Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e332e302f32342d3234203d3e203238313335.roa
File:                     3137372e34362e332e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          eO+4IQ5xHgtgibfViLS0yQagok7b0+UznLKxf0bVV/A=
Subject key identifier:   02:67:7F:E1:10:5F:CE:F0:F0:05:F8:91:7C:76:00:1F:AA:A9:94:40
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       3E417E92D5D3074172B34DA90F978F6B1BB7054C
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e332e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:06:34 +0000
ROA not before:           Wed 12 Apr 2023 11:01:34 +0000
ROA not after:            Wed 10 Apr 2024 11:06:34 +0000
asID:                     28135
IP address blocks:        177.46.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:41:7e:92:d5:d3:07:41:72:b3:4d:a9:0f:97:8f:6b:1b:b7:05:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:01:34 2023 GMT
            Not After : Apr 10 11:06:34 2024 GMT
        Subject: CN=02677FE1105FCEF0F005F8917C76001FAAA99440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:fb:7f:e0:33:96:1b:35:49:f5:e7:09:86:
                    01:49:84:3f:e8:b8:08:a3:92:a5:c3:90:79:b2:03:
                    39:ea:ab:0d:40:ee:8f:65:c2:b5:7d:64:8b:ee:c5:
                    f8:ff:49:88:29:85:30:62:d3:97:39:bc:ba:5c:78:
                    28:e9:a1:8c:2d:22:a8:b4:51:7f:6f:4f:9e:ac:50:
                    71:6d:c5:84:a9:7f:15:e2:e3:b1:12:5f:46:b4:6f:
                    e0:f4:00:9d:1a:aa:14:22:c6:f0:2b:d4:fa:fd:59:
                    19:60:58:69:b8:04:57:08:99:e4:f3:7a:72:0f:13:
                    da:81:87:21:67:af:c8:ca:32:12:d8:20:ec:a0:1e:
                    38:da:ef:93:72:90:01:be:2d:b8:4f:9a:56:f7:f6:
                    58:65:7c:a7:de:df:b7:a7:63:f7:e4:ba:c1:7f:f5:
                    c6:39:77:a7:d1:23:eb:93:e2:23:96:34:a1:7f:e9:
                    21:54:4e:ac:52:77:a9:a8:9b:19:a1:ae:27:f8:99:
                    2c:2c:25:d5:a1:a0:f4:bd:cf:6f:6b:54:1b:75:3a:
                    3e:86:1d:d8:6c:72:2e:57:82:e3:9e:e6:e2:0d:f0:
                    44:68:cd:83:7e:1b:d5:ed:17:94:f0:4b:a7:e6:6b:
                    be:3a:3c:49:3f:ba:12:b9:78:d0:5a:71:a8:aa:56:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:67:7F:E1:10:5F:CE:F0:F0:05:F8:91:7C:76:00:1F:AA:A9:94:40
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e332e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:c2:01:8c:25:58:d4:d6:69:ea:0d:b4:d0:ce:cc:d1:91:ee:
         a1:d3:98:22:a7:a4:50:f3:f5:10:32:ec:28:05:44:96:89:93:
         a6:9d:99:3a:bc:c4:3b:99:b0:ae:16:31:ba:66:16:0a:a3:58:
         1c:f5:a2:04:ed:ef:38:82:a4:f7:b7:f2:bb:21:57:ee:49:31:
         37:dc:a3:43:3f:db:a4:10:88:4b:f0:92:ce:67:1a:68:07:39:
         a7:ba:12:5f:da:70:57:22:33:6d:dc:ea:b4:d3:b5:46:14:14:
         0f:4b:f5:02:fd:8b:02:35:d1:a7:e4:c5:5b:4e:d7:1f:d5:98:
         27:1e:f5:1c:70:72:c5:a4:04:33:5e:e5:fc:4c:67:f1:17:42:
         bb:ff:3c:9f:28:65:23:39:82:8b:93:e0:72:35:d2:f4:ba:bd:
         8d:8e:f0:7f:a3:f2:db:19:66:f0:8f:93:00:f9:cb:af:00:fe:
         e4:fd:51:b1:aa:e5:bc:65:20:65:59:2f:ea:59:55:dd:97:7f:
         2a:65:f6:fa:b7:f1:dd:4b:f7:a5:09:b9:c3:7b:c9:1d:a0:ff:
         f7:fc:17:be:31:eb:87:fb:d8:b2:95:79:98:cf:3e:34:37:bb:
         3c:d6:05:f4:96:5a:e0:a4:24:bd:bf:3f:34:69:87:b0:37:91:
         93:ec:ab:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org