Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/3137372e38362e3131362e302f32322d3234203d3e203532353730.roa
File:                     3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (raw, json)
Hash identifier:          uTGbKgXRZbclczPMm9L4c87xW2NgmG0gGLjw5cEFpGw=
Subject key identifier:   4D:25:1B:98:02:FF:2A:DA:9B:50:60:1D:7A:C2:99:2E:5A:C7:D2:0C
Certificate issuer:       /CN=2D5C6CACD311321B2E91159DD9A5CD72FCBDD966
Certificate serial:       1497AC91B8E318BEF92DAE683DBEE90B4429CDC9
Authority key identifier: 2D:5C:6C:AC:D3:11:32:1B:2E:91:15:9D:D9:A5:CD:72:FC:BD:D9:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/3137372e38362e3131362e302f32322d3234203d3e203532353730.roa
Signing time:             Fri 08 Mar 2024 10:04:05 +0000
ROA not before:           Fri 08 Mar 2024 09:59:05 +0000
ROA not after:            Fri 07 Mar 2025 10:04:05 +0000
asID:                     52570
IP address blocks:        177.86.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:97:ac:91:b8:e3:18:be:f9:2d:ae:68:3d:be:e9:0b:44:29:cd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5C6CACD311321B2E91159DD9A5CD72FCBDD966
        Validity
            Not Before: Mar  8 09:59:05 2024 GMT
            Not After : Mar  7 10:04:05 2025 GMT
        Subject: CN=4D251B9802FF2ADA9B50601D7AC2992E5AC7D20C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2f:2d:c5:14:a1:ee:3b:5a:78:55:4a:9d:06:
                    a4:29:3b:ab:c0:6f:70:3e:c9:c5:3e:d3:80:bb:d7:
                    de:4f:f5:47:fe:55:ef:cf:ff:81:45:c9:97:3d:b3:
                    dd:0c:23:b7:a8:b3:a9:5b:63:98:60:27:a5:37:66:
                    57:ad:17:b3:bf:62:ec:3e:e9:8a:a5:f5:aa:93:40:
                    5c:12:e2:f2:3a:fb:b9:66:92:28:69:7e:07:7b:be:
                    b2:0a:21:c4:69:f2:d9:8f:14:81:44:46:00:9d:9f:
                    cc:60:72:d3:9a:bb:cc:2e:d4:6b:d7:93:c6:68:92:
                    79:15:79:5f:33:c9:bb:93:40:1f:88:82:d8:64:2d:
                    0e:59:6f:87:00:1f:b1:a3:50:55:c6:52:c1:f9:e7:
                    39:99:35:5a:b8:33:c3:05:c9:0f:84:5e:22:67:2e:
                    3a:09:55:5d:dd:d6:56:75:f6:f1:56:67:d6:70:03:
                    47:7b:37:94:c9:7f:2c:5e:f1:12:de:05:01:81:de:
                    70:bd:b4:d8:05:8a:cc:a5:38:a5:6b:d1:b6:f8:5c:
                    80:73:15:92:d1:15:93:51:25:c8:e9:e3:7d:63:be:
                    d1:bd:ab:ff:86:2e:1f:05:b2:fb:02:84:df:e3:45:
                    0c:c2:14:80:17:34:0d:b7:78:82:79:09:ef:d5:3a:
                    8b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:25:1B:98:02:FF:2A:DA:9B:50:60:1D:7A:C2:99:2E:5A:C7:D2:0C
            X509v3 Authority Key Identifier:
                keyid:2D:5C:6C:AC:D3:11:32:1B:2E:91:15:9D:D9:A5:CD:72:FC:BD:D9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/3137372e38362e3131362e302f32322d3234203d3e203532353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:4a:19:d8:23:8f:91:d7:38:ea:c6:3a:62:c3:b8:5c:5d:18:
         b3:71:82:c4:2d:81:6f:40:98:83:af:ff:7e:e1:fd:b0:c5:ac:
         97:ab:91:76:c3:9c:57:b7:af:f7:42:d3:10:9c:9e:5a:8c:d7:
         49:13:11:48:4d:21:a9:88:95:24:17:3f:1f:93:23:e7:ab:3c:
         44:12:4e:03:9e:0e:30:b0:fd:a1:32:d5:41:d4:6e:02:9f:8f:
         38:24:52:1f:7e:f3:47:e9:c2:b6:5c:14:c7:f0:66:0e:a0:f2:
         0a:4c:00:e8:4c:f8:33:3b:bb:02:5c:04:27:61:45:87:21:2e:
         55:e1:7a:cf:38:eb:e7:4c:b7:45:22:ed:21:5a:ad:2a:49:1e:
         2f:d0:57:a8:0e:df:ac:4b:99:29:50:c5:77:7b:38:da:35:d8:
         4a:18:38:da:d2:e1:0c:25:9a:43:6a:e5:a9:67:a0:93:91:2e:
         9f:8d:19:3a:63:f6:d5:4d:af:ad:5b:16:04:2a:3d:75:d9:4a:
         ed:69:f1:2b:d7:c0:47:cc:c7:54:2e:7b:94:96:4c:5b:5d:a7:
         c4:57:7b:b1:ad:2e:cf:f6:16:aa:36:10:8e:15:ab:c0:1a:f2:
         ff:d6:dd:a2:7e:8f:bc:68:fa:6b:fa:a6:16:10:0c:16:fd:98:
         5b:6e:c4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org