Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32322d3232203d3e20323632383636.roa
File:                     3137372e31322e3234302e302f32322d3232203d3e20323632383636.roa (raw, json)
Hash identifier:          pb/eozxakBoeikX0Hr8KRSN4Ij4ce72rpzZtRMQar6s=
Subject key identifier:   CD:1C:EF:AA:47:A1:43:72:D8:30:19:20:7A:CC:D7:B5:C6:F0:4E:F8
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       3AA5C38F73C4D6441A69D9EBB1D6F1E7686654AD
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32322d3232203d3e20323632383636.roa
Signing time:             Fri 12 Jan 2024 18:11:17 +0000
ROA not before:           Fri 12 Jan 2024 18:06:17 +0000
ROA not after:            Fri 10 Jan 2025 18:11:17 +0000
asID:                     262866
IP address blocks:        177.12.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a5:c3:8f:73:c4:d6:44:1a:69:d9:eb:b1:d6:f1:e7:68:66:54:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Jan 12 18:06:17 2024 GMT
            Not After : Jan 10 18:11:17 2025 GMT
        Subject: CN=CD1CEFAA47A14372D83019207ACCD7B5C6F04EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:24:a8:39:65:55:f4:c6:4f:8c:27:bd:8d:97:
                    63:cc:1a:9f:a2:7e:2a:2c:51:0c:10:f8:f2:d0:b8:
                    2b:88:e8:6e:c1:17:ae:b6:70:06:7b:f1:6e:24:fc:
                    27:79:dc:22:f9:ae:16:95:90:9c:cd:7e:4d:7d:cd:
                    ce:8b:25:b3:4d:bc:a4:8f:4f:4b:5a:79:11:c9:05:
                    a8:c9:c2:40:b4:16:6b:c4:d0:6d:14:39:d3:2b:ae:
                    9e:c8:ae:2d:d3:a2:8f:1f:01:b6:01:73:ae:2a:12:
                    25:ca:e0:e6:04:75:4e:7d:56:94:a3:f3:35:d6:0a:
                    02:45:7c:ef:71:2e:c1:4b:67:cb:01:87:f3:70:7c:
                    04:a1:31:c9:5d:6d:f3:04:cf:04:58:32:7f:af:79:
                    30:84:48:ba:a9:c9:93:08:44:9f:53:0d:87:0c:8f:
                    ab:cf:bb:da:65:bc:a9:2d:d4:b2:58:f1:0a:42:d2:
                    3f:d1:a8:94:af:d1:90:d2:3e:4c:ef:5e:de:b1:bc:
                    e4:89:ce:ec:16:88:b6:1a:1b:33:67:bb:23:6e:7b:
                    19:47:60:d6:c6:35:88:67:99:78:e5:b8:ac:1b:d6:
                    f8:d1:2b:8b:a7:9d:28:ef:ed:6b:a9:81:c6:28:8c:
                    bd:f8:d3:2b:4e:e6:6c:2d:f2:97:2c:fd:37:23:04:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1C:EF:AA:47:A1:43:72:D8:30:19:20:7A:CC:D7:B5:C6:F0:4E:F8
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32322d3232203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:61:1f:ae:1f:37:33:b6:88:27:7d:c8:f3:f2:05:21:7f:a1:
         78:f4:3b:a2:25:77:88:ed:2d:fc:5a:7b:b0:01:d4:ac:c2:9e:
         29:7a:1c:0a:65:3f:7a:62:27:36:46:f4:17:74:20:7e:58:26:
         a3:38:9b:54:78:ce:cf:2b:51:93:c9:ea:66:79:4b:20:a7:e6:
         08:93:fc:55:c2:dc:36:11:93:36:1f:2f:9b:cd:eb:2b:b8:f1:
         3d:ec:48:8c:61:56:93:b2:63:51:61:2a:10:e0:bf:dd:7b:bb:
         71:23:ab:b1:e5:e2:f9:5a:8a:66:fa:9c:30:36:d8:11:cb:4b:
         00:dc:95:ce:0c:5d:25:f9:ca:8a:fd:b3:41:8f:e2:64:83:0d:
         79:90:93:b6:71:b2:0f:f9:65:64:e3:ee:e0:3e:ec:79:58:76:
         34:f1:e1:eb:7f:f8:50:d8:a6:b8:85:b7:a3:6c:87:61:85:78:
         2b:36:b9:da:3d:2f:2e:88:66:9e:4c:a3:d9:27:8f:bd:7b:cf:
         5c:1a:57:64:87:dd:b4:44:0c:b6:b1:5c:dc:78:97:8e:75:84:
         ef:d6:fb:57:95:dc:04:94:95:d0:a1:fa:34:ef:5c:81:d6:63:
         ee:c1:cc:1e:dd:b4:be:f0:f3:46:38:59:e6:f3:ff:df:81:52:
         89:11:b6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org