Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3137372e32302e3231362e302f32312d3231203d3e20323632383638.roa
File:                     3137372e32302e3231362e302f32312d3231203d3e20323632383638.roa (raw, json)
Hash identifier:          VkOP5ULKp5GbNbHTU04TZHqxIGyVxqi66qp2h1en0Gw=
Subject key identifier:   21:C5:64:95:20:D3:E4:9E:7D:44:B1:F6:CF:6B:FB:E6:F8:BB:90:01
Certificate issuer:       /CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
Certificate serial:       38812937586596B8BA7CF7803F792B5FAA6EFE
Authority key identifier: 07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3137372e32302e3231362e302f32312d3231203d3e20323632383638.roa
Signing time:             Sat 22 Jul 2023 21:39:20 +0000
ROA not before:           Sat 22 Jul 2023 21:34:20 +0000
ROA not after:            Sat 20 Jul 2024 21:39:20 +0000
asID:                     262868
IP address blocks:        177.20.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:81:29:37:58:65:96:b8:ba:7c:f7:80:3f:79:2b:5f:aa:6e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Validity
            Not Before: Jul 22 21:34:20 2023 GMT
            Not After : Jul 20 21:39:20 2024 GMT
        Subject: CN=21C5649520D3E49E7D44B1F6CF6BFBE6F8BB9001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:eb:66:39:14:06:f8:dc:01:b8:a3:c5:88:5d:
                    75:c9:8e:85:2c:95:a8:cd:5b:18:95:31:07:cf:ba:
                    09:3a:8f:ab:4d:b5:29:22:d9:00:d4:53:2d:d8:2d:
                    c4:9e:74:2b:1d:3f:20:5c:a4:fb:94:81:98:64:d3:
                    85:30:63:d4:57:b3:b0:87:c7:e4:7f:43:b9:12:cc:
                    2c:40:c7:d1:fe:89:98:72:a1:c7:24:0b:89:6e:2d:
                    cf:6c:0c:f3:01:8c:7e:68:c8:7d:7a:34:87:bd:ef:
                    77:6d:71:f2:6d:24:2d:f4:04:6a:6a:da:7c:17:a3:
                    08:f8:19:c4:9e:97:de:74:0e:b7:e0:6a:73:d6:3a:
                    10:4c:ea:c9:44:50:37:6c:37:25:41:0d:0c:66:ed:
                    d4:cb:b0:4a:4b:33:76:0e:ae:cb:02:90:2f:a7:5a:
                    ae:96:f4:cd:2d:9c:f4:7e:77:36:e4:95:52:d2:61:
                    3e:46:63:79:87:4c:99:e8:97:2c:08:19:df:f2:44:
                    be:91:2b:f7:24:12:83:4a:cc:66:a4:fc:27:26:62:
                    2e:db:d3:36:80:70:33:60:d6:c7:58:e3:ee:82:94:
                    ab:52:b2:0d:37:82:0e:6c:5e:ed:fe:45:59:8f:44:
                    dd:5a:ce:3b:28:26:89:a7:86:04:00:e5:d2:93:a0:
                    78:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:64:95:20:D3:E4:9E:7D:44:B1:F6:CF:6B:FB:E6:F8:BB:90:01
            X509v3 Authority Key Identifier:
                keyid:07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3137372e32302e3231362e302f32312d3231203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:3f:f0:7b:4c:e0:37:ca:9f:a7:ed:af:dd:fb:39:1a:44:ce:
         60:a0:64:31:09:75:d5:0e:f8:6c:72:af:87:84:1f:c1:a3:2b:
         ed:af:2d:14:e6:03:ac:f3:9e:87:b3:52:4c:5d:b9:b3:cc:e8:
         ff:9c:62:3c:a3:cc:d2:7f:c6:65:c6:40:3f:f3:d6:c5:5e:6e:
         1a:fb:04:29:17:06:66:d1:94:09:4c:88:4f:c0:1a:ee:be:9e:
         d8:5c:20:63:ed:6d:8a:d0:7f:ab:f9:a7:fd:bf:1e:37:24:ca:
         2f:44:50:68:59:69:5a:24:d7:89:e1:2e:2a:dc:20:50:1d:fe:
         85:86:3a:41:af:a5:b8:bf:39:4e:3a:72:24:31:53:c1:ab:11:
         8f:5b:a5:82:83:8d:70:40:89:20:d8:d4:11:4d:bf:13:cd:d7:
         86:25:5d:08:a1:7c:79:8a:bf:41:b4:44:eb:0c:97:eb:37:d2:
         b5:87:79:90:14:af:92:6f:38:31:d5:c0:02:f0:7b:be:86:83:
         64:d8:ee:3a:9b:6a:04:45:af:cb:30:c5:6f:a4:ad:25:8b:da:
         9a:63:07:43:cd:7d:87:d9:5a:84:46:fa:70:82:8e:e0:ca:c8:
         9c:3f:33:09:0b:d5:38:f7:21:67:37:00:19:66:93:96:31:70:
         52:7f:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:04 2024 by rpki-client on console-ams.rpki-client.org