Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/3137372e3139302e3139322e302f32302d3234203d3e20323632373331.roa
File:                     3137372e3139302e3139322e302f32302d3234203d3e20323632373331.roa (raw, json)
Hash identifier:          aJ7nhZGTj8tFH6UwGS1XlKz2e08XZM+++tDzXDQTT1M=
Subject key identifier:   AA:AB:44:E5:F6:60:BF:31:92:5C:DF:FE:35:49:D8:E1:2C:1E:59:34
Certificate issuer:       /CN=3020C6E7F7523D2D4B703357CE58C7E064570671
Certificate serial:       1B4D6DC05292D91711D495444DE13B5DF8B862B5
Authority key identifier: 30:20:C6:E7:F7:52:3D:2D:4B:70:33:57:CE:58:C7:E0:64:57:06:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3020C6E7F7523D2D4B703357CE58C7E064570671.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/3137372e3139302e3139322e302f32302d3234203d3e20323632373331.roa
Signing time:             Mon 11 Dec 2023 16:09:11 +0000
ROA not before:           Mon 11 Dec 2023 16:04:11 +0000
ROA not after:            Mon 09 Dec 2024 16:09:11 +0000
asID:                     262731
IP address blocks:        177.190.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4d:6d:c0:52:92:d9:17:11:d4:95:44:4d:e1:3b:5d:f8:b8:62:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3020C6E7F7523D2D4B703357CE58C7E064570671
        Validity
            Not Before: Dec 11 16:04:11 2023 GMT
            Not After : Dec  9 16:09:11 2024 GMT
        Subject: CN=AAAB44E5F660BF31925CDFFE3549D8E12C1E5934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:68:6a:6b:64:f9:ac:97:59:d9:c5:09:a6:5d:
                    9a:14:9a:fe:c7:ff:52:ed:e2:79:3a:83:f9:88:93:
                    2d:55:06:d5:38:52:51:d5:1a:48:ce:b1:f1:c8:79:
                    3c:05:1f:f6:a0:94:fb:9c:8c:6b:e0:cf:d4:ea:2a:
                    d4:8f:32:8f:5e:d2:96:c4:cf:b3:80:cf:9f:fd:78:
                    61:9c:22:88:84:0e:5f:64:d8:40:0c:3f:cb:fa:f8:
                    8a:b9:d7:aa:fe:59:c8:ac:68:96:33:18:6c:c3:90:
                    5d:39:ac:2d:97:33:ec:87:be:cd:54:60:bf:55:90:
                    d0:ae:b0:65:7d:cc:c2:3b:67:f7:c1:42:3d:0b:7a:
                    b2:28:5d:ee:ac:2a:ee:ef:4b:5b:f2:94:6a:bb:7b:
                    ee:c5:8b:ff:9d:ae:d7:2c:4d:43:ff:75:0b:14:6a:
                    7f:d8:6d:6c:d6:a2:17:9d:c7:db:e4:74:38:92:d4:
                    b5:4c:1c:2d:98:5c:be:3c:50:b5:ce:77:c5:b5:cb:
                    47:d5:71:47:2a:c1:d6:c6:d8:53:de:fa:85:56:8f:
                    d8:84:7b:7e:de:eb:7d:a2:38:77:7e:1d:b3:92:d3:
                    7f:fc:5c:48:71:cb:49:fe:79:af:df:3f:e3:b3:fd:
                    ff:5b:a7:cc:1c:59:d9:e8:72:73:8c:7c:2c:f6:5e:
                    22:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AB:44:E5:F6:60:BF:31:92:5C:DF:FE:35:49:D8:E1:2C:1E:59:34
            X509v3 Authority Key Identifier:
                keyid:30:20:C6:E7:F7:52:3D:2D:4B:70:33:57:CE:58:C7:E0:64:57:06:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/3020C6E7F7523D2D4B703357CE58C7E064570671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3020C6E7F7523D2D4B703357CE58C7E064570671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/3137372e3139302e3139322e302f32302d3234203d3e20323632373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:0d:37:7a:c1:d3:19:bd:a8:c5:9d:c0:f4:a2:d8:95:91:d9:
         f1:79:66:a9:18:b0:7b:7c:e7:f2:9a:94:9a:0e:46:46:80:64:
         73:4f:f9:e5:34:2a:f1:33:e5:d3:f4:93:2f:e4:c2:57:d9:de:
         b5:72:94:64:60:71:89:dc:ce:31:d3:d4:08:3a:72:7d:07:d9:
         41:c9:29:ae:73:59:ed:0b:d2:15:76:36:00:e4:ab:83:1e:44:
         d8:65:d2:09:4f:4f:49:09:31:15:37:02:a8:4f:99:fd:21:fb:
         1f:15:ba:b9:98:c5:8b:34:33:90:b7:d1:af:72:c6:6e:d2:c8:
         31:86:13:a8:3c:0c:c8:29:56:19:3c:51:a0:94:98:8c:85:0d:
         c5:0a:9d:ed:92:f0:98:0c:8a:4d:04:fd:a7:fc:20:fb:6e:e9:
         81:7e:2e:88:3e:ef:1f:e2:30:57:c5:0f:55:bf:7f:82:50:4e:
         0e:cd:bc:b6:08:32:73:a2:94:d2:aa:a2:36:34:0b:56:42:53:
         49:32:1c:55:9e:e6:a9:b6:ab:eb:e8:28:b0:e0:79:3b:80:f7:
         3c:e3:36:99:72:90:53:05:93:bb:8e:d1:40:d9:aa:8d:39:5b:
         be:08:e7:1a:3e:07:1f:10:ec:0c:c2:d0:a8:24:b3:07:db:76:
         52:2a:27:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org