Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e33382e3230312e302f32342d3234203d3e203532373539.roa
File:                     3137372e33382e3230312e302f32342d3234203d3e203532373539.roa (raw, json)
Hash identifier:          sRdTg+gHEunOjshPoICfvhhG7eOQXp9Kc6qHoGO2E1U=
Subject key identifier:   4E:DC:05:C8:91:26:D0:AC:A1:D9:67:80:EA:90:C4:B8:84:3D:46:D7
Certificate issuer:       /CN=149866FA8B7E908D2F6E00D7214C9D9648704F38
Certificate serial:       31774083DAD73F43CA2DA6B5F8CE4080D974BDB3
Authority key identifier: 14:98:66:FA:8B:7E:90:8D:2F:6E:00:D7:21:4C:9D:96:48:70:4F:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149866FA8B7E908D2F6E00D7214C9D9648704F38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e33382e3230312e302f32342d3234203d3e203532373539.roa
Signing time:             Mon 04 Sep 2023 18:53:05 +0000
ROA not before:           Mon 04 Sep 2023 18:48:05 +0000
ROA not after:            Mon 02 Sep 2024 18:53:05 +0000
asID:                     52759
IP address blocks:        177.38.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:77:40:83:da:d7:3f:43:ca:2d:a6:b5:f8:ce:40:80:d9:74:bd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149866FA8B7E908D2F6E00D7214C9D9648704F38
        Validity
            Not Before: Sep  4 18:48:05 2023 GMT
            Not After : Sep  2 18:53:05 2024 GMT
        Subject: CN=4EDC05C89126D0ACA1D96780EA90C4B8843D46D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:06:18:f5:54:4a:35:c7:b8:9f:bf:00:63:
                    bc:29:75:e2:c1:68:e2:e5:11:33:04:7a:e1:c4:9b:
                    94:d0:a6:f1:c7:4d:86:b4:27:b9:1e:0c:eb:dd:80:
                    40:3d:f4:c8:aa:3b:13:af:5f:c1:fb:20:17:68:c0:
                    a5:dc:03:28:c6:44:81:22:1d:48:3f:84:ff:72:d7:
                    33:37:38:6d:6e:c3:f2:33:2f:15:45:fc:19:d8:d2:
                    bb:8b:21:86:b6:ef:55:7a:79:f0:58:5c:65:7a:0b:
                    2d:62:31:d7:aa:8f:8e:3c:3e:3c:37:45:43:de:00:
                    61:14:4d:c3:45:36:37:9a:ac:71:7f:fe:a0:9b:2e:
                    8d:ee:83:bc:c6:43:d9:f7:9e:cd:73:b1:7c:7c:89:
                    e3:64:2f:56:d7:94:a7:20:3a:9a:f7:aa:fb:c4:9b:
                    e2:2b:9b:93:10:a3:57:50:a4:e8:ca:50:bd:1b:01:
                    9f:15:b5:2e:3b:65:fa:a6:c6:71:a3:15:5d:50:50:
                    c0:c8:9c:6d:eb:fc:26:f5:a9:9c:cd:94:89:16:cd:
                    4c:64:ad:3c:3f:f8:e0:a3:11:33:09:93:a8:53:2d:
                    8a:d3:82:51:a0:0d:c9:2a:d6:e1:37:de:03:4e:9a:
                    30:74:a8:47:a1:b0:8d:1a:79:8c:f1:31:03:80:df:
                    49:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DC:05:C8:91:26:D0:AC:A1:D9:67:80:EA:90:C4:B8:84:3D:46:D7
            X509v3 Authority Key Identifier:
                keyid:14:98:66:FA:8B:7E:90:8D:2F:6E:00:D7:21:4C:9D:96:48:70:4F:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/149866FA8B7E908D2F6E00D7214C9D9648704F38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149866FA8B7E908D2F6E00D7214C9D9648704F38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e33382e3230312e302f32342d3234203d3e203532373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:27:dd:4f:7e:f5:d4:c4:33:67:a2:16:59:0d:be:fc:f9:54:
         f5:39:ad:cd:fe:dc:ab:ef:31:ae:d3:79:48:7d:66:f3:54:b0:
         3f:68:b6:e2:69:97:e8:57:7c:b5:6b:14:5a:2b:54:48:80:5f:
         78:c8:25:18:ed:75:ac:7c:27:cd:5b:9d:ab:9f:85:cb:0e:9d:
         f1:f0:b4:5d:e3:82:29:23:19:02:ba:8a:4c:3c:6a:b5:c6:31:
         9d:f7:72:d5:21:9a:29:e3:81:bc:09:39:5a:6e:69:cc:01:da:
         2a:fd:a1:8a:02:47:6d:ed:f5:2b:38:9e:f3:ca:56:0c:11:f9:
         88:56:bb:45:fb:c3:12:08:66:77:45:81:97:3b:2f:3a:2a:6c:
         a9:a4:7e:15:87:cc:2d:29:52:d6:d0:ef:f8:d5:27:81:46:dd:
         78:e7:9e:4e:41:ad:25:51:5f:b8:4f:66:56:b1:52:d8:4d:7d:
         f9:12:ab:f0:ff:ba:5e:4d:7c:75:18:45:d6:2b:51:15:e0:bf:
         79:51:9d:a8:84:4d:ac:68:a0:cd:19:80:5d:75:fe:4f:98:fa:
         db:7d:fd:97:27:3b:e8:66:76:2e:ea:f1:83:c2:5d:54:7a:0e:
         bf:47:97:41:38:42:ab:d3:4f:47:87:39:fb:88:63:3e:64:c1:
         28:a6:1d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org