Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34302e302f32312d3231203d3e20323633303338.roa
File:                     3137372e32332e34302e302f32312d3231203d3e20323633303338.roa (raw, json)
Hash identifier:          opaTynSyYuHYvRD4JK7a+zXOAcgtkI1wgKSQLnLkUeQ=
Subject key identifier:   9D:30:2A:4E:49:B4:43:8E:E9:8F:18:75:E6:33:1C:FC:3C:D6:3E:A4
Certificate issuer:       /CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
Certificate serial:       4E92CBE4E3F9FAA81B913E1339D965758D23FCC2
Authority key identifier: D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34302e302f32312d3231203d3e20323633303338.roa
Signing time:             Mon 26 Feb 2024 13:57:55 +0000
ROA not before:           Mon 26 Feb 2024 13:52:55 +0000
ROA not after:            Mon 24 Feb 2025 13:57:55 +0000
asID:                     263038
IP address blocks:        177.23.40.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:92:cb:e4:e3:f9:fa:a8:1b:91:3e:13:39:d9:65:75:8d:23:fc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
        Validity
            Not Before: Feb 26 13:52:55 2024 GMT
            Not After : Feb 24 13:57:55 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:01:35:e3:cb:b1:77:68:c9:47:f3:ac:3c:de:
                    88:69:4e:4f:93:cb:4a:c7:6f:c0:8f:2f:ca:51:6d:
                    de:82:62:af:73:57:a9:c8:27:7e:d6:9b:96:be:8b:
                    10:ff:4e:24:23:43:a2:05:e0:96:47:ea:e6:fb:46:
                    b3:24:31:ab:04:5f:6d:6c:41:ba:7f:26:49:4f:31:
                    d4:0b:2f:a1:c6:85:e6:82:a1:e5:32:e7:3b:7b:75:
                    94:c1:d3:9d:e3:c5:33:77:91:66:d7:6f:f7:44:45:
                    fd:0b:c2:4c:34:fa:91:c7:4e:1c:b5:1c:55:17:db:
                    29:70:43:9b:c9:9b:f4:2e:9f:c6:e0:a5:bf:ee:a0:
                    d3:c7:e9:59:20:07:7a:89:7e:4a:79:5e:8b:c3:6a:
                    69:36:b4:80:a6:3d:76:4c:fa:03:26:1b:f9:14:94:
                    1b:2e:7f:04:5c:4d:53:27:7e:84:bb:27:25:f2:bb:
                    b4:6d:23:46:81:9f:00:3e:af:46:cb:b6:99:d2:85:
                    2e:6b:ec:14:e3:84:d1:93:84:c7:87:ec:5e:48:dd:
                    90:02:5c:d7:9f:53:c9:3d:7c:03:58:7d:9e:7f:42:
                    05:a4:13:f4:bc:61:68:21:c9:3f:7f:71:88:2e:c5:
                    35:82:5d:2c:2b:97:c3:0d:48:45:4b:84:f3:d8:71:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:30:2A:4E:49:B4:43:8E:E9:8F:18:75:E6:33:1C:FC:3C:D6:3E:A4
            X509v3 Authority Key Identifier:
                keyid:D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34302e302f32312d3231203d3e20323633303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:18:61:36:92:1f:ae:7b:93:7a:b5:8d:c7:ac:8e:3c:62:bf:
         bb:43:8e:6c:90:f6:1b:d6:e2:d9:3a:2f:77:22:b8:b8:f1:f4:
         5f:f8:15:ad:84:28:06:9d:38:a2:55:65:b3:61:bd:49:70:d8:
         c5:8a:6e:62:e4:d8:2e:d9:31:fb:98:e4:92:3b:a6:33:27:a7:
         c0:1a:df:a5:5b:d3:ea:50:c0:61:46:9c:ba:b9:5c:2f:b0:90:
         de:ba:7a:ee:e7:ce:09:83:aa:e6:ec:31:8b:6c:21:ad:0e:a4:
         e9:3f:73:4d:42:86:0f:fb:6e:4c:db:86:85:22:ac:5c:f3:65:
         5e:e0:b8:6e:9f:09:ef:37:d1:43:f1:6b:b7:32:36:0a:64:94:
         39:3d:7e:ee:46:75:bd:ca:b2:d6:b3:94:80:8c:1e:9b:95:e3:
         b7:4b:c7:2a:f4:cd:ee:24:a9:92:b9:e3:4c:11:47:41:1f:03:
         3b:cc:6c:8f:0c:8b:29:88:a9:00:b4:51:90:ce:38:48:d6:51:
         0a:0b:b4:ae:08:8b:a6:af:d6:76:00:2f:f8:2e:5f:30:00:6f:
         37:cc:c1:2c:bb:42:e4:a2:dd:a9:4e:c8:31:4e:46:7a:7f:e0:
         49:c7:4b:71:a3:71:7a:4d:46:72:5f:51:ae:71:76:19:3e:c9:
         2e:42:02:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org