Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34342e302f32342d3234203d3e20323633303338.roa
File:                     3137372e32332e34342e302f32342d3234203d3e20323633303338.roa (raw, json)
Hash identifier:          aRFDfwZiCf0pTngBgt/PgwUDLCaAURvka+k2Q5L3Ai4=
Subject key identifier:   FF:64:CB:C1:6C:F3:1C:4A:7C:A6:7E:F8:53:FF:42:8C:48:92:60:03
Certificate issuer:       /CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
Certificate serial:       3D8DA650D9A4A6D24EB51EE5EDCFD7B18247C3CB
Authority key identifier: D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34342e302f32342d3234203d3e20323633303338.roa
Signing time:             Mon 26 Feb 2024 13:57:56 +0000
ROA not before:           Mon 26 Feb 2024 13:52:56 +0000
ROA not after:            Mon 24 Feb 2025 13:57:56 +0000
asID:                     263038
IP address blocks:        177.23.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8d:a6:50:d9:a4:a6:d2:4e:b5:1e:e5:ed:cf:d7:b1:82:47:c3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
        Validity
            Not Before: Feb 26 13:52:56 2024 GMT
            Not After : Feb 24 13:57:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ab:f3:65:1e:a8:70:6b:64:61:69:59:bf:7e:
                    43:67:1d:2a:52:8a:64:13:1d:0b:d0:c4:71:41:8d:
                    2e:dd:3f:d1:1d:34:b4:f1:ab:e7:af:fb:12:5e:12:
                    82:32:e3:59:d7:a6:0d:58:39:7d:7c:e1:d8:2b:15:
                    42:80:d2:e7:21:c9:bb:12:95:0f:bf:80:38:ab:6b:
                    65:12:d1:4a:7a:73:02:8e:46:4a:50:af:1e:9c:62:
                    55:6b:8d:87:2f:45:6b:5f:aa:45:1f:75:56:94:0e:
                    b3:29:39:08:d5:9b:6c:1f:0c:7a:3a:e4:d5:02:2e:
                    46:6c:bc:44:b4:2d:19:e2:d4:73:19:91:11:6a:a8:
                    f0:1a:df:7f:54:6c:94:54:08:00:61:25:ad:74:5f:
                    06:26:5f:2b:04:b1:89:7d:58:cc:31:f9:9f:5c:a3:
                    2b:42:d6:bb:03:13:de:b6:d0:fb:cc:e1:fb:27:d2:
                    3d:7f:dd:f6:28:37:9f:04:b4:c5:d1:97:32:c0:5b:
                    f1:c4:11:b0:39:00:a0:8a:ea:61:76:8c:2c:dd:b7:
                    be:5c:e0:78:1b:15:0c:a9:67:0a:9e:3c:f4:a8:a6:
                    7d:90:41:7e:d3:69:34:1a:0e:dd:d8:2a:cc:1e:0e:
                    49:7b:84:0d:6e:00:4d:bf:c6:89:51:31:29:1c:a6:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:64:CB:C1:6C:F3:1C:4A:7C:A6:7E:F8:53:FF:42:8C:48:92:60:03
            X509v3 Authority Key Identifier:
                keyid:D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34342e302f32342d3234203d3e20323633303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:d9:42:bd:bf:c3:83:ee:7e:b3:f2:1b:a6:8c:df:39:be:0d:
         38:66:7b:fe:68:d5:8c:28:5f:a1:01:69:24:30:dd:07:d2:09:
         36:c1:92:df:a3:0c:fe:0f:30:97:9a:e1:f6:5d:b0:4c:63:3c:
         b9:54:8c:19:00:c5:a9:bf:b9:0b:7a:85:8b:ec:c8:29:45:f6:
         33:e9:0d:88:da:c8:f9:f9:62:a3:15:29:58:11:22:5a:b1:08:
         bb:1f:1b:ab:00:6c:e0:00:b0:0d:bb:03:98:aa:54:e5:c2:7c:
         44:bd:83:df:dc:1e:b7:9b:c6:8a:95:f1:b8:c6:00:9e:67:3c:
         a9:c9:d9:d3:e9:c4:78:32:0d:c4:51:40:c3:bb:f7:44:bd:c0:
         e1:e8:67:5d:2c:fc:d5:d2:92:6d:4a:f2:d5:80:35:f1:d2:c3:
         df:6c:ae:04:af:d0:ad:4d:36:51:60:39:51:e8:2e:8d:bc:10:
         7f:8a:3d:23:85:52:ae:0d:33:5f:74:1a:e7:ae:b7:35:a2:dc:
         e8:9c:e1:78:f9:0c:f9:ee:c5:c3:2a:dd:dd:34:21:4b:1f:8e:
         0f:30:ca:16:f7:af:62:c2:36:c2:98:9b:3f:70:f1:96:82:9d:
         1f:ee:38:b0:d7:96:54:85:bf:05:6d:88:c4:72:da:f6:b1:6c:
         16:54:e5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org