Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa
File:                     3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          amEkctQ4nyKM4jv950aI7hoIagDO1oWKnisoi7BBnZU=
Subject key identifier:   BF:ED:C0:90:CC:B3:65:8D:8E:B4:63:3B:DD:CD:3B:E9:34:A7:DD:63
Certificate issuer:       /CN=42237D4466AD19B72471878A6A993C7268305D48
Certificate serial:       0F33D83FE350AEF1DF7BB9BA114723C0C6A547DC
Authority key identifier: 42:23:7D:44:66:AD:19:B7:24:71:87:8A:6A:99:3C:72:68:30:5D:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42237D4466AD19B72471878A6A993C7268305D48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa
Signing time:             Thu 18 Jan 2024 12:27:17 +0000
ROA not before:           Thu 18 Jan 2024 12:22:17 +0000
ROA not after:            Thu 16 Jan 2025 12:27:17 +0000
asID:                     263444
IP address blocks:        177.91.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:33:d8:3f:e3:50:ae:f1:df:7b:b9:ba:11:47:23:c0:c6:a5:47:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42237D4466AD19B72471878A6A993C7268305D48
        Validity
            Not Before: Jan 18 12:22:17 2024 GMT
            Not After : Jan 16 12:27:17 2025 GMT
        Subject: CN=BFEDC090CCB3658D8EB4633BDDCD3BE934A7DD63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:d9:be:b6:a6:b8:4b:88:c6:ef:e0:77:85:
                    c8:be:3b:af:31:84:22:ee:0c:28:2c:84:34:ca:19:
                    e6:b5:eb:e4:1f:d8:a0:5a:b0:75:ff:c6:4b:41:14:
                    a8:dd:ba:1d:53:2d:3a:d5:20:e0:af:a3:ea:05:ed:
                    b3:e7:51:b5:01:d7:a2:c5:ef:22:7c:4e:40:1e:84:
                    1d:6a:a1:14:38:d4:a6:d6:2d:1d:ec:68:12:96:24:
                    d6:ef:57:39:d5:13:6a:d9:fc:fa:96:49:6d:93:67:
                    1c:88:a5:f9:d6:aa:f3:0c:73:da:c6:d6:a6:5e:50:
                    ac:b5:72:d5:b6:fe:c1:7e:4b:2b:58:67:26:05:cf:
                    32:25:58:c7:d8:d9:ba:09:dc:1a:f3:88:55:47:6a:
                    37:d4:0c:1e:2f:37:05:b2:12:93:3f:2d:05:83:d6:
                    c4:0b:dc:66:b5:11:04:59:b2:b0:89:7f:18:0e:b3:
                    ec:2d:d1:3b:8e:00:79:75:5b:da:4b:75:a8:83:64:
                    1d:77:fc:52:83:bc:6b:f4:34:41:92:c8:0b:7b:60:
                    67:40:71:be:58:49:3f:ac:50:78:2d:ca:70:aa:18:
                    35:b2:1b:bf:b2:c9:c4:c5:86:c6:25:28:5f:83:2c:
                    78:36:7e:b4:76:75:77:c0:28:22:30:b8:1f:41:f3:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:ED:C0:90:CC:B3:65:8D:8E:B4:63:3B:DD:CD:3B:E9:34:A7:DD:63
            X509v3 Authority Key Identifier:
                keyid:42:23:7D:44:66:AD:19:B7:24:71:87:8A:6A:99:3C:72:68:30:5D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/42237D4466AD19B72471878A6A993C7268305D48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42237D4466AD19B72471878A6A993C7268305D48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:34:c5:90:90:bf:04:16:fe:3f:77:89:44:0c:af:da:88:b6:
         c2:a1:0d:d2:ec:4b:6d:63:f4:d8:c3:a0:ae:85:19:d1:10:ad:
         e5:ef:54:cc:2f:fa:97:11:49:56:8d:1f:b3:75:20:41:b7:8c:
         59:df:49:74:37:58:b3:78:d9:0a:ee:2f:46:3f:6e:27:2f:4b:
         d6:02:87:9d:19:89:01:c0:ec:94:be:37:5a:99:3c:5c:90:13:
         95:a3:c5:80:ce:87:5c:bd:dd:8d:24:3d:60:f2:a1:95:1d:12:
         07:48:fc:bb:3c:15:f1:c9:b9:4d:d0:f7:bb:44:a6:03:c4:3b:
         c0:33:cd:db:a2:dd:bb:35:83:f1:15:9b:c2:9e:fb:89:07:2d:
         99:5e:dd:e7:41:e4:02:8f:61:f2:90:8b:fb:eb:be:d2:05:6c:
         07:59:da:15:d6:9e:e9:7e:96:46:81:d2:c1:e5:cb:04:19:95:
         b7:c3:60:69:ac:ab:06:df:f6:8e:84:60:22:72:35:e9:07:4e:
         3b:89:7b:69:03:ac:ea:9e:79:1b:f6:5c:aa:23:04:2d:2a:1d:
         21:04:a4:5e:c4:08:d4:d2:78:4f:1f:a7:35:2b:a7:ec:3f:ec:
         21:98:3a:4c:40:29:de:f2:0e:f1:c3:dc:c2:15:86:0d:57:00:
         2b:d1:90:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org