Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3137372e31322e3136302e302f32302d3234203d3e203238323939.roa
File:                     3137372e31322e3136302e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          AGXNqsU/TEob86AQhH+vj5ug4rBRX9FRJKZTMo40CNE=
Subject key identifier:   4D:EE:81:5D:BA:42:78:34:80:FA:99:94:E1:E0:FA:10:B9:04:0A:16
Certificate issuer:       /CN=63D2D46E742FC22F105852BE96AF5CD79AC0736B
Certificate serial:       28EF0AC4D01BF070A7DDCCB6077FE19F3F0C789B
Authority key identifier: 63:D2:D4:6E:74:2F:C2:2F:10:58:52:BE:96:AF:5C:D7:9A:C0:73:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3137372e31322e3136302e302f32302d3234203d3e203238323939.roa
Signing time:             Fri 17 Nov 2023 12:13:22 +0000
ROA not before:           Fri 17 Nov 2023 12:08:22 +0000
ROA not after:            Fri 15 Nov 2024 12:13:22 +0000
asID:                     28299
IP address blocks:        177.12.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ef:0a:c4:d0:1b:f0:70:a7:dd:cc:b6:07:7f:e1:9f:3f:0c:78:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D2D46E742FC22F105852BE96AF5CD79AC0736B
        Validity
            Not Before: Nov 17 12:08:22 2023 GMT
            Not After : Nov 15 12:13:22 2024 GMT
        Subject: CN=4DEE815DBA42783480FA9994E1E0FA10B9040A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:ce:ee:98:fa:2a:69:c4:84:42:fc:00:3f:
                    2a:19:7b:bb:99:71:99:87:6b:4c:6f:30:e9:90:b6:
                    a9:7d:9b:c3:7c:70:ff:f6:d8:13:d2:47:ba:de:ad:
                    d8:49:92:1a:63:56:60:d1:0b:41:7c:ee:f0:e1:da:
                    21:78:e3:9a:1f:60:4d:a1:80:a7:0b:ac:97:4d:05:
                    ac:f3:c9:69:c4:ca:f5:c0:f1:e1:dd:9b:21:a2:a2:
                    93:4f:ae:99:60:cd:0a:f7:4e:7a:b9:8d:06:1d:9f:
                    e0:b4:f7:cf:44:50:9f:46:a0:13:70:bb:c6:e0:dd:
                    76:82:eb:6a:a7:ef:65:11:8e:71:de:45:7e:8d:9a:
                    5f:34:37:8e:ae:a3:b8:3e:4d:53:81:b5:52:02:91:
                    ea:a2:ec:54:b9:75:0b:76:0a:32:e4:db:7a:8c:80:
                    08:80:4c:dd:ca:9f:92:24:3f:27:b5:66:d6:b3:66:
                    3e:e8:76:1f:bb:32:66:dd:78:9c:ed:05:a8:54:38:
                    89:6e:a4:70:68:19:ee:fe:bf:71:82:5d:ae:f4:d5:
                    ec:f0:a0:bc:05:6f:4b:99:13:bf:b0:45:54:b3:b8:
                    8c:27:57:d1:79:3e:f6:d5:48:4f:53:3e:bf:71:f1:
                    ab:b1:d7:eb:0e:b5:90:d1:81:a1:82:4f:6d:cd:64:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EE:81:5D:BA:42:78:34:80:FA:99:94:E1:E0:FA:10:B9:04:0A:16
            X509v3 Authority Key Identifier:
                keyid:63:D2:D4:6E:74:2F:C2:2F:10:58:52:BE:96:AF:5C:D7:9A:C0:73:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3137372e31322e3136302e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:a4:3a:11:ae:64:a4:5b:8a:3c:8d:ba:3e:60:c6:64:5d:
         52:17:c6:5e:7e:9b:5d:a9:96:d4:0d:fe:c4:f4:9c:86:5e:a0:
         9e:3e:f7:d2:f8:e0:72:16:6b:6b:2f:e3:2e:44:88:0b:17:82:
         94:b4:6f:dc:42:f0:37:79:c2:78:9a:49:cb:5b:28:f5:61:01:
         26:78:79:81:f9:85:4d:84:57:01:78:c3:c4:16:b4:19:da:10:
         6f:08:36:be:d3:7f:8d:96:2a:f1:85:a1:c2:2c:ae:3b:07:2c:
         51:d5:a9:04:73:54:78:fa:23:9d:5b:47:29:dc:3b:e9:61:48:
         d9:42:36:26:4c:a9:55:5d:fa:ab:11:1b:21:cc:6e:cd:19:93:
         19:fe:d1:e5:aa:e5:bb:a2:ca:ae:d9:a2:b6:02:c6:72:ef:f9:
         43:95:0d:8e:24:36:f5:04:22:6a:c6:91:3b:7e:ed:dc:f3:00:
         1c:13:5c:20:d7:75:b3:87:67:40:bd:79:17:89:76:79:d4:88:
         5d:57:d7:a7:1f:2a:a1:ef:3f:44:95:c1:34:d1:3e:41:77:8a:
         d3:e7:ee:33:37:29:e9:0c:e3:4d:14:d3:21:a0:9b:de:36:6b:
         36:26:ba:16:40:38:1d:84:e2:24:ed:44:86:8a:be:a2:2c:df:
         08:68:c5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org