
                    67:fc:36:1b:20:23:7f:6f:3b:19:9d:46:ba:b8:1a:
                    43:57:0a:93:3c:0d:0c:ff:08:0b:62:27:7e:c2:12:
                    07:d6:62:19:a7:cf:cc:56:81:da:0e:46:9a:14:a1:
                    48:00:a9:83:42:73:23:0c:2f:3c:e7:ba:05:2b:c8:
                    c4:aa:d6:f3:73:1c:87:02:2f:2b:98:4e:bf:0f:08:
                    09:86:c5:41:98:6d:01:e8:54:7d:f0:4c:bf:8e:84:
                    e0:d2:6a:6f:7c:7d:78:1f:53:d6:e6:2f:03:18:f8:
                    d1:c5:d2:eb:cd:8f:0c:5c:28:d1:74:c1:05:0c:c8:
                    4c:3f:39:2e:48:a4:ed:9d:f2:ea:2c:d5:67:1b:2f:
                    90:23:82:d3:95:62:ec:5b:0d:bf:db:69:96:bf:80:
                    df:21:e4:06:68:92:b6:cc:cd:91:fc:26:c1:31:f1:
                    9f:db:5b:5c:f4:9d:8b:2b:99:27:99:ce:87:83:b4:
                    ce:78:51:17:3f:7b:c8:a7:98:8b:1b:5a:fb:40:e1:
                    a0:aa:aa:d9:e7:8f:1b:19:84:dc:b9:57:91:3b:1b:
                    67:2a:9d:46:35:06:c7:cd:55:f4:32:6f:b3:f6:71:
                    fe:51:e3:d4:aa:1e:10:d2:52:e2:14:10:4a:09:13:
                    64:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AC:05:EF:5F:47:01:65:EF:BC:B4:85:90:C8:2B:7C:BF:C6:1B:0E
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3131322e302f32302d3230203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:02:6d:7c:c4:01:31:d0:8d:3c:4f:b1:14:b1:b2:1f:02:60:
         6c:f5:27:24:3d:c9:c5:68:cb:b9:0c:31:66:81:5f:35:71:48:
         f7:7e:7b:4d:8b:42:49:4e:0d:c3:3c:e4:44:c2:e6:a2:87:ec:
         af:ef:d5:26:0f:23:3b:fc:05:eb:c0:24:95:23:78:de:39:d7:
         e0:94:a7:f3:a7:18:28:33:82:68:bc:b5:d4:4c:1c:bc:1b:ef:
         b3:6f:98:9a:5f:e4:19:00:da:88:35:c0:a2:88:0b:ef:41:81:
         b2:47:69:2b:8e:46:a9:63:03:02:5b:85:26:70:73:e7:f6:0d:
         72:2d:f2:0f:0a:4c:ca:52:8d:5a:28:22:ee:e4:49:b5:02:ab:
         9b:f6:db:de:6d:dd:72:7f:4a:04:54:8e:23:94:59:f0:08:ed:
         bc:d9:07:f4:31:87:23:e5:3b:a9:c4:ff:13:48:61:81:10:63:
         ac:b1:24:cf:e0:9b:d1:85:86:c6:c6:67:19:82:e8:da:1a:d8:
         1f:a3:ab:69:fa:9f:28:12:27:3b:83:17:92:53:d9:10:36:81:
         74:77:e4:d6:55:5a:eb:ed:04:21:a7:d9:64:f0:0b:86:d0:b6:
         9e:46:91:67:f3:cb:12:a9:07:e1:9d:59:b0:2b:e3:fb:b0:ec:
         c9:9b:3b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org