Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3235322e302f32332d3233203d3e20323632383636.roa
File:                     3137372e31322e3235322e302f32332d3233203d3e20323632383636.roa (raw, json)
Hash identifier:          aRz+wd1TTTNDwrmLtjMgHDQyYqp7gxCGvRZVSPQYx0c=
Subject key identifier:   81:25:BF:A5:8E:33:81:C6:FF:55:F5:96:82:48:61:1A:D0:91:C4:42
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       61E5702527DC70C31424E168E621D905E983914B
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3235322e302f32332d3233203d3e20323632383636.roa
Signing time:             Fri 12 Jan 2024 18:11:19 +0000
ROA not before:           Fri 12 Jan 2024 18:06:19 +0000
ROA not after:            Fri 10 Jan 2025 18:11:19 +0000
asID:                     262866
IP address blocks:        177.12.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e5:70:25:27:dc:70:c3:14:24:e1:68:e6:21:d9:05:e9:83:91:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Jan 12 18:06:19 2024 GMT
            Not After : Jan 10 18:11:19 2025 GMT
        Subject: CN=8125BFA58E3381C6FF55F5968248611AD091C442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:6c:7c:8d:c8:36:ef:44:c2:e3:b2:fe:3f:
                    7d:fd:47:40:16:f3:24:a4:4b:2c:f4:17:3d:08:71:
                    e6:e8:d4:92:3d:67:14:3c:8f:bc:84:89:98:31:1b:
                    06:06:82:cc:2e:bf:9d:3b:97:e3:25:95:29:a4:3f:
                    bc:65:85:06:0a:0f:75:f8:e1:b3:e7:3b:40:e4:9a:
                    6d:20:32:03:08:b3:f7:87:48:d6:6a:da:b0:f9:f8:
                    ee:60:98:eb:4d:ca:7a:08:da:8d:97:f9:ce:4d:bf:
                    6a:90:80:bc:be:e9:2e:ad:f2:3b:c3:d9:0e:e0:89:
                    23:75:0e:62:b9:72:ca:16:ba:73:50:52:3f:db:6b:
                    f7:3a:86:62:e5:91:80:1c:0a:48:6b:e0:09:14:02:
                    c3:33:09:07:85:34:98:e2:c9:5f:2d:44:fb:e4:84:
                    c3:da:3e:5c:5b:e8:bd:9c:15:44:a6:76:f5:4f:3a:
                    a2:09:61:79:1c:25:45:6f:06:9b:1b:48:4a:18:4b:
                    f9:eb:fa:1b:0b:5f:70:b2:7a:0f:27:98:a9:52:29:
                    a0:5f:f7:f3:6a:72:04:2f:03:b8:3b:90:a9:fb:1e:
                    85:ad:4d:5e:99:86:cd:18:31:8d:fa:0f:09:4d:d0:
                    7d:61:a0:d3:1f:4b:51:8c:8f:aa:d4:61:bd:c5:c2:
                    b4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:25:BF:A5:8E:33:81:C6:FF:55:F5:96:82:48:61:1A:D0:91:C4:42
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3235322e302f32332d3233203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:94:30:28:f4:74:e6:91:1f:f9:d6:0b:29:8a:d4:eb:20:d0:
         2d:91:02:cd:07:99:f8:6c:ec:17:c1:fb:8f:6e:4c:f6:94:01:
         6c:7b:43:89:6c:0a:af:49:81:e9:6e:2d:25:86:57:d0:11:1b:
         2d:62:3f:95:0b:bc:b4:d7:3c:a1:7a:b6:0f:51:1c:05:35:4c:
         e8:46:59:e6:36:7a:73:5b:6d:a1:87:80:01:5a:e8:1b:50:ab:
         c1:9c:57:97:2a:ae:0d:22:59:d0:6e:f7:91:fa:2f:59:f4:7a:
         3e:a2:99:76:37:8b:ff:2b:89:a3:51:af:16:79:e5:8e:88:59:
         b9:f0:91:1a:1e:24:de:f4:cd:29:00:df:94:e7:44:30:da:54:
         b0:35:66:20:c7:c0:12:11:e0:e4:14:d3:7b:0c:68:fb:9b:d6:
         d1:a0:5c:44:ef:03:99:36:a9:be:7b:98:a5:92:a5:a4:0c:98:
         05:b4:89:d6:f4:0b:de:c5:ca:6f:bd:cb:28:9d:f8:92:f2:ad:
         7e:0c:f7:a2:41:d7:33:45:16:d9:83:4b:49:74:46:68:a5:27:
         5f:6c:80:8e:13:44:94:38:d7:6c:e6:f1:6e:84:43:22:c6:e0:
         cf:49:67:06:71:8f:fa:1d:bd:9f:a5:c8:15:78:b8:8c:55:10:
         2b:9a:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org