Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/0/3137372e3232312e3138382e302f32322d3234203d3e20323730363738.roa
File:                     3137372e3232312e3138382e302f32322d3234203d3e20323730363738.roa (raw, json)
Hash identifier:          CaFL0Hty7JuYmDtMOXXjRV2TjzWoVz0PkaFCBQUAYpA=
Subject key identifier:   EC:63:64:15:7D:4A:32:05:3B:6F:A5:12:82:FC:C3:0D:57:F2:B3:89
Certificate issuer:       /CN=4FC3763A4D924A1628C3C67EB3305A128CECEC8D
Certificate serial:       39819E203C27AF199A26899EAB18976090AF1D4B
Authority key identifier: 4F:C3:76:3A:4D:92:4A:16:28:C3:C6:7E:B3:30:5A:12:8C:EC:EC:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FC3763A4D924A1628C3C67EB3305A128CECEC8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/0/3137372e3232312e3138382e302f32322d3234203d3e20323730363738.roa
Signing time:             Tue 10 Oct 2023 21:00:04 +0000
ROA not before:           Tue 10 Oct 2023 20:55:04 +0000
ROA not after:            Tue 08 Oct 2024 21:00:04 +0000
asID:                     270678
IP address blocks:        177.221.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:81:9e:20:3c:27:af:19:9a:26:89:9e:ab:18:97:60:90:af:1d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FC3763A4D924A1628C3C67EB3305A128CECEC8D
        Validity
            Not Before: Oct 10 20:55:04 2023 GMT
            Not After : Oct  8 21:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d1:8c:be:91:64:86:26:b0:1e:8d:76:92:47:
                    fa:34:b2:e7:1d:08:ec:ca:14:1b:41:8a:a9:a0:6b:
                    03:35:bf:23:8a:a8:80:fa:48:ec:ae:63:01:66:29:
                    35:0e:30:78:83:1b:7d:ab:b7:03:8c:b7:c7:58:86:
                    1c:94:09:e4:ce:3c:16:ba:de:33:16:88:30:3a:59:
                    16:ab:26:6e:48:fd:87:01:ca:a0:75:6b:f1:07:a3:
                    59:38:54:5e:4f:7b:b0:46:06:7e:a5:fc:b9:c0:63:
                    70:3f:d8:bb:7b:e1:e4:a2:7b:35:22:3e:1e:bd:a7:
                    e6:62:28:10:e0:1e:22:6e:59:9e:86:1c:c5:f8:36:
                    2d:f3:90:74:c4:a0:3a:b2:c6:82:4a:96:08:f3:e2:
                    31:f0:46:c3:83:e4:54:02:02:59:44:76:4d:30:39:
                    c0:ed:5d:d9:7c:1f:c8:06:3b:92:31:3e:10:bd:26:
                    f0:7f:76:ed:f6:da:7f:98:4f:1f:3b:6d:15:2f:8d:
                    8c:50:19:73:a1:c8:43:e6:a5:9f:2e:0b:fd:0d:a4:
                    4d:bb:e3:97:9f:9d:93:3b:ba:c1:6a:cd:a2:64:ca:
                    17:24:17:22:6a:a2:d5:e6:6b:56:64:af:01:36:09:
                    8d:c1:50:39:71:d7:e9:b6:0e:df:0b:c7:28:db:1d:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:63:64:15:7D:4A:32:05:3B:6F:A5:12:82:FC:C3:0D:57:F2:B3:89
            X509v3 Authority Key Identifier:
                keyid:4F:C3:76:3A:4D:92:4A:16:28:C3:C6:7E:B3:30:5A:12:8C:EC:EC:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/0/4FC3763A4D924A1628C3C67EB3305A128CECEC8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FC3763A4D924A1628C3C67EB3305A128CECEC8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pEEiCSwtrjyYv9mjEmk2iPdwMhP7mvTzVbkwDP9WRSo/0/3137372e3232312e3138382e302f32322d3234203d3e20323730363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:ec:f2:f2:1c:53:ac:d8:aa:1a:33:61:a6:3e:3b:dc:72:72:
         f6:7a:1b:bd:d7:74:3d:af:56:0f:8a:56:e9:ff:08:8a:dd:e4:
         b1:50:8a:1a:50:e0:9f:f6:df:c3:bd:c1:56:e9:54:50:2a:75:
         bd:99:01:44:bd:ed:f4:17:c0:f4:40:f6:a8:6f:13:b4:b0:32:
         b2:b0:20:ca:33:62:48:cb:6f:21:b7:f7:a3:f7:7d:ac:d5:71:
         0e:3b:d9:2d:b2:78:74:43:d9:a4:75:35:e6:b4:4a:42:21:5f:
         8a:55:7b:0d:8d:5f:83:b4:14:87:23:28:2d:2d:17:60:cc:50:
         4a:6b:25:28:7e:11:0a:a2:56:3a:87:51:9f:19:e7:42:c8:a4:
         a8:fa:75:81:2c:49:74:84:09:d0:f8:e7:d6:52:d8:9c:f4:ee:
         53:76:e4:31:2f:d2:fd:42:75:85:02:37:2f:fa:77:82:ff:0f:
         77:47:ed:2e:bc:18:12:8c:c4:a2:db:59:41:9f:f5:da:ca:30:
         1a:31:e5:05:f7:1a:ea:40:93:f7:31:f1:97:db:81:fd:20:1b:
         62:98:16:62:65:cc:74:e2:a6:13:10:d9:ee:c7:b2:0a:1d:7c:
         b0:77:3c:14:88:89:38:94:de:e1:56:8e:13:a6:d8:0f:0f:b3:
         e2:38:65:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org