Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32342d3234203d3e20323633343435.roa
File:                     3137372e39312e3136342e302f32342d3234203d3e20323633343435.roa (raw, json)
Hash identifier:          xb0O4UbNmpM8QY+pPQ7mbxp/VW6bSvIkOsZZPEAlKwc=
Subject key identifier:   DA:98:35:5E:B4:09:52:E1:02:DF:9E:C2:DF:EA:5C:59:5C:28:00:03
Certificate issuer:       /CN=F1076108B5AD0183155EEC96C47E216B36ED588E
Certificate serial:       2650E3613797078AF69DE38D323A4D5E164CDC47
Authority key identifier: F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32342d3234203d3e20323633343435.roa
Signing time:             Thu 04 Jan 2024 14:41:54 +0000
ROA not before:           Thu 04 Jan 2024 14:36:54 +0000
ROA not after:            Thu 02 Jan 2025 14:41:54 +0000
asID:                     263445
IP address blocks:        177.91.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:50:e3:61:37:97:07:8a:f6:9d:e3:8d:32:3a:4d:5e:16:4c:dc:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1076108B5AD0183155EEC96C47E216B36ED588E
        Validity
            Not Before: Jan  4 14:36:54 2024 GMT
            Not After : Jan  2 14:41:54 2025 GMT
        Subject: CN=DA98355EB40952E102DF9EC2DFEA5C595C280003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e8:09:93:5f:2b:64:3f:33:42:c6:d6:ad:42:
                    ef:3a:cd:4f:3d:fd:e0:79:82:f9:9b:b0:f0:74:5a:
                    a2:88:e9:c5:2b:18:b3:2a:0e:64:ca:3e:fc:7b:36:
                    e7:6c:24:78:0f:d8:e2:82:73:a1:9a:9c:ac:50:ad:
                    8f:a5:23:23:e6:1b:33:a3:74:ea:2c:9c:94:35:c2:
                    e3:7f:b3:6f:35:01:07:73:c3:d1:df:d0:4c:f2:6b:
                    4e:73:fc:ca:67:47:53:22:fb:fe:24:1a:d4:0d:04:
                    18:24:7b:0e:88:c0:43:45:0c:fc:6a:12:81:1b:89:
                    f4:22:a3:67:d2:35:05:a7:09:f0:f2:d4:9d:db:bf:
                    71:63:d3:fc:a6:59:7b:39:92:b8:1e:fd:f4:f8:2b:
                    67:3a:28:7d:03:21:67:0c:a2:92:4d:f4:e3:b9:01:
                    e7:34:55:0f:41:b7:58:7a:2f:c3:9b:03:bd:9b:72:
                    bc:83:87:5e:3b:da:41:fc:d2:29:c7:27:27:6a:f1:
                    23:ab:4a:52:5c:cd:89:1a:57:b2:73:a1:c7:55:9e:
                    9a:10:17:03:3c:c5:a2:64:77:84:bf:cd:6e:8a:94:
                    ff:bf:f3:4e:ee:f3:0e:b5:e1:56:19:fc:e7:6a:c4:
                    fb:be:8e:7a:c6:cb:b6:83:07:a8:94:d0:e6:a8:b6:
                    54:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:98:35:5E:B4:09:52:E1:02:DF:9E:C2:DF:EA:5C:59:5C:28:00:03
            X509v3 Authority Key Identifier:
                keyid:F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/F1076108B5AD0183155EEC96C47E216B36ED588E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32342d3234203d3e20323633343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:2d:0e:02:b9:aa:9e:22:ce:97:82:63:58:d9:e9:77:ce:b0:
         86:73:f3:8b:03:53:4c:54:cb:2c:3f:8a:dc:11:ae:e6:92:c7:
         65:31:ff:04:f8:52:07:0c:6c:e1:1d:c9:3a:7c:68:47:b4:83:
         7e:7f:95:66:c4:c7:5f:f9:45:ce:be:a6:c3:c6:5e:fd:b8:f9:
         ec:62:0c:cf:53:ce:78:bd:ae:bf:9e:8b:0d:c4:00:d1:3b:7a:
         9c:af:22:41:5a:81:41:02:0c:b5:fb:91:56:b5:1f:7a:85:30:
         ea:09:51:7f:db:f9:6f:f2:77:ad:e4:ac:c0:1f:ed:aa:0a:a3:
         7e:18:93:b2:bf:25:4f:50:98:af:fe:67:6d:f0:7d:92:fc:88:
         9f:ef:2c:ef:ac:9d:62:84:30:8f:3d:57:69:48:fb:12:73:3a:
         f4:cc:5d:2b:52:fe:29:69:85:eb:f3:d0:e0:75:0d:bc:b0:03:
         ad:8b:7b:b8:17:64:43:4d:c8:38:8f:05:38:07:40:e1:dd:9a:
         ae:a2:d9:b7:df:df:34:83:0b:2a:cf:1a:b6:1b:4b:fe:fb:36:
         0e:ce:ee:b2:35:03:8d:df:f5:81:64:75:26:0a:9b:4c:16:55:
         fd:b5:52:89:a6:98:3f:37:f9:5a:c9:09:1a:5f:bc:e2:97:58:
         1d:5b:0b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org