Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231302e302f32332d3233203d3e203532383733.roa
File:                     3137372e3132382e3231302e302f32332d3233203d3e203532383733.roa (raw, json)
Hash identifier:          aNWPcMGevgWnNu+U7hzac06w9nBLXM2TAuBK+/tThC4=
Subject key identifier:   D2:18:64:0D:31:F7:65:F7:EF:35:09:78:6B:83:38:63:4B:25:F8:A1
Certificate issuer:       /CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
Certificate serial:       02D19AC8DC8CFEA4E5F47E300C6246E868B1464B
Authority key identifier: BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231302e302f32332d3233203d3e203532383733.roa
Signing time:             Mon 04 Sep 2023 19:55:05 +0000
ROA not before:           Mon 04 Sep 2023 19:50:05 +0000
ROA not after:            Mon 02 Sep 2024 19:55:05 +0000
asID:                     52873
IP address blocks:        177.128.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d1:9a:c8:dc:8c:fe:a4:e5:f4:7e:30:0c:62:46:e8:68:b1:46:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
        Validity
            Not Before: Sep  4 19:50:05 2023 GMT
            Not After : Sep  2 19:55:05 2024 GMT
        Subject: CN=D218640D31F765F7EF3509786B8338634B25F8A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:f5:5d:4f:73:f0:30:6e:4d:a4:e0:bc:2a:
                    b3:d7:4b:27:b0:23:46:99:62:7e:9b:eb:3d:55:a3:
                    fd:0b:ef:5c:54:9e:3e:ae:80:4b:53:da:bc:36:e8:
                    07:8b:a0:7a:4c:ad:0c:ed:a4:bd:a5:22:f3:3a:67:
                    90:a8:45:be:12:c6:4e:fb:ad:18:0a:0a:ae:0d:c9:
                    cd:17:71:e6:e2:dc:29:97:67:f3:98:b5:8b:1e:5a:
                    09:33:95:68:09:1e:97:84:b7:bc:fc:d9:d6:50:55:
                    4b:78:6f:f9:8d:fe:60:ad:a0:ae:9c:b5:9a:1f:b6:
                    3e:c6:2e:e4:9a:b1:83:ba:3f:8c:d6:bf:e5:3c:6b:
                    a3:49:76:3d:c0:e3:32:90:54:2e:fb:f9:b3:0b:6a:
                    78:85:fe:6f:bd:82:0c:a2:cc:ec:70:02:10:67:b3:
                    5e:6b:a1:66:2d:c4:1f:b3:3c:40:58:4e:ab:56:d8:
                    18:2c:52:2b:3e:10:fd:db:88:28:94:b2:af:19:d0:
                    ee:81:82:f6:68:e9:86:e7:8a:00:8f:2d:51:60:b5:
                    d7:b8:a8:79:0f:54:a1:e4:da:83:1c:2e:c0:a6:94:
                    8f:f8:b9:c7:06:fe:b6:8c:c7:59:0d:34:2c:5a:26:
                    6b:87:fd:dc:49:f1:89:49:38:a0:bd:39:18:a0:c6:
                    59:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:18:64:0D:31:F7:65:F7:EF:35:09:78:6B:83:38:63:4B:25:F8:A1
            X509v3 Authority Key Identifier:
                keyid:BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231302e302f32332d3233203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:ff:ee:c5:3d:7a:4f:35:0b:c7:ce:36:99:5a:7e:4b:57:b7:
         99:e2:8c:66:39:e1:39:43:e8:e9:3e:39:5d:0b:1a:ba:fc:e9:
         e4:e2:b3:fb:91:8e:d9:67:01:42:4b:d3:04:00:f3:59:ef:8b:
         6f:ac:80:88:9e:b3:0e:5b:f5:fb:2a:67:fc:42:1a:5d:12:67:
         4a:81:c0:6f:01:f3:1b:50:bd:ef:4f:2d:a8:6d:29:99:b2:42:
         96:a8:d6:6b:3e:76:1f:a0:59:0e:d1:85:72:25:77:ec:da:68:
         40:65:04:5d:f8:25:14:3b:1b:92:2a:52:11:61:30:46:c6:4b:
         b7:32:5c:71:38:7d:80:08:ea:f7:44:ee:78:ee:21:42:3b:df:
         9e:79:8f:c5:28:92:95:20:f8:91:76:43:b7:6c:7b:4d:a2:ca:
         62:d5:86:f3:64:b1:f4:fd:eb:b6:a9:04:9e:f3:d2:8a:87:97:
         4e:f7:57:97:b4:bd:9b:1a:44:3a:1a:09:83:8d:04:7f:7c:36:
         10:95:02:08:41:36:b7:ee:30:59:f2:0a:2e:78:06:6a:13:fd:
         4f:aa:e4:e0:70:f4:31:77:47:4d:93:ee:1f:a8:49:b5:01:f4:
         15:c0:7f:8e:12:d3:fd:3a:18:8b:df:46:a3:d1:94:b9:0f:81:
         7c:12:49:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net