Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137372e3132352e3136382e302f32312d3231203d3e203532363133.roa
File:                     3137372e3132352e3136382e302f32312d3231203d3e203532363133.roa (raw, json)
Hash identifier:          NCMDn6BjbTaV2N9AHZ5/cuk66RlHhs0ajI0Pn/5U+mg=
Subject key identifier:   D8:E4:72:0C:5C:8C:52:FC:3C:40:80:8B:2B:21:B2:25:40:1F:74:84
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       35FA2F6895CC7CD03744B93423BBA04DC443048C
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137372e3132352e3136382e302f32312d3231203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:51:58 +0000
ROA not before:           Wed 06 Mar 2024 14:46:58 +0000
ROA not after:            Wed 05 Mar 2025 14:51:58 +0000
asID:                     52613
IP address blocks:        177.125.168.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fa:2f:68:95:cc:7c:d0:37:44:b9:34:23:bb:a0:4d:c4:43:04:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:46:58 2024 GMT
            Not After : Mar  5 14:51:58 2025 GMT
        Subject: CN=D8E4720C5C8C52FC3C40808B2B21B225401F7484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:c8:8d:ac:dd:9d:bd:03:d6:cf:5c:ae:e7:
                    f8:a1:d2:b6:71:b3:1a:5c:6f:cc:c6:76:62:a5:ca:
                    2b:a0:a8:9d:15:74:f5:0d:9f:a5:b5:30:b8:42:a2:
                    ce:48:70:1b:e5:df:e9:28:e7:13:7e:c0:0d:5f:58:
                    41:ba:aa:76:0a:c8:bf:64:6e:f1:1b:8c:7d:b5:bb:
                    1d:52:e5:7f:73:f3:b8:ff:be:b0:8c:66:30:54:f9:
                    9c:a4:77:7a:45:4d:72:ad:25:e7:fe:26:22:ed:f4:
                    8b:ed:5f:d5:a0:c5:e5:73:8c:de:5d:2d:5d:ec:60:
                    93:2b:25:1d:30:22:65:46:1a:f4:18:59:81:4e:7f:
                    74:73:e3:e9:14:c2:70:64:20:98:ca:b6:7f:14:75:
                    22:3c:84:33:46:b0:44:70:06:60:a0:84:f2:57:3d:
                    bf:b6:fd:dc:79:bc:25:91:5a:c8:63:cc:3a:d4:d8:
                    b8:1e:bc:2f:ce:3c:bc:37:c3:96:09:f0:dc:28:7e:
                    cd:88:e4:c5:4b:33:55:06:ae:6b:8a:ce:86:7e:ed:
                    d3:38:3b:e3:be:cb:88:71:3e:79:04:89:8c:83:bc:
                    4e:ea:f2:06:f4:eb:4f:d2:a9:33:e8:c9:09:f6:96:
                    d9:b7:45:94:7f:19:39:ed:de:c0:f6:19:f2:54:58:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E4:72:0C:5C:8C:52:FC:3C:40:80:8B:2B:21:B2:25:40:1F:74:84
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137372e3132352e3136382e302f32312d3231203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:30:03:3a:78:59:01:87:9a:dd:2f:6a:5c:3b:07:18:1f:e2:
         07:51:29:ec:43:b8:88:b0:67:30:e6:31:5e:a4:eb:b3:67:f3:
         2b:a9:2f:05:09:a3:1b:aa:f6:43:f5:96:15:6d:88:41:02:e3:
         00:84:42:de:53:b7:2d:b1:b3:0d:46:89:d6:ce:d4:2c:35:25:
         d6:b6:dc:28:36:d3:c9:df:4a:96:30:7e:a5:35:8b:45:f0:12:
         25:0c:b7:6a:1a:bc:96:58:04:78:b9:5e:79:50:8d:e4:d9:d7:
         9a:ab:33:fb:c7:a1:f0:fd:5e:65:c8:75:63:e2:cd:e8:d8:61:
         ab:94:8e:c1:1d:85:52:fc:16:e7:bb:83:2d:59:de:11:01:5b:
         b9:69:ea:3a:f5:b1:76:ca:4d:c5:38:72:cb:48:66:1c:4f:9d:
         97:a7:57:ee:0c:c3:f0:6a:94:93:b6:57:8d:09:d7:59:eb:7a:
         f2:83:60:cb:fa:b1:88:ee:bc:46:55:7c:1d:8a:1e:57:6e:50:
         63:3c:0c:78:54:ce:aa:96:72:7c:16:36:2f:a7:b5:5e:c2:19:
         d7:82:b9:c8:40:1b:02:ae:b0:26:31:51:56:1a:9f:08:6a:bc:
         16:11:9f:47:a2:ef:b6:2b:0d:de:f6:ba:eb:a4:b1:04:1a:ff:
         2e:24:81:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org