Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3137372e3132382e3139322e302f32312d3234203d3e203532383732.roa
File:                     3137372e3132382e3139322e302f32312d3234203d3e203532383732.roa (raw, json)
Hash identifier:          FksLb81nqVGEu8f0SMhv1jK7blxADSutBVQARQe3Vw4=
Subject key identifier:   FA:02:5E:F3:6D:E7:B3:EF:80:7A:DE:1F:7E:6D:6A:9B:1F:49:E4:B3
Certificate issuer:       /CN=13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7
Certificate serial:       66CFA78F45A6E3339ABF1217A7557FB5026A7E1A
Authority key identifier: 13:D1:F1:BF:3A:18:DE:5F:A5:17:A9:8A:F9:7B:C1:2D:FA:B9:85:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3137372e3132382e3139322e302f32312d3234203d3e203532383732.roa
Signing time:             Tue 12 Mar 2024 20:35:22 +0000
ROA not before:           Tue 12 Mar 2024 20:30:22 +0000
ROA not after:            Tue 11 Mar 2025 20:35:22 +0000
asID:                     52872
IP address blocks:        177.128.192.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cf:a7:8f:45:a6:e3:33:9a:bf:12:17:a7:55:7f:b5:02:6a:7e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7
        Validity
            Not Before: Mar 12 20:30:22 2024 GMT
            Not After : Mar 11 20:35:22 2025 GMT
        Subject: CN=FA025EF36DE7B3EF807ADE1F7E6D6A9B1F49E4B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:f0:cf:0f:20:91:70:45:b8:50:f6:9a:15:
                    98:cd:d0:d3:a3:40:45:01:00:0b:22:7a:3e:e0:37:
                    5c:53:47:cc:1f:9d:5f:5d:d8:54:04:98:c6:cd:be:
                    63:2b:99:a8:17:c0:c0:56:4a:79:aa:f1:21:4b:a3:
                    7c:53:13:df:08:f0:68:50:ae:30:22:2f:2e:26:5f:
                    df:ee:0c:f3:0f:0f:b9:84:84:2b:15:4f:8a:64:5e:
                    4f:8d:41:f6:b1:65:d2:0d:50:54:7e:ab:17:46:d9:
                    d9:19:a8:1a:4c:bd:55:f6:b2:05:62:dd:79:3d:77:
                    92:37:3d:34:5f:d7:f5:1a:9d:00:36:dc:fe:22:08:
                    05:75:86:bc:08:e1:e4:16:ec:ad:8b:8a:51:9e:f5:
                    88:e5:2a:da:e3:61:dc:e4:a7:e7:aa:d7:93:6e:f3:
                    5b:cb:ce:20:d2:bb:07:b0:54:a2:88:da:80:4c:7e:
                    20:38:3b:10:77:7e:3c:a5:d8:cc:0a:9f:2a:4d:81:
                    d0:30:bc:4b:e0:64:89:20:54:90:99:20:af:ef:20:
                    bf:19:a0:e3:2e:b1:10:d7:5c:48:a6:6d:1d:1c:de:
                    4e:4d:15:99:29:be:50:b3:96:da:97:10:9f:77:7e:
                    01:4a:3d:14:b4:26:f6:de:a8:0e:0c:59:c4:9f:95:
                    df:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:02:5E:F3:6D:E7:B3:EF:80:7A:DE:1F:7E:6D:6A:9B:1F:49:E4:B3
            X509v3 Authority Key Identifier:
                keyid:13:D1:F1:BF:3A:18:DE:5F:A5:17:A9:8A:F9:7B:C1:2D:FA:B9:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3137372e3132382e3139322e302f32312d3234203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:e0:84:85:8b:58:56:37:ee:02:ee:0d:37:d0:e7:a5:e9:28:
         08:98:73:63:d7:1e:de:02:43:3e:30:6a:d2:05:71:a5:81:6e:
         2b:7d:71:af:5a:34:22:d2:98:02:85:8b:a0:d0:07:4c:98:79:
         fb:d3:d3:47:a0:d8:85:cf:08:fa:96:2b:f1:63:cd:90:0e:54:
         09:3c:25:60:c0:e2:ea:35:c8:8b:04:b5:22:25:96:d1:26:24:
         c3:3c:39:d5:89:99:92:db:68:5b:cf:ab:c1:bd:af:aa:03:96:
         eb:b2:8b:59:3c:eb:b3:96:0c:3d:b0:56:63:ba:f6:04:3d:53:
         37:4c:fb:d6:65:6c:9c:a1:a4:13:5b:c3:4e:01:26:8c:b4:57:
         b4:d6:33:70:f4:26:4c:9b:72:44:5b:aa:af:90:1b:a9:fc:64:
         2f:84:44:44:78:92:df:14:b7:22:07:8f:84:3b:65:66:42:a3:
         14:73:fa:05:68:26:84:f7:bc:37:44:f7:35:80:4c:2b:11:ae:
         93:e0:a7:6b:af:a5:bd:74:ea:40:51:fd:76:c4:0e:3d:7d:a2:
         2f:15:eb:fd:be:6b:ed:4b:37:cd:5e:e6:e2:b5:59:8d:01:93:
         a4:08:b0:d3:36:b5:2b:94:ec:31:40:a0:c2:f1:30:65:34:6f:
         82:4d:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org