Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32322d3232203d3e20323633363034.roa
File:                     3137372e37312e38382e302f32322d3232203d3e20323633363034.roa (raw, json)
Hash identifier:          lxcHLl+t5aJkpF5rGur1pp8af21su3jtNJtAqSwRaDQ=
Subject key identifier:   7B:EA:C6:F5:5A:BC:3A:D1:27:98:FE:0D:D2:E4:2C:4F:FF:24:D4:56
Certificate issuer:       /CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
Certificate serial:       116270C19DF8A72B59CDFC8053A5E3FECF64F037
Authority key identifier: 49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32322d3232203d3e20323633363034.roa
Signing time:             Tue 19 Dec 2023 17:10:16 +0000
ROA not before:           Tue 19 Dec 2023 17:05:16 +0000
ROA not after:            Tue 17 Dec 2024 17:10:16 +0000
asID:                     263604
IP address blocks:        177.71.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:62:70:c1:9d:f8:a7:2b:59:cd:fc:80:53:a5:e3:fe:cf:64:f0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
        Validity
            Not Before: Dec 19 17:05:16 2023 GMT
            Not After : Dec 17 17:10:16 2024 GMT
        Subject: CN=7BEAC6F55ABC3AD12798FE0DD2E42C4FFF24D456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:a4:09:f2:e4:34:6c:8c:34:1f:48:fb:bd:
                    2e:66:4b:aa:65:1a:17:35:0c:01:e0:4b:f8:44:92:
                    84:87:76:8a:b8:1e:d8:c2:88:c2:a8:71:26:8e:6b:
                    d6:a9:f4:6c:03:45:bd:d7:72:6f:a3:bc:08:fc:74:
                    90:25:5a:42:29:2e:d8:46:46:3d:ab:b1:32:33:0d:
                    59:d0:cd:be:30:34:8b:89:54:11:21:0f:e2:a1:71:
                    be:2d:9b:17:5c:84:0c:e1:63:d7:be:1e:44:0f:07:
                    56:94:83:3f:62:8a:9c:ce:f0:f2:cc:1c:1e:13:13:
                    b8:59:8b:20:bf:c8:6e:39:39:00:31:d3:c9:9b:eb:
                    f4:57:4d:d5:60:51:65:bb:1d:e4:ad:59:8b:d5:25:
                    80:a7:b3:ef:ba:6b:91:d0:3d:34:4b:04:06:1f:fd:
                    88:16:40:9d:04:b2:c7:91:af:a4:92:c6:99:bf:8d:
                    cd:a4:06:70:54:34:9d:a2:18:77:8d:7b:0c:8a:a8:
                    b0:d3:d6:df:6b:7b:ae:ac:e8:b8:94:e0:f5:dd:b3:
                    c7:3c:a3:64:d7:5a:74:92:9f:4a:c8:38:d9:56:da:
                    ad:b4:31:f9:41:65:70:3d:18:6f:c0:c8:f3:cf:4a:
                    d3:04:c8:33:e8:d3:1f:0e:30:bb:b6:92:e6:51:5c:
                    04:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EA:C6:F5:5A:BC:3A:D1:27:98:FE:0D:D2:E4:2C:4F:FF:24:D4:56
            X509v3 Authority Key Identifier:
                keyid:49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32322d3232203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:c0:58:73:31:2c:6a:5b:e6:ff:30:3a:a8:47:36:8d:6a:dd:
         14:57:14:3d:ec:b5:3b:43:67:0a:02:32:2e:f6:7b:09:07:52:
         ac:8c:bc:78:33:d3:bf:07:40:87:90:aa:87:32:04:ae:6f:b6:
         78:04:83:41:4d:e4:b4:30:09:02:3c:fd:ff:09:f9:71:cc:38:
         3c:e4:20:13:bd:7e:12:e7:34:9e:0e:a9:54:bd:d9:e2:38:f2:
         81:c7:d3:9e:82:ad:ef:80:53:0d:31:eb:e0:66:87:54:f3:d0:
         2f:c4:4b:00:10:dd:e2:db:73:54:20:68:70:81:97:9c:f9:02:
         75:41:03:27:8b:eb:d2:53:98:9a:03:b3:6a:ac:3e:ee:2c:0d:
         ae:ed:08:a3:06:bb:8c:44:4c:b1:ac:ec:3d:d5:16:b6:cc:b8:
         4b:f3:6f:b3:56:9d:d8:0a:4f:00:9a:cc:35:b1:92:fb:07:bc:
         e6:53:c0:81:2e:7f:0c:40:c8:4d:b7:af:55:29:20:67:4c:3a:
         4a:58:d3:93:b9:5f:be:6e:3f:da:da:63:b0:49:cc:9e:78:04:
         e7:07:27:92:2c:4c:79:98:7d:ab:6f:11:c9:a5:e4:c2:63:2a:
         15:43:07:92:49:cb:23:a6:70:f5:d0:8e:01:74:25:68:6f:b3:
         d2:95:d3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org