Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/3137372e39322e3133302e302f32342d3234203d3e20323633313038.roa
File:                     3137372e39322e3133302e302f32342d3234203d3e20323633313038.roa (raw, json)
Hash identifier:          KsPYPggZ449or3kAZAv+188AVhwDQT0OpSOTLcFsyf8=
Subject key identifier:   5F:2D:F9:02:A3:91:6C:45:74:C0:14:1A:85:57:7D:3C:63:56:8D:A1
Certificate issuer:       /CN=F123D9E392A5F8F42BBC61DA7F8201794967AA31
Certificate serial:       0A9D833388B9B6094BACF0F5DD5978CB0B241B4E
Authority key identifier: F1:23:D9:E3:92:A5:F8:F4:2B:BC:61:DA:7F:82:01:79:49:67:AA:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F123D9E392A5F8F42BBC61DA7F8201794967AA31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/3137372e39322e3133302e302f32342d3234203d3e20323633313038.roa
Signing time:             Mon 22 Jan 2024 14:43:38 +0000
ROA not before:           Mon 22 Jan 2024 14:38:38 +0000
ROA not after:            Mon 20 Jan 2025 14:43:38 +0000
asID:                     263108
IP address blocks:        177.92.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9d:83:33:88:b9:b6:09:4b:ac:f0:f5:dd:59:78:cb:0b:24:1b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F123D9E392A5F8F42BBC61DA7F8201794967AA31
        Validity
            Not Before: Jan 22 14:38:38 2024 GMT
            Not After : Jan 20 14:43:38 2025 GMT
        Subject: CN=5F2DF902A3916C4574C0141A85577D3C63568DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b7:50:14:3b:8e:82:4c:d1:cc:a2:73:a4:a2:
                    e3:1d:9f:04:b6:1f:13:5f:6f:ed:77:90:f0:87:a0:
                    89:62:e6:f7:12:50:b4:25:ce:f3:96:16:1d:c5:cd:
                    bf:51:be:fa:ad:2b:4c:d7:81:27:ee:61:78:b8:10:
                    61:d5:e9:35:14:a6:22:36:0c:db:f3:a7:13:33:69:
                    1a:14:b6:2e:e9:70:5c:7a:78:15:29:dd:eb:60:1e:
                    c7:7b:15:d8:8f:e3:f0:af:68:50:3b:a8:81:f8:90:
                    65:49:09:a9:5b:93:2e:5d:8e:15:cc:54:5e:93:8b:
                    bf:9a:89:0c:48:fd:c3:7f:4a:b4:83:94:c9:c6:7f:
                    2b:b6:d7:a5:91:fb:80:9b:05:d4:1c:a4:f6:07:97:
                    e9:0d:9c:fb:2f:0c:f5:f7:c6:4a:b4:38:87:56:72:
                    3b:d7:17:4b:cf:7c:cc:55:b9:08:9b:12:7e:a4:b7:
                    69:37:bb:68:80:99:40:37:a7:89:3d:e8:c7:8d:da:
                    04:7b:ca:db:1e:74:92:d2:70:f9:d4:8c:51:fe:8c:
                    28:1c:d9:da:f7:af:38:0d:2e:99:14:66:d6:f3:a5:
                    7a:0b:f6:06:8d:95:2a:f8:cf:82:0b:ce:6d:e9:9f:
                    c3:47:cd:12:11:7a:f2:4e:b0:4b:e5:8e:f5:17:3a:
                    57:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2D:F9:02:A3:91:6C:45:74:C0:14:1A:85:57:7D:3C:63:56:8D:A1
            X509v3 Authority Key Identifier:
                keyid:F1:23:D9:E3:92:A5:F8:F4:2B:BC:61:DA:7F:82:01:79:49:67:AA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/F123D9E392A5F8F42BBC61DA7F8201794967AA31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F123D9E392A5F8F42BBC61DA7F8201794967AA31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/3137372e39322e3133302e302f32342d3234203d3e20323633313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:a2:ca:13:13:12:7b:59:a3:1a:8d:5a:57:5c:d5:5c:0d:0b:
         6b:80:cf:49:fe:2e:39:ff:db:86:5a:8e:49:3c:a1:fe:b6:fa:
         b8:bf:d0:ba:08:f2:77:a6:05:0e:08:31:b9:f6:73:45:ec:a0:
         92:42:91:f8:06:37:00:7c:b5:1d:d0:e4:bb:a3:a0:22:4a:31:
         b9:66:20:c6:1f:fc:d8:67:f6:49:41:b6:04:0b:1d:59:9d:a7:
         43:a7:ca:04:b1:3c:68:b8:1f:41:a5:09:18:fb:e3:ce:4b:43:
         58:1d:2c:56:03:92:a8:7d:f5:24:e7:50:60:d9:41:7f:c6:d3:
         df:38:ca:48:dc:e4:06:03:b2:0d:5b:4f:dc:83:d2:26:6b:a7:
         5d:00:7f:7d:2d:99:43:82:d9:b7:f6:13:5c:f5:b2:a7:73:c8:
         26:6d:5c:9d:61:c6:b9:7a:4b:c9:c2:62:01:c2:ed:a2:40:4b:
         52:df:ac:ea:da:ea:43:06:af:79:0e:dd:30:37:5e:28:b0:30:
         72:4e:6a:2e:85:69:f6:59:f4:2d:e7:a5:f8:c2:19:21:8d:69:
         41:e8:cc:8a:46:52:75:3d:3a:ef:b9:ec:c8:17:79:14:61:6e:
         03:90:17:1d:a7:41:1b:ea:84:05:1d:0a:6c:fe:88:03:04:d3:
         b7:18:aa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org