Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/3137372e3130342e33322e302f31392d3234203d3e20323632373432.roa
File:                     3137372e3130342e33322e302f31392d3234203d3e20323632373432.roa (raw, json)
Hash identifier:          lb77QXRBrr8Ayacfh/IesuNGOGlhd3Cihq5hWx/PC/I=
Subject key identifier:   85:FE:67:71:6B:2D:D3:CC:0F:C9:01:24:8B:A7:7D:32:58:40:77:C1
Certificate issuer:       /CN=DE2490482D58BA1938718BC52A6EF59DA097815A
Certificate serial:       0EC8DF80C6492560F8EDA9A25698930A18BA54B9
Authority key identifier: DE:24:90:48:2D:58:BA:19:38:71:8B:C5:2A:6E:F5:9D:A0:97:81:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE2490482D58BA1938718BC52A6EF59DA097815A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/3137372e3130342e33322e302f31392d3234203d3e20323632373432.roa
Signing time:             Tue 31 Jan 2023 12:06:41 +0000
ROA not before:           Tue 31 Jan 2023 12:01:41 +0000
ROA not after:            Tue 30 Jan 2024 12:06:41 +0000
asID:                     262742
IP address blocks:        177.104.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c8:df:80:c6:49:25:60:f8:ed:a9:a2:56:98:93:0a:18:ba:54:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE2490482D58BA1938718BC52A6EF59DA097815A
        Validity
            Not Before: Jan 31 12:01:41 2023 GMT
            Not After : Jan 30 12:06:41 2024 GMT
        Subject: CN=85FE67716B2DD3CC0FC901248BA77D32584077C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:cb:ad:44:bf:bf:61:45:b2:70:22:5c:6d:
                    e3:67:bb:cf:ff:a6:e4:76:aa:1d:ae:85:9c:31:2f:
                    6d:7f:7e:ca:49:c1:08:de:99:88:bd:c9:2e:b2:23:
                    76:e9:8a:25:0b:44:2e:fa:80:bd:37:5c:0a:aa:9f:
                    f0:b7:e2:43:40:e9:bf:f0:f1:51:e3:a4:a7:12:4b:
                    94:8c:e4:13:20:8c:ef:84:c9:1d:3a:8e:89:7c:f1:
                    9e:8d:4f:eb:e5:16:4e:83:6f:5a:49:d7:b7:c0:8a:
                    31:51:2d:05:ac:3d:4f:06:af:91:dd:8f:14:09:74:
                    c9:4c:4a:07:8e:2f:5b:04:c3:00:9b:d0:44:5e:52:
                    03:a9:db:99:27:3e:75:f7:fa:f6:84:87:03:72:f1:
                    17:8e:2b:2c:17:7c:35:79:a8:0a:ae:1b:d5:2e:5e:
                    ef:23:f7:b6:15:76:c7:99:f0:b7:a3:00:3e:0c:05:
                    5d:a7:95:a5:ef:c4:5e:50:a4:6c:90:1f:db:56:72:
                    f1:3c:91:43:b7:d9:5f:94:ba:a2:32:8c:f8:c0:73:
                    e7:8a:62:77:7d:88:c2:90:b3:c3:30:f2:54:8f:a0:
                    3b:16:92:d8:e3:eb:56:42:cb:ff:ee:68:ad:80:4a:
                    02:6d:4e:2c:bc:53:28:e3:6c:74:12:f1:c8:88:61:
                    0f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FE:67:71:6B:2D:D3:CC:0F:C9:01:24:8B:A7:7D:32:58:40:77:C1
            X509v3 Authority Key Identifier:
                keyid:DE:24:90:48:2D:58:BA:19:38:71:8B:C5:2A:6E:F5:9D:A0:97:81:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/DE2490482D58BA1938718BC52A6EF59DA097815A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE2490482D58BA1938718BC52A6EF59DA097815A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/3137372e3130342e33322e302f31392d3234203d3e20323632373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:9c:83:96:64:60:d7:ca:62:41:d9:6d:e0:be:a0:ee:ca:5e:
         1e:e8:ec:0a:b8:3c:06:77:cc:43:d1:ca:f4:75:ab:7b:8c:c1:
         6a:a4:b8:0d:c8:32:89:49:2e:63:2d:79:aa:33:56:58:95:7b:
         be:eb:20:3b:7f:9a:79:92:e2:08:be:9a:9e:25:4d:39:4d:02:
         dd:37:18:4c:5f:db:d4:f0:db:d9:6c:d6:63:80:ad:13:e8:71:
         e0:2a:40:64:90:7e:51:1e:11:b7:71:f7:55:b9:e7:67:84:2f:
         ab:7f:e0:34:09:f3:a9:4d:fa:69:a9:75:d8:a2:1e:ad:a3:7a:
         e1:d0:8a:88:99:9c:25:37:f2:3e:cd:ea:34:25:d7:5d:db:24:
         7d:34:c5:bb:7c:0b:5d:6d:1e:6c:77:32:97:af:28:54:77:96:
         0d:b3:ef:14:4d:b8:9c:e2:7a:fd:39:b9:79:e4:23:6a:8e:60:
         2e:aa:b3:2b:61:8a:e1:72:07:f8:2f:b4:9f:a2:7e:86:25:2c:
         20:b1:f5:87:2f:20:04:9e:5b:85:8b:64:59:c8:07:d7:f7:18:
         5a:8e:5d:60:cc:4a:b5:0e:3e:f9:ba:d7:d0:86:88:da:54:2a:
         b9:07:a0:c1:10:2f:c5:48:0b:57:41:20:b2:1d:dc:81:5f:b6:
         fb:e0:6c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org