Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/3137372e3139302e3135322e302f32342d3234203d3e20323633343537.roa
File:                     3137372e3139302e3135322e302f32342d3234203d3e20323633343537.roa (raw, json)
Hash identifier:          ZSL3h06mj91KHw/+bzbaVl5A2mzyeyKj00w0I2Kfxnc=
Subject key identifier:   C0:16:01:1A:18:CD:FB:5D:D8:7A:BE:AC:20:47:47:2C:AE:10:33:2A
Certificate issuer:       /CN=C1B35906E3AD7284768AEE5DB6ED4265B2056E9F
Certificate serial:       19AB5ABAED0AA014001D8C4F3C2A8FECDB2002A5
Authority key identifier: C1:B3:59:06:E3:AD:72:84:76:8A:EE:5D:B6:ED:42:65:B2:05:6E:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/3137372e3139302e3135322e302f32342d3234203d3e20323633343537.roa
Signing time:             Thu 18 Jan 2024 13:11:37 +0000
ROA not before:           Thu 18 Jan 2024 13:06:37 +0000
ROA not after:            Thu 16 Jan 2025 13:11:37 +0000
asID:                     263457
IP address blocks:        177.190.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ab:5a:ba:ed:0a:a0:14:00:1d:8c:4f:3c:2a:8f:ec:db:20:02:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B35906E3AD7284768AEE5DB6ED4265B2056E9F
        Validity
            Not Before: Jan 18 13:06:37 2024 GMT
            Not After : Jan 16 13:11:37 2025 GMT
        Subject: CN=C016011A18CDFB5DD87ABEAC2047472CAE10332A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:c1:0a:62:ef:de:49:8c:66:ea:b6:ac:b3:
                    82:13:fa:08:9b:b7:39:c8:61:51:cc:5e:bf:c0:d4:
                    8c:54:5e:21:e3:03:44:cf:31:70:0f:cc:26:ff:4f:
                    6b:b3:b6:7f:62:4b:9f:46:00:a6:02:85:0f:83:f6:
                    e2:30:0f:79:2c:28:c1:dd:78:67:b0:9b:c1:e9:aa:
                    24:6d:28:21:6f:f5:e5:12:35:39:1e:57:56:46:d6:
                    90:2d:c4:ec:d1:7c:eb:45:0b:f8:4e:18:8b:24:53:
                    aa:37:68:9a:0f:99:80:ba:b6:2f:0b:08:66:04:c7:
                    ee:10:9c:be:41:7c:a2:25:af:79:28:66:1f:bf:5a:
                    bb:46:02:da:98:ec:5b:05:46:7f:e6:d0:42:1b:3b:
                    73:1f:ba:e7:78:07:10:ba:4b:81:33:99:4f:76:3c:
                    b4:8e:91:aa:be:27:63:d1:89:7f:9c:56:b5:31:bf:
                    56:ec:83:e7:e1:4e:53:b7:62:dd:59:b4:64:f8:70:
                    7e:f8:ec:59:21:07:d8:f9:6c:ce:4e:fa:6f:ca:06:
                    d3:0a:c5:fa:21:d9:ef:ed:58:5b:4a:39:65:42:bc:
                    8f:2c:ec:4d:1c:1f:4b:4d:ab:bc:0c:04:fa:78:de:
                    33:d2:c0:41:5e:47:1e:00:02:0d:d2:d0:04:13:d2:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:16:01:1A:18:CD:FB:5D:D8:7A:BE:AC:20:47:47:2C:AE:10:33:2A
            X509v3 Authority Key Identifier:
                keyid:C1:B3:59:06:E3:AD:72:84:76:8A:EE:5D:B6:ED:42:65:B2:05:6E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/3137372e3139302e3135322e302f32342d3234203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:83:d6:82:6e:c7:31:4a:f8:e3:1c:b5:ef:ad:90:48:ac:39:
         bc:85:94:33:e1:f0:b4:f3:f1:cc:89:fe:55:2a:53:58:9f:f9:
         13:fa:95:11:24:3f:35:44:0e:34:f7:e3:20:14:d9:c2:83:53:
         18:f6:bf:58:5a:27:67:07:67:57:ea:42:f5:72:6b:6d:82:5c:
         cd:85:cb:51:08:14:dc:4b:c6:ee:b2:86:81:4f:9b:fe:79:7e:
         d6:98:d8:45:ce:12:46:2a:10:1a:95:1b:5e:de:8d:06:91:c5:
         da:18:fd:d2:33:9d:00:48:a1:b9:33:ed:c7:84:ae:7a:a4:46:
         c9:25:b3:95:08:00:e6:88:f3:6a:56:d4:10:07:51:89:c1:5c:
         b0:55:1a:e2:b9:9b:bc:8f:82:d1:36:f3:3c:15:18:bd:bf:7b:
         58:53:31:d3:b0:e7:51:aa:cc:60:e4:8b:41:d5:ea:51:2c:63:
         3c:80:33:29:90:71:0d:a6:5f:0c:e5:84:d6:63:72:02:90:22:
         d8:27:e7:49:47:85:37:3c:33:6c:6f:d1:b7:21:a5:23:f3:95:
         90:98:2b:78:30:2b:1d:30:0e:eb:e7:3c:ba:e2:ff:92:08:61:
         fd:75:ff:67:5e:a5:de:64:f4:ba:40:7c:10:bb:32:94:a9:75:
         40:9f:01:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org