Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32342d3234203d3e20323632383636.roa
File:                     3137372e31322e3234302e302f32342d3234203d3e20323632383636.roa (raw, json)
Hash identifier:          du7VOOD9CTN9wzsxQsVl+uVLMWNEFz/jQBHJFBiNDuY=
Subject key identifier:   80:9B:32:AF:11:DC:E5:80:81:DC:75:9E:1C:A5:DA:FC:F4:41:88:3C
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       0B986137B29085B6FF6047C50C8745F596FC8B2B
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32342d3234203d3e20323632383636.roa
Signing time:             Mon 22 Jan 2024 12:15:15 +0000
ROA not before:           Mon 22 Jan 2024 12:10:15 +0000
ROA not after:            Mon 20 Jan 2025 12:15:15 +0000
asID:                     262866
IP address blocks:        177.12.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:98:61:37:b2:90:85:b6:ff:60:47:c5:0c:87:45:f5:96:fc:8b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Jan 22 12:10:15 2024 GMT
            Not After : Jan 20 12:15:15 2025 GMT
        Subject: CN=809B32AF11DCE58081DC759E1CA5DAFCF441883C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:a1:f4:8e:63:41:57:b0:0c:6c:4f:48:f5:
                    90:36:ca:1c:a8:7b:8e:ba:20:26:27:8a:bb:a0:ff:
                    42:17:29:d5:20:5c:c6:43:63:b8:9b:fd:b8:d1:29:
                    dc:2a:2b:a9:c4:0c:ef:0d:7a:2c:01:c4:bc:dd:80:
                    04:a4:b1:c0:61:3c:4e:ea:81:27:b2:d6:70:0b:04:
                    fa:68:58:72:c8:75:28:0b:c1:ec:50:56:72:71:e9:
                    3a:56:bb:f5:10:c1:50:82:fc:97:b4:65:eb:f3:b5:
                    7d:a3:d5:fa:7b:3a:e2:ae:3e:03:6a:67:9b:13:9f:
                    99:32:85:9f:37:6a:42:20:08:df:82:92:1f:90:75:
                    50:32:d8:6d:c6:cf:69:d4:34:73:d8:6f:d3:a8:b8:
                    a2:65:48:69:9c:06:d8:8f:cf:b9:1b:d0:ce:16:cc:
                    c3:8f:4a:c6:a5:ca:1e:9a:12:b2:77:68:c3:79:ac:
                    06:24:b4:5f:a4:f8:5b:77:2f:2e:74:15:95:1b:7e:
                    93:3c:bc:22:df:4e:86:c3:9a:28:27:c0:03:ae:0f:
                    24:c2:4b:0c:91:db:71:7a:e7:d6:26:30:81:db:37:
                    05:fb:c7:81:0c:f6:f9:a3:87:da:a4:ec:15:d8:29:
                    40:15:23:b4:05:d5:e5:88:00:40:b0:a6:fb:76:e8:
                    d8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9B:32:AF:11:DC:E5:80:81:DC:75:9E:1C:A5:DA:FC:F4:41:88:3C
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234302e302f32342d3234203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:83:f6:e1:9c:39:91:2a:75:ea:85:73:92:25:a0:3b:63:61:
         f8:ea:d7:50:81:99:9b:bf:5a:00:05:a3:d3:5a:6a:d6:d7:28:
         36:3c:7e:7e:16:04:24:5f:67:e0:09:49:f4:2c:3c:bd:5a:4e:
         51:45:fb:6b:32:8c:d6:00:dc:b0:a9:d6:05:68:d6:ed:31:1c:
         b6:f0:a6:08:d6:68:73:d4:23:9c:d8:c9:6b:a0:d4:68:3c:fc:
         0c:44:08:44:20:fe:bd:dd:e1:d5:da:17:5c:f9:07:96:46:ed:
         5f:21:f0:4e:8c:c5:fd:7a:e8:fd:12:6e:b6:59:98:ed:0b:ea:
         95:a4:0b:ce:29:8a:e0:2c:37:89:15:43:2e:0d:17:4e:d5:b4:
         ee:cb:b3:85:01:77:55:c6:ce:cf:68:f0:5e:95:8c:9b:d9:59:
         14:76:aa:80:92:10:94:21:db:6d:8a:28:91:5a:e1:f1:74:43:
         2f:ed:59:24:10:2f:7d:c6:04:81:21:f2:a8:8d:b6:69:ed:ef:
         02:6a:70:95:f7:f8:fa:d4:97:ff:a6:61:cc:ff:89:4e:9a:a5:
         fa:2f:25:6f:21:22:6b:4a:82:2f:6e:1e:b9:da:cb:e1:9d:26:
         4c:cb:f0:86:93:b6:e8:bc:60:cd:df:94:d1:80:e0:9d:1f:24:
         1d:41:fa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org