Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa
File:                     3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa (raw, json)
Hash identifier:          hkcSlMA2iaCW22HvwxOuVnKtNTO+kWSdl/4uwmnG95g=
Subject key identifier:   BA:4F:BC:98:43:20:32:F2:60:85:F7:F4:DF:23:57:E9:5C:A2:A4:02
Certificate issuer:       /CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
Certificate serial:       05163BFD72D5B19721B90363D3641B0876E1BBBF
Authority key identifier: 9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     52932
IP address blocks:        177.185.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:16:3b:fd:72:d5:b1:97:21:b9:03:63:d3:64:1b:08:76:e1:bb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject: CN=BA4FBC98432032F26085F7F4DF2357E95CA2A402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ad:d2:25:a0:bb:58:df:9c:2d:1c:57:57:8b:
                    38:3f:c0:a2:d9:9f:b6:50:67:2c:18:6a:05:f5:93:
                    4f:e5:60:5a:6a:ca:1b:15:b7:43:99:c6:2d:0f:ab:
                    05:ab:76:22:c3:9c:4d:b1:ba:34:5f:07:bc:86:43:
                    15:ad:e9:85:d5:b1:7f:6a:ae:7d:70:42:cc:97:d4:
                    a4:ec:12:60:8c:29:da:e5:e4:df:27:c7:65:72:61:
                    9e:88:87:48:8f:53:f4:67:87:51:9c:73:7c:15:8b:
                    eb:d9:02:14:0d:8d:a7:cc:25:85:03:08:7a:f2:be:
                    99:d6:64:5b:5f:c9:2e:90:98:14:1f:9a:30:af:ee:
                    34:fe:5c:c9:87:d6:be:8e:a1:f3:d6:f1:1c:fe:dc:
                    03:7c:9b:af:28:44:0b:b5:10:52:4d:3e:19:a6:f4:
                    70:b0:45:67:ca:51:3d:9d:44:2b:a4:cb:c4:d1:7d:
                    97:c0:ab:51:a6:92:f9:de:c6:9f:74:01:d0:d6:80:
                    d8:f9:7c:de:f0:d5:38:67:de:d5:90:d9:ba:65:98:
                    59:1f:31:95:28:ef:f9:b2:fe:cb:33:4f:2f:c8:f7:
                    b9:bf:df:92:58:0d:69:73:6d:ee:ff:cc:f6:4a:be:
                    fa:58:f9:21:8b:c4:b4:27:63:22:1c:0a:89:5d:18:
                    5d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4F:BC:98:43:20:32:F2:60:85:F7:F4:DF:23:57:E9:5C:A2:A4:02
            X509v3 Authority Key Identifier:
                keyid:9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:9f:54:7d:b7:f4:f5:9c:29:b9:c9:61:04:3c:8e:41:ee:89:
         21:90:64:62:ca:2a:96:d2:05:d7:33:14:e4:80:e4:5e:42:5c:
         f1:3d:be:15:5c:1f:3f:95:11:a7:1b:94:ed:b8:48:25:3e:d2:
         72:ff:06:fc:26:0e:6b:eb:9a:f4:95:23:43:f2:42:f5:5e:79:
         f3:5b:28:14:1f:75:d6:d6:95:59:fa:6f:6b:9f:da:29:ae:b9:
         2b:ae:9e:85:ef:17:dd:f9:0e:3a:5b:41:0f:93:88:b4:24:b9:
         f7:32:03:37:ae:4e:4e:f9:2a:36:fc:6d:2c:32:2d:1e:f1:67:
         14:04:18:49:11:61:c3:cd:14:86:e0:c4:ca:ba:9e:6f:10:9b:
         44:fc:57:bc:19:2d:d9:24:c7:2c:1b:a4:18:64:48:14:4b:19:
         b5:c5:26:77:1b:bb:6e:ff:24:02:f4:58:a4:df:32:6a:19:61:
         14:d7:fb:42:0c:50:5a:fc:4e:19:b5:ee:85:26:1a:d4:2a:61:
         b1:55:58:83:03:fc:7e:d9:4d:91:ba:38:35:b0:97:c2:22:59:
         df:aa:ef:3b:97:f7:22:cd:11:33:a0:4f:7d:83:2f:fd:4e:33:
         9e:01:c3:bd:a5:bd:ed:cc:50:90:1f:65:8b:9f:19:3c:04:25:
         1e:b4:bb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org