Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137372e31302e3132332e302f32342d3234203d3e203533323336.roa
File:                     3137372e31302e3132332e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          PmsbDCpjyXncttNVmqCzDU97KD4UHMNwVYvt9akYLfo=
Subject key identifier:   73:5F:AC:EF:A5:F1:1B:01:55:AA:AB:CD:F8:1E:92:19:C7:F7:B8:9D
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       7168761A1B606EA16904204AE8AD2772386CEE4A
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137372e31302e3132332e302f32342d3234203d3e203533323336.roa
Signing time:             Thu 08 Feb 2024 15:00:01 +0000
ROA not before:           Thu 08 Feb 2024 14:55:01 +0000
ROA not after:            Thu 06 Feb 2025 15:00:01 +0000
asID:                     53236
IP address blocks:        177.10.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:68:76:1a:1b:60:6e:a1:69:04:20:4a:e8:ad:27:72:38:6c:ee:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Feb  8 14:55:01 2024 GMT
            Not After : Feb  6 15:00:01 2025 GMT
        Subject: CN=3082010A0282010100B09D1B6FA4C615B9FE13FB2218874DDBDDF4793AA3387A2DEA7A9875E01220BF7C3645C33F24357EB51E609B19247F6C57A0D749D883F507BC89AB7BEDB3E14315AE2F53BB12735441281ABFD899DB8CEC82EC47B0418C8AAB32B50B16404069679E5B0CF03419E7299626B7F42AB17855E385CB3B6F40A9D518DEB8C719DF590C854E09C678378309FA118FFEADE6427D6C34D5F21BCC8D6EB062B863668ADA49787A6DE152EF810AFEAD67D081B065AFACC9A2299B7920B37822907B84A1D3F69825FDA580F3D61CDEC4E5C007E75755604DE8F41E2B2AE949971C5D012A199B2CA598BB62492959EBF1EDFE3129A5C18C3D86B0EF62365F74E8A1467D4C310203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:1b:6f:a4:c6:15:b9:fe:13:fb:22:18:87:
                    4d:db:dd:f4:79:3a:a3:38:7a:2d:ea:7a:98:75:e0:
                    12:20:bf:7c:36:45:c3:3f:24:35:7e:b5:1e:60:9b:
                    19:24:7f:6c:57:a0:d7:49:d8:83:f5:07:bc:89:ab:
                    7b:ed:b3:e1:43:15:ae:2f:53:bb:12:73:54:41:28:
                    1a:bf:d8:99:db:8c:ec:82:ec:47:b0:41:8c:8a:ab:
                    32:b5:0b:16:40:40:69:67:9e:5b:0c:f0:34:19:e7:
                    29:96:26:b7:f4:2a:b1:78:55:e3:85:cb:3b:6f:40:
                    a9:d5:18:de:b8:c7:19:df:59:0c:85:4e:09:c6:78:
                    37:83:09:fa:11:8f:fe:ad:e6:42:7d:6c:34:d5:f2:
                    1b:cc:8d:6e:b0:62:b8:63:66:8a:da:49:78:7a:6d:
                    e1:52:ef:81:0a:fe:ad:67:d0:81:b0:65:af:ac:c9:
                    a2:29:9b:79:20:b3:78:22:90:7b:84:a1:d3:f6:98:
                    25:fd:a5:80:f3:d6:1c:de:c4:e5:c0:07:e7:57:55:
                    60:4d:e8:f4:1e:2b:2a:e9:49:97:1c:5d:01:2a:19:
                    9b:2c:a5:98:bb:62:49:29:59:eb:f1:ed:fe:31:29:
                    a5:c1:8c:3d:86:b0:ef:62:36:5f:74:e8:a1:46:7d:
                    4c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5F:AC:EF:A5:F1:1B:01:55:AA:AB:CD:F8:1E:92:19:C7:F7:B8:9D
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137372e31302e3132332e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:e2:44:41:51:32:9a:71:84:68:09:dc:1d:a9:4d:3e:18:
         84:b9:ae:70:f7:f7:3f:18:19:a6:9f:b1:72:81:dc:5d:49:3b:
         44:75:a6:c5:88:5d:3d:58:70:90:72:89:c7:b4:80:bb:6d:48:
         f3:fe:2e:4c:fb:ca:8a:ed:20:00:de:a9:22:4c:ae:70:ef:73:
         ca:ef:c5:14:4b:67:ea:34:73:96:53:41:fd:41:61:b9:b9:c9:
         4a:65:14:0c:47:7a:8f:da:bc:2c:c4:46:c9:af:17:83:cb:f8:
         c0:58:f2:49:56:1d:33:c8:25:1f:13:de:37:6d:61:04:59:4c:
         b2:7c:69:de:f8:4b:b0:75:81:da:29:91:11:8e:5d:08:b2:80:
         58:84:14:c2:a4:69:c1:d2:dc:19:5a:c6:b3:b0:40:3c:72:ea:
         33:1e:ed:58:ee:20:a5:a4:f7:26:d2:c6:45:38:89:11:75:23:
         a5:c6:8e:ce:3f:98:40:1a:71:3f:f0:c0:b3:6c:33:7c:90:01:
         24:fe:65:95:47:4d:7f:d1:40:b4:b4:23:17:33:04:14:78:98:
         b3:be:2b:b6:bb:e8:27:e7:81:95:a5:c9:85:23:7b:42:1d:0a:
         94:39:c2:4a:b1:b8:a7:f7:04:24:0b:d6:e0:b0:e6:c3:6f:da:
         08:1a:de:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:15 2024 by rpki-client on console-ams.rpki-client.org