Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32332d3233203d3e20323632383636.roa
File:                     3137372e31322e3234302e302f32332d3233203d3e20323632383636.roa (raw, json)
Hash identifier:          uh05UlCzpTZL+/5qpfxKPa5uDaaRjXROSxkSAUH/NcU=
Subject key identifier:   25:4D:76:E0:53:C5:0D:79:09:78:22:B1:DD:43:5E:83:BA:D4:3E:CE
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       3CB679C2C60010FFA31D03331B2030860A6069AE
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32332d3233203d3e20323632383636.roa
Signing time:             Fri 12 Jan 2024 18:11:19 +0000
ROA not before:           Fri 12 Jan 2024 18:06:19 +0000
ROA not after:            Fri 10 Jan 2025 18:11:19 +0000
asID:                     262866
IP address blocks:        177.12.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b6:79:c2:c6:00:10:ff:a3:1d:03:33:1b:20:30:86:0a:60:69:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Jan 12 18:06:19 2024 GMT
            Not After : Jan 10 18:11:19 2025 GMT
        Subject: CN=254D76E053C50D79097822B1DD435E83BAD43ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:46:a2:8c:ab:77:40:ee:5e:0a:e0:39:2b:
                    87:b3:cd:d7:72:00:fb:f3:68:c4:3b:f3:ea:9d:5a:
                    d5:4f:e5:bb:ec:d9:a1:79:df:2b:0d:fc:8b:e3:cc:
                    99:7c:92:86:97:98:ae:2e:34:56:45:28:f2:f9:b9:
                    ea:75:a5:44:71:f2:6c:81:81:1c:e4:cf:67:0e:a2:
                    b0:8b:2d:49:4e:81:1e:42:5f:fd:f2:06:2c:61:ee:
                    bb:f7:a2:31:c9:3e:ca:86:c0:1e:18:01:5f:f5:70:
                    d1:8c:2a:7e:9b:03:f0:6b:bb:a8:e1:c5:90:cb:1d:
                    17:57:8d:49:ca:6e:37:cf:98:f9:4d:d0:db:f4:49:
                    c5:77:4d:47:c1:3a:3b:fc:29:07:4f:c5:8c:df:32:
                    52:29:45:dd:4c:67:a3:b0:bd:ae:99:33:c1:36:e9:
                    59:f9:64:22:f9:94:9a:bc:d9:e5:42:97:30:d3:6c:
                    0a:72:14:e4:d9:b8:18:95:19:6a:e1:5e:b2:fb:8f:
                    40:32:41:51:72:9b:36:a7:24:f1:0b:7a:ae:8e:53:
                    bb:1f:c6:f1:f0:c0:21:fb:74:d5:77:35:18:7a:c6:
                    4f:51:df:44:d6:3f:93:82:e8:e9:1a:1d:18:1a:78:
                    93:79:33:3c:87:73:de:e4:5b:60:41:5a:48:ef:a2:
                    7b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4D:76:E0:53:C5:0D:79:09:78:22:B1:DD:43:5E:83:BA:D4:3E:CE
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32332d3233203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:66:93:0c:69:b9:96:f1:cd:c5:a9:51:bd:f9:12:e3:15:b5:
         a1:9a:00:e6:73:b3:d5:13:30:bd:18:96:4c:f1:f1:a9:44:59:
         86:ed:d0:61:62:cf:a2:50:55:45:38:fa:21:92:67:6c:9a:32:
         f8:d2:06:21:dd:7f:95:4a:c5:fa:90:63:36:e5:f0:2e:70:09:
         08:b6:d2:cc:5b:a7:5f:a7:92:00:85:21:4a:20:fe:c8:ff:dc:
         b5:fc:b3:ea:5e:4c:64:c3:93:f5:20:5b:8c:d8:71:b5:30:47:
         88:e4:e0:1a:62:8a:01:67:cd:fb:50:3c:94:d7:2a:a5:0b:40:
         f4:8c:8a:11:ec:1d:16:16:be:b8:a8:fd:5a:ae:05:70:0f:10:
         c1:71:e3:fd:3a:f0:dd:d2:70:09:45:e2:99:74:35:b4:b2:7e:
         ab:2c:7f:12:5c:a4:26:55:60:59:3b:ac:a9:55:75:1f:e5:39:
         91:6c:9b:b5:8b:c9:8a:b5:ec:fc:e8:f6:c7:ad:ce:40:c2:98:
         66:2c:98:69:82:9b:3d:e2:11:a0:e3:aa:81:fd:97:78:40:76:
         12:89:69:3c:89:da:69:2c:d2:1d:45:56:83:c2:71:4d:12:00:
         fd:4c:a8:16:f2:ce:e9:95:ab:76:d6:fc:2f:cf:04:04:a6:3c:
         fc:42:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org