Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3233322e302f32312d3231203d3e20323632353035.roa
File:                     3137372e36362e3233322e302f32312d3231203d3e20323632353035.roa (raw, json)
Hash identifier:          6bVL9UoXWc7xHTOG4xGa1ODOUm+5Qo23pv8Wl6vV50I=
Subject key identifier:   5C:85:24:99:D8:FF:E7:2F:3E:53:82:6A:6F:77:DA:D2:44:E1:6B:4F
Certificate issuer:       /CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
Certificate serial:       18741396AB90CF84FE945B4590D40DA8FC8A22D2
Authority key identifier: 2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3233322e302f32312d3231203d3e20323632353035.roa
Signing time:             Mon 12 Feb 2024 13:14:26 +0000
ROA not before:           Mon 12 Feb 2024 13:09:26 +0000
ROA not after:            Mon 10 Feb 2025 13:14:26 +0000
asID:                     262505
IP address blocks:        177.66.232.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:74:13:96:ab:90:cf:84:fe:94:5b:45:90:d4:0d:a8:fc:8a:22:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
        Validity
            Not Before: Feb 12 13:09:26 2024 GMT
            Not After : Feb 10 13:14:26 2025 GMT
        Subject: CN=5C852499D8FFE72F3E53826A6F77DAD244E16B4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:93:f7:09:8b:a5:e1:6d:bd:5e:8f:b9:ef:ce:
                    21:6d:e2:5e:f3:21:cb:35:a0:08:f8:dc:7c:af:e4:
                    8f:47:df:b5:f2:2c:5d:b8:49:a1:82:4c:87:76:9e:
                    84:ec:6b:6a:b2:0a:de:87:be:8b:2d:72:a7:74:26:
                    67:90:3c:23:25:25:c3:74:21:ec:37:ff:b0:76:34:
                    7c:8c:f7:26:23:c0:5d:d4:f0:e7:3b:65:51:cf:47:
                    81:11:ad:2d:40:ed:42:cd:37:68:1a:e7:55:65:ba:
                    12:89:0e:bd:47:5e:a8:1a:22:7f:84:14:5d:d7:79:
                    d6:f8:27:d9:8c:98:75:52:48:27:94:9c:9b:d1:b5:
                    3e:86:6d:42:6b:94:69:a8:7b:92:ea:ae:50:74:79:
                    86:d9:26:a9:0b:7f:f1:f9:5d:e6:f5:6a:17:8f:63:
                    ea:80:0a:b6:72:33:9d:01:61:e7:6c:81:79:fd:7c:
                    7f:fc:2d:14:04:b6:9e:ab:65:8d:b7:7f:d9:ca:f4:
                    c2:e3:c0:e8:c2:8c:8d:bb:2f:95:db:d8:7e:bc:49:
                    2c:ad:df:c3:34:75:55:29:77:04:2f:8f:84:42:7b:
                    fe:37:2c:d8:96:73:36:69:81:7b:30:9c:2e:a2:1b:
                    9b:04:5d:1c:2f:97:21:d7:ad:7f:83:f6:39:92:1e:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:85:24:99:D8:FF:E7:2F:3E:53:82:6A:6F:77:DA:D2:44:E1:6B:4F
            X509v3 Authority Key Identifier:
                keyid:2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3233322e302f32312d3231203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:b6:86:20:48:89:6a:ce:75:ea:10:a1:0c:58:e8:62:de:4c:
         b4:9a:65:57:c0:c4:57:29:55:d5:03:af:36:b2:76:07:3f:ad:
         1f:89:63:98:df:80:db:bf:f1:d4:9a:b2:42:1d:05:28:5b:fd:
         a0:ac:08:ea:74:e1:79:7c:97:a7:66:d2:ea:bb:8a:83:a8:ec:
         ba:15:0e:83:c6:18:9d:a9:3d:99:f1:74:f8:c6:f4:d3:19:67:
         b6:1b:38:9e:1b:f8:7b:e6:ca:e9:5a:a6:f3:81:1e:8a:07:3d:
         57:17:1f:df:5c:8c:24:0f:34:ae:ec:a4:b1:a8:dc:64:ab:c4:
         25:e7:a1:ab:8a:f6:37:32:5c:9f:d3:d5:f4:1e:5f:11:f9:59:
         4c:a7:77:41:7c:a6:c4:13:b8:b1:af:f2:69:81:b2:e8:27:6b:
         8b:99:f0:b9:76:44:a0:00:29:0f:44:16:7d:66:aa:1d:25:a3:
         17:31:4c:8e:c4:12:57:60:95:ff:33:11:ce:a2:8c:7f:26:cf:
         93:be:50:47:a5:39:33:c3:3a:8a:b3:86:38:e6:b5:54:32:b8:
         e2:44:8f:0e:1e:93:ed:2a:bd:73:e0:b0:af:93:d6:81:d3:35:
         70:98:11:a1:84:fe:73:93:1f:f7:ff:5b:fa:03:62:cb:18:f2:
         ab:95:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org