Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234342e302f32332d3233203d3e20323632383636.roa
File:                     3137372e31322e3234342e302f32332d3233203d3e20323632383636.roa (raw, json)
Hash identifier:          CrkAGaLdNOKEatZLPOYki19j0aDx8aw+Zb8bX+MwVw0=
Subject key identifier:   65:41:B0:74:56:44:BE:10:DE:BC:CD:41:15:5B:2D:44:A1:1D:08:53
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       4F392B714073EC630815875374F7EAA54188BF10
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234342e302f32332d3233203d3e20323632383636.roa
Signing time:             Thu 12 Oct 2023 15:34:26 +0000
ROA not before:           Thu 12 Oct 2023 15:29:26 +0000
ROA not after:            Thu 10 Oct 2024 15:34:26 +0000
asID:                     262866
IP address blocks:        177.12.244.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:39:2b:71:40:73:ec:63:08:15:87:53:74:f7:ea:a5:41:88:bf:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Oct 12 15:29:26 2023 GMT
            Not After : Oct 10 15:34:26 2024 GMT
        Subject: CN=6541B0745644BE10DEBCCD41155B2D44A11D0853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:8b:d9:7c:4a:bd:4b:10:0a:6f:95:6c:fe:
                    48:c0:55:40:5e:a3:c5:15:c5:17:62:b3:99:e9:bf:
                    f5:8b:95:5a:ee:0b:f0:e6:79:4a:70:b1:e9:f0:c0:
                    a7:36:b9:f7:55:43:11:64:c5:0a:d7:95:5e:b0:78:
                    be:ff:fa:96:80:ed:17:c6:08:20:2a:7c:54:62:bd:
                    84:1a:6b:16:72:66:6d:51:95:33:e5:5a:83:ab:6c:
                    8f:da:5a:4b:4a:bc:4f:4d:bd:c3:3d:bf:d5:79:da:
                    74:35:15:63:5d:63:f0:58:f2:77:f3:5d:91:80:8b:
                    f6:7b:cf:9b:3f:85:2c:25:12:75:cd:52:61:de:b5:
                    56:04:5c:b8:bb:0b:33:e1:5c:6a:c0:15:d8:32:7d:
                    42:56:00:bb:75:6c:50:7c:42:ae:08:b2:f1:f8:7a:
                    14:7f:66:7c:bb:3a:b2:bf:92:d3:9c:2a:ab:b8:4d:
                    44:43:30:75:26:4d:fb:7e:3b:d9:04:60:f8:06:c8:
                    6a:ee:f3:f8:b1:c8:0f:b6:dd:1f:40:3d:a8:00:ca:
                    a1:13:7f:5c:e3:e7:b6:a8:67:33:12:dc:e3:68:84:
                    23:6f:5c:b3:d3:57:8c:44:89:24:bd:07:38:dd:8a:
                    31:72:d4:00:01:3a:30:86:13:5b:5b:89:9f:cf:9b:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:41:B0:74:56:44:BE:10:DE:BC:CD:41:15:5B:2D:44:A1:1D:08:53
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234342e302f32332d3233203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:44:6e:93:3c:6f:3f:20:6e:09:f3:c3:71:62:fd:11:06:
         fe:6e:bc:f3:d3:68:e3:0b:59:6e:c8:f6:41:5c:b3:b4:5b:4d:
         ce:de:b9:a6:20:d3:61:5a:8a:17:81:b8:79:1d:9b:c6:b2:79:
         4a:f6:7d:e4:06:fd:ae:19:62:eb:25:0b:7a:e8:d2:34:fa:3e:
         bd:71:13:71:d9:c4:db:2c:e7:bf:23:30:46:c0:0c:2e:e5:9c:
         14:05:ed:c6:3b:72:9f:95:7c:f4:27:77:e1:f3:88:2b:77:b7:
         e9:fd:cc:ce:71:42:2f:5e:40:e9:5d:f0:12:dc:c5:df:4f:c0:
         f8:3e:4c:86:7a:3a:92:cd:44:77:60:04:e7:d8:e2:77:20:f0:
         07:a4:cc:5c:4b:3f:ec:c9:0d:41:a6:f8:8c:90:60:64:3f:4f:
         3d:35:b1:6c:ea:5e:30:af:d4:4e:17:41:b4:70:71:43:6c:73:
         79:ba:96:cf:63:c4:0e:18:ab:c2:95:db:84:d5:3f:01:12:1b:
         7c:43:27:ce:a4:65:1d:1f:e9:02:90:d1:8e:49:b9:70:1c:29:
         41:55:66:8b:8b:d6:47:7e:c6:39:f4:e9:6b:b7:9d:4b:aa:a6:
         b8:48:0d:52:a7:42:a3:8d:42:43:4b:31:58:49:81:91:a6:d1:
         57:26:6f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org