Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137372e31302e3132312e302f32342d3234203d3e203533323336.roa
File:                     3137372e31302e3132312e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          pN670DXVsZK6bfeLOF2kA1aTlDyf4IhT63Bwd7ulCvM=
Subject key identifier:   58:84:56:D9:12:E1:1B:C4:21:C8:4F:DF:F3:0B:62:DA:C0:56:B3:2C
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       16762C11C61EBFD028FE4C00AC978698F15D91B3
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137372e31302e3132312e302f32342d3234203d3e203533323336.roa
Signing time:             Thu 08 Feb 2024 15:00:00 +0000
ROA not before:           Thu 08 Feb 2024 14:55:00 +0000
ROA not after:            Thu 06 Feb 2025 15:00:00 +0000
asID:                     53236
IP address blocks:        177.10.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:76:2c:11:c6:1e:bf:d0:28:fe:4c:00:ac:97:86:98:f1:5d:91:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Feb  8 14:55:00 2024 GMT
            Not After : Feb  6 15:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:f3:b9:f5:67:bf:46:1d:67:a3:cc:a5:ce:
                    27:1f:e6:4e:b3:50:6e:12:6c:f3:ee:e5:53:65:3d:
                    32:31:a7:e4:72:54:df:18:f1:7c:89:f9:d3:43:da:
                    22:31:bd:19:46:50:9b:a2:1e:08:06:fd:5d:5b:4d:
                    97:d8:d4:ca:6f:2e:76:a0:d2:f3:08:c6:1a:ca:46:
                    e9:f4:da:ec:66:c7:e1:48:63:e3:f9:68:fc:45:84:
                    b1:11:3d:3f:22:ca:1a:1e:b9:45:cb:be:f9:86:7b:
                    23:57:fe:69:c7:ef:7b:af:06:88:1b:9b:c7:44:64:
                    03:b9:95:43:b7:5d:b4:4a:c9:6a:38:71:51:77:2b:
                    dc:3e:4f:74:89:35:02:d7:d6:0a:e4:55:bb:a1:e7:
                    26:99:50:20:fd:26:a6:4a:64:db:eb:d0:a1:82:82:
                    d3:11:a1:8c:14:d5:37:1d:7a:55:86:10:49:47:6d:
                    0c:dc:3d:33:aa:59:ca:6d:ee:a2:0c:a3:57:ef:64:
                    99:bd:cd:b5:94:0f:94:1b:52:7c:8e:a7:04:cb:78:
                    1e:3b:fd:81:8e:28:2b:7b:c0:1a:b3:b5:05:60:97:
                    1d:81:27:dd:30:21:56:ba:87:d9:82:5d:cb:b9:89:
                    04:32:bf:1f:51:80:b5:c3:99:de:2e:ab:b1:45:1e:
                    cf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:84:56:D9:12:E1:1B:C4:21:C8:4F:DF:F3:0B:62:DA:C0:56:B3:2C
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137372e31302e3132312e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:68:bd:0c:4b:64:ce:4b:08:6f:75:19:84:c8:02:84:44:7d:
         6a:f0:d0:a6:91:d7:3d:46:90:9b:e1:73:b0:4b:97:fa:03:f8:
         85:a4:c1:e2:0f:bb:14:c2:3c:ab:cd:d8:b0:b1:13:c9:2b:7f:
         59:69:c1:fc:12:42:9d:eb:7e:91:a5:17:8a:04:8b:fd:e4:36:
         54:60:55:df:1f:a1:c6:11:fb:de:40:80:69:60:0d:ff:ad:9d:
         4c:4e:f1:63:4c:bd:b2:26:23:30:f0:2e:50:88:b9:8a:49:33:
         18:f5:b6:da:5e:e1:8a:ca:39:0c:1a:9e:c7:23:a4:d6:51:03:
         9a:9c:19:14:d2:76:b4:40:ac:d1:61:74:f9:a9:4f:39:4c:70:
         4d:36:e4:aa:b9:74:33:64:66:af:8a:12:6d:2e:b0:02:e5:59:
         b6:e5:94:52:c7:31:17:03:67:e7:8f:3b:9a:5f:f1:39:54:35:
         64:f9:15:f9:c5:aa:5d:aa:41:33:99:5e:16:9d:ca:bf:ac:72:
         49:21:53:d9:89:06:20:19:ac:ca:de:bf:3c:19:b3:19:46:96:
         53:1b:93:b6:da:0b:d1:59:45:28:76:8e:c7:2d:91:95:bb:5a:
         f6:0c:98:76:51:5a:2c:57:df:c7:b6:bb:a5:de:bd:34:81:ea:
         a4:7b:14:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:15 2024 by rpki-client on console-ams.rpki-client.org