Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/3137372e3139302e3135332e302f32342d3234203d3e20323633343537.roa
File:                     3137372e3139302e3135332e302f32342d3234203d3e20323633343537.roa (raw, json)
Hash identifier:          IK9idXLBettQr3MC4KGkacyVOuUw9ZdcsFHbuLcghXs=
Subject key identifier:   3E:C6:8F:57:95:A1:B2:75:10:9A:1A:68:60:D1:79:EC:DB:BC:97:D4
Certificate issuer:       /CN=C1B35906E3AD7284768AEE5DB6ED4265B2056E9F
Certificate serial:       1C756B1662C997F7DF45DF7326685D5B4C0A94AB
Authority key identifier: C1:B3:59:06:E3:AD:72:84:76:8A:EE:5D:B6:ED:42:65:B2:05:6E:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/3137372e3139302e3135332e302f32342d3234203d3e20323633343537.roa
Signing time:             Thu 18 Jan 2024 13:11:37 +0000
ROA not before:           Thu 18 Jan 2024 13:06:37 +0000
ROA not after:            Thu 16 Jan 2025 13:11:37 +0000
asID:                     263457
IP address blocks:        177.190.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:75:6b:16:62:c9:97:f7:df:45:df:73:26:68:5d:5b:4c:0a:94:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B35906E3AD7284768AEE5DB6ED4265B2056E9F
        Validity
            Not Before: Jan 18 13:06:37 2024 GMT
            Not After : Jan 16 13:11:37 2025 GMT
        Subject: CN=3EC68F5795A1B275109A1A6860D179ECDBBC97D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:ce:e0:f3:c7:48:a6:a4:ac:3c:6f:14:02:
                    36:84:7c:a8:f5:12:f5:ae:44:77:dd:2e:3d:12:75:
                    b1:c2:f8:d3:8b:14:5d:71:05:cb:9f:16:9d:ff:d4:
                    0c:16:47:77:1c:08:68:50:70:55:ef:0f:d9:12:82:
                    53:d4:37:db:17:bb:c3:9d:16:0d:58:0b:fb:d2:b7:
                    2c:9f:d2:82:6a:bd:d4:43:06:8a:3c:35:0b:68:38:
                    a8:40:4f:3a:e6:7a:b6:b5:44:36:47:75:e4:53:23:
                    8e:b3:3e:ee:a8:99:b8:86:8f:63:ef:72:77:80:78:
                    e0:b2:8d:76:40:94:ce:71:46:14:e2:1f:93:b6:d7:
                    08:8d:c5:7e:ee:bc:6a:87:83:b8:da:1b:04:7c:85:
                    16:f7:7b:f5:dd:74:ba:53:bf:87:4b:a3:2e:b1:42:
                    95:2d:74:85:67:53:19:19:20:eb:a1:1c:10:b3:bf:
                    a1:f5:0b:de:1a:e3:df:64:bb:6d:9b:1c:e1:e7:0c:
                    2b:ba:42:4b:c4:ea:b7:92:30:30:50:25:b2:66:b3:
                    87:c4:08:da:05:03:ba:24:38:e2:68:04:6d:53:f3:
                    1e:dd:fe:b9:85:ac:7f:fa:8e:39:f6:50:10:59:1c:
                    6c:d7:54:7b:2d:93:82:9b:9f:7e:0b:45:11:3a:a2:
                    58:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C6:8F:57:95:A1:B2:75:10:9A:1A:68:60:D1:79:EC:DB:BC:97:D4
            X509v3 Authority Key Identifier:
                keyid:C1:B3:59:06:E3:AD:72:84:76:8A:EE:5D:B6:ED:42:65:B2:05:6E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/3137372e3139302e3135332e302f32342d3234203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:8d:e0:62:3d:71:95:1a:7c:26:ca:04:2b:c7:f7:f7:a9:0d:
         5c:8b:43:76:35:78:09:1e:8e:b3:83:84:23:c0:98:81:6e:2c:
         b6:7d:06:55:69:5f:50:c6:56:a0:08:0f:8d:6f:88:f6:e1:cf:
         90:c8:87:35:0e:87:a7:b2:04:b4:e1:31:48:c8:31:50:18:9f:
         ff:e2:43:f1:9f:9a:ca:69:c1:d4:35:0a:a6:05:5a:30:37:29:
         f2:a8:8c:63:6e:b1:ad:e6:df:24:ee:7d:86:00:1b:40:f6:87:
         f2:6d:67:51:68:bb:f1:66:0a:c1:a1:ee:8b:77:21:61:38:c8:
         d7:78:79:57:3a:e1:74:ba:aa:7f:52:dc:75:ad:c7:3a:9f:45:
         eb:48:07:aa:70:ac:55:db:1d:de:26:02:89:b0:90:2b:d3:7c:
         5d:9e:15:a9:74:2c:87:d2:c4:56:28:0e:bc:d6:b6:15:50:c7:
         4c:98:13:87:86:39:8a:2a:b4:69:9f:ef:8a:8b:54:d7:b1:ce:
         27:67:a3:f8:9a:25:ea:4a:81:52:f8:2c:06:5e:96:44:aa:f4:
         0b:71:7f:1b:5e:dc:70:54:b8:8e:fe:c6:21:67:57:1e:dc:fd:
         04:82:3e:b2:43:29:41:1d:8b:f6:cd:85:2a:e7:cf:ad:ee:fb:
         c9:b7:39:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org