Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa
File:                     3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          tY0UzjLv0XoaBok2l10nYufBj46VVX7Uvml9PSPaR4c=
Subject key identifier:   64:04:83:8C:1C:D5:8C:DF:90:AF:ED:E4:4C:0F:4A:49:96:4E:4D:D2
Certificate issuer:       /CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
Certificate serial:       7F56AF4F4D2ECA163A1B6DE6C4129A59A63547C3
Authority key identifier: F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa
Signing time:             Wed 03 Apr 2024 21:39:08 +0000
ROA not before:           Wed 03 Apr 2024 21:34:08 +0000
ROA not after:            Wed 02 Apr 2025 21:39:08 +0000
asID:                     262391
IP address blocks:        177.131.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:56:af:4f:4d:2e:ca:16:3a:1b:6d:e6:c4:12:9a:59:a6:35:47:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
        Validity
            Not Before: Apr  3 21:34:08 2024 GMT
            Not After : Apr  2 21:39:08 2025 GMT
        Subject: CN=6404838C1CD58CDF90AFEDE44C0F4A49964E4DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:43:1e:a1:4b:c3:ed:ca:f7:f3:21:78:b6:
                    9e:d9:38:50:1e:b5:22:8e:42:48:4f:62:6c:4e:bc:
                    bc:bf:55:26:47:94:4b:62:d0:ed:c3:1c:7c:ba:cc:
                    41:99:f7:4f:38:01:a5:5c:76:36:f0:6c:6d:b6:84:
                    37:6c:06:7f:66:bf:f5:6b:78:1c:89:37:d5:b9:6e:
                    1a:4f:7e:5b:ec:88:62:a4:4c:af:ac:44:6d:8e:45:
                    33:fa:54:9c:f3:7a:9d:30:8d:39:0a:e6:a6:0d:ff:
                    e1:72:9f:b2:91:0f:3b:e4:02:c1:7d:cb:77:67:11:
                    ca:6d:15:22:e6:7a:43:d8:55:97:86:f7:8d:45:28:
                    65:90:3f:34:44:ca:81:b2:1e:76:8a:81:21:94:46:
                    b1:fe:c3:8d:1e:89:1d:64:ca:82:47:6f:b4:2f:56:
                    68:52:15:86:d1:11:3c:cb:61:aa:42:3b:39:13:ea:
                    8f:db:a2:0d:3d:b2:6f:28:19:6c:92:c9:dc:20:2b:
                    df:27:7d:4f:a5:3e:7a:df:ab:a8:87:a4:ed:64:4f:
                    5a:25:75:6a:ad:b0:3c:ac:d4:cb:16:42:68:04:81:
                    20:7b:99:4e:5a:f2:7f:cd:e7:de:cd:98:bc:a2:4f:
                    bd:55:56:89:7a:6d:0d:75:37:18:c0:33:e0:b9:34:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:04:83:8C:1C:D5:8C:DF:90:AF:ED:E4:4C:0F:4A:49:96:4E:4D:D2
            X509v3 Authority Key Identifier:
                keyid:F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:77:2f:d2:22:bf:cd:a4:04:f4:d9:94:f8:75:42:13:e9:dc:
         21:6b:a2:44:a1:22:8f:94:ad:e1:c9:03:74:37:7d:1a:e9:e3:
         38:6f:8c:f8:f3:94:66:0b:6c:32:79:bd:24:7d:83:07:40:10:
         06:65:b4:31:4d:86:42:15:24:0f:1f:98:44:df:1f:e7:cb:f7:
         52:08:46:47:27:91:ef:65:eb:ad:2d:2f:67:83:8d:79:bb:25:
         26:8e:a4:02:3d:7b:89:c8:e0:85:85:a4:5d:95:d4:84:60:d8:
         a5:43:23:0a:54:da:2d:62:55:1e:e1:87:de:0c:ce:c7:cd:1d:
         90:04:81:fb:36:a8:61:8c:07:01:da:16:08:cc:b4:db:65:db:
         e2:34:86:e2:0b:67:c0:17:8b:3a:70:22:2d:27:78:1d:f7:3c:
         bb:84:3f:7a:b1:8f:54:5d:e5:49:30:4e:21:29:dd:ad:76:88:
         49:61:60:95:30:bb:73:b7:71:83:e7:2e:a0:59:7b:fd:fb:64:
         8e:24:9c:c3:c6:9a:c8:3c:8b:49:b1:ef:e3:48:a4:2a:a8:e6:
         d0:01:c1:43:5e:98:1b:d7:6b:c2:ee:e8:6b:ac:b8:d3:de:27:
         44:ad:5a:cc:14:83:1a:b6:8c:14:72:37:2f:7f:b1:c2:ff:1c:
         c2:6b:4b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org