Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131362e302f32342d3234203d3e203532353531.roa
File:                     3137372e3133302e3131362e302f32342d3234203d3e203532353531.roa (raw, json)
Hash identifier:          5u+IgwsyAQOJfb45NUcmzGi35ZiwHx+3/67W+6WvFu8=
Subject key identifier:   4A:F6:73:F3:2D:CC:36:A4:9B:D7:AA:FA:E5:D9:37:B2:50:0B:E4:61
Certificate issuer:       /CN=8D69381991FAB54B082E60AF03ED726BB215241F
Certificate serial:       0219615549BC95BEC49CA0F646F1CB0FD3EE8508
Authority key identifier: 8D:69:38:19:91:FA:B5:4B:08:2E:60:AF:03:ED:72:6B:B2:15:24:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D69381991FAB54B082E60AF03ED726BB215241F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131362e302f32342d3234203d3e203532353531.roa
Signing time:             Wed 03 May 2023 19:15:16 +0000
ROA not before:           Wed 03 May 2023 19:10:16 +0000
ROA not after:            Wed 01 May 2024 19:15:16 +0000
asID:                     52551
IP address blocks:        177.130.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:19:61:55:49:bc:95:be:c4:9c:a0:f6:46:f1:cb:0f:d3:ee:85:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D69381991FAB54B082E60AF03ED726BB215241F
        Validity
            Not Before: May  3 19:10:16 2023 GMT
            Not After : May  1 19:15:16 2024 GMT
        Subject: CN=4AF673F32DCC36A49BD7AAFAE5D937B2500BE461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:1f:10:61:ff:8f:b0:62:44:88:96:34:3d:0e:
                    14:d3:9a:a9:ef:70:32:c6:dc:ac:b5:a8:37:a5:56:
                    81:4e:25:8b:a0:80:ae:ec:cf:65:fb:b8:16:a0:01:
                    a6:1f:85:5f:16:f2:5c:e0:d1:7a:50:e1:6b:2d:50:
                    0a:d4:9b:79:cb:26:16:1e:88:ed:df:50:82:6f:5c:
                    b3:fa:59:91:8b:90:e3:77:1e:15:8d:4f:1f:ac:7f:
                    75:c3:2d:57:4c:a9:e9:99:ad:f3:57:cd:a3:4a:dd:
                    b4:18:9f:bc:08:91:87:12:da:bb:de:af:d0:b6:8c:
                    ec:72:1d:68:12:59:45:9b:4b:51:f3:e0:b9:e9:eb:
                    ae:47:c2:81:62:58:8a:47:c5:1c:89:f1:2f:0c:ed:
                    98:ab:77:58:be:c1:9c:9c:61:9b:33:4d:16:22:b0:
                    7b:61:c6:55:a7:1f:2e:81:77:14:21:f9:c4:db:2e:
                    3b:46:16:5d:cf:91:bb:fd:da:d4:8f:42:f2:89:a6:
                    ef:86:ab:17:55:87:bc:38:92:2d:38:0b:8c:bb:e0:
                    eb:09:3a:26:5d:28:27:ef:34:94:dc:d4:5b:d4:f0:
                    41:82:fd:71:80:b8:b6:c3:a0:96:a7:8f:75:84:46:
                    54:83:42:e3:a2:08:b6:d0:55:71:f6:93:1a:19:18:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F6:73:F3:2D:CC:36:A4:9B:D7:AA:FA:E5:D9:37:B2:50:0B:E4:61
            X509v3 Authority Key Identifier:
                keyid:8D:69:38:19:91:FA:B5:4B:08:2E:60:AF:03:ED:72:6B:B2:15:24:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/8D69381991FAB54B082E60AF03ED726BB215241F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D69381991FAB54B082E60AF03ED726BB215241F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131362e302f32342d3234203d3e203532353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:46:6f:1a:57:0a:29:44:95:b3:24:ae:d1:0f:db:ad:c5:72:
         74:ff:2d:01:ea:0a:55:d7:78:4f:b2:eb:8b:c4:02:4a:b9:91:
         8f:cb:ba:02:29:5c:2a:e6:1b:6a:8b:ac:dd:77:fa:12:d1:3c:
         65:74:e3:db:f3:81:c5:bb:0a:da:c2:fa:0a:c3:ad:b2:cf:71:
         2f:16:1d:05:d0:e8:37:65:74:6e:a4:1f:40:53:4c:63:14:65:
         40:80:7b:c4:9a:c2:48:0b:1c:97:34:8b:50:d4:55:84:ba:44:
         ac:dd:ab:9d:ee:d9:28:ae:28:11:d0:43:a2:3c:3b:f8:d4:e8:
         27:a3:79:a2:3a:a6:e8:a8:82:36:b4:6b:64:d2:42:a4:f7:a0:
         bc:29:b1:1e:86:af:6b:97:01:64:52:ce:64:3d:60:69:8c:78:
         19:b2:db:1f:44:16:22:00:7b:5c:01:6e:24:d5:9e:97:af:ec:
         09:aa:90:b6:a8:b7:83:f5:a7:ea:85:c4:2d:25:0e:ca:ee:09:
         82:21:a7:77:5d:87:3e:1c:58:ab:1e:a7:df:d6:38:86:b3:a5:
         27:29:96:35:53:53:05:98:2e:9e:17:c2:a4:7a:95:92:fd:a3:
         44:67:5e:94:ec:e8:8f:58:b1:cb:3e:84:81:54:16:1e:20:2d:
         13:c1:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org