Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/1/3137372e33392e3231362e302f32312d3234203d3e203532373935.roa
File:                     3137372e33392e3231362e302f32312d3234203d3e203532373935.roa (raw, json)
Hash identifier:          MDf0CojOC0YJKEufOsurNDA+hTQgSSMJ1HmuRAy5/Ew=
Subject key identifier:   22:C9:CC:E8:2A:7D:53:D0:02:40:8D:AE:77:C3:52:EC:EE:00:B6:B3
Certificate issuer:       /CN=66071341D63E79CFFB28924CC5439D027A3440BA
Certificate serial:       2AD8133E671C3BA855D8D0FC4A4AB2AD6B29E9D1
Authority key identifier: 66:07:13:41:D6:3E:79:CF:FB:28:92:4C:C5:43:9D:02:7A:34:40:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66071341D63E79CFFB28924CC5439D027A3440BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/1/3137372e33392e3231362e302f32312d3234203d3e203532373935.roa
Signing time:             Fri 05 Apr 2024 14:15:30 +0000
ROA not before:           Fri 05 Apr 2024 14:10:30 +0000
ROA not after:            Fri 04 Apr 2025 14:15:30 +0000
asID:                     52795
IP address blocks:        177.39.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d8:13:3e:67:1c:3b:a8:55:d8:d0:fc:4a:4a:b2:ad:6b:29:e9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66071341D63E79CFFB28924CC5439D027A3440BA
        Validity
            Not Before: Apr  5 14:10:30 2024 GMT
            Not After : Apr  4 14:15:30 2025 GMT
        Subject: CN=22C9CCE82A7D53D002408DAE77C352ECEE00B6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:c6:87:cd:cc:be:03:2d:62:0b:0f:9f:9b:
                    8b:5d:d1:4d:1b:3f:3e:86:43:ab:98:be:c7:c6:af:
                    61:4f:0e:0b:53:d8:27:4e:20:37:db:66:9f:79:74:
                    50:0e:f1:b5:e2:15:3f:4e:2f:d6:e4:4c:97:34:76:
                    9f:af:3c:94:f7:5d:b2:78:6f:7c:c6:85:99:d6:29:
                    3a:6c:19:be:64:17:14:0f:66:9b:d4:29:07:14:00:
                    89:df:f0:c2:14:52:35:fc:42:77:45:e1:7d:89:f0:
                    48:92:3f:2c:06:23:44:75:54:8c:a9:34:e2:b5:ed:
                    1f:c8:98:30:45:ef:9e:d1:0d:33:af:5a:9e:ca:ca:
                    a3:78:51:ea:34:b8:55:96:22:6b:7c:0f:04:6f:44:
                    ba:d3:f5:c4:60:0c:0e:c6:07:34:17:08:f7:a0:13:
                    b0:11:c8:34:c6:13:88:b5:b9:bc:a5:33:f2:c6:16:
                    82:8a:55:c1:54:66:aa:15:a8:3c:05:01:9c:c5:8d:
                    e6:cb:14:b6:40:cb:18:bc:ee:2b:12:c8:a1:28:41:
                    b3:0f:61:08:b7:68:47:87:2c:fa:57:38:fa:3b:14:
                    8c:af:47:6a:47:5c:ed:ed:4c:0b:45:ed:a9:de:d5:
                    13:5f:98:51:33:c4:9b:ca:ab:6d:4d:de:8d:b7:0b:
                    cf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C9:CC:E8:2A:7D:53:D0:02:40:8D:AE:77:C3:52:EC:EE:00:B6:B3
            X509v3 Authority Key Identifier:
                keyid:66:07:13:41:D6:3E:79:CF:FB:28:92:4C:C5:43:9D:02:7A:34:40:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/1/66071341D63E79CFFB28924CC5439D027A3440BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66071341D63E79CFFB28924CC5439D027A3440BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/1/3137372e33392e3231362e302f32312d3234203d3e203532373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:fc:a4:fa:21:58:d6:62:0d:60:d6:bf:fd:20:48:9b:75:92:
         9e:3b:e4:ad:30:a2:40:78:ff:ec:32:ce:74:44:f8:d4:c0:44:
         c2:b0:7d:05:3f:62:92:0a:09:bf:f8:16:18:ee:34:ee:e2:2b:
         b2:73:2c:00:ce:2c:5c:86:c6:4c:30:87:06:3e:a4:4c:9d:db:
         48:b8:d2:49:f8:bc:25:2e:31:90:3c:07:69:d4:5d:36:32:2e:
         3b:08:d7:0b:77:fa:7a:75:8e:4a:a5:ec:5d:66:1d:5d:d0:46:
         78:4f:8d:89:4d:02:f7:0f:91:8d:4c:5b:29:82:72:c6:71:d6:
         0e:97:3b:be:6e:f5:59:e2:36:10:58:92:64:a6:72:2a:e6:d2:
         55:11:be:3c:db:f4:f5:65:79:3d:3d:66:05:83:da:b8:d0:60:
         5a:63:9e:3e:87:b4:2f:e4:ad:b7:3e:1e:2c:be:76:fb:e8:76:
         c3:02:0f:7b:dc:73:82:02:a4:14:94:08:2b:d1:ac:ac:5e:d0:
         24:df:4d:da:c3:91:09:a4:8a:51:2a:f9:8f:82:12:c7:7e:08:
         a3:27:fc:8b:5c:b8:f9:90:db:7f:19:d0:c0:be:19:4e:3e:66:
         d7:f0:62:9f:b8:e1:55:4d:3b:27:cc:b9:93:c4:7c:d8:83:5e:
         b2:ed:16:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org