Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3234302e302f32312d3231203d3e20323632343738.roa
File:                     3137372e34372e3234302e302f32312d3231203d3e20323632343738.roa (raw, json)
Hash identifier:          AR/e1mz1IDZEkmzn+KVPNYSZLjNQe7rPVV8H12bH0Vg=
Subject key identifier:   CD:A6:3F:33:6A:FE:08:FB:FB:B1:2D:74:D1:B4:46:42:89:20:8C:9C
Certificate issuer:       /CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
Certificate serial:       407C922D288EE49E07470CA8A28B9CCC9C548B8D
Authority key identifier: 83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3234302e302f32312d3231203d3e20323632343738.roa
Signing time:             Tue 28 Nov 2023 14:07:23 +0000
ROA not before:           Tue 28 Nov 2023 14:02:23 +0000
ROA not after:            Tue 26 Nov 2024 14:07:23 +0000
asID:                     262478
IP address blocks:        177.47.240.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7c:92:2d:28:8e:e4:9e:07:47:0c:a8:a2:8b:9c:cc:9c:54:8b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
        Validity
            Not Before: Nov 28 14:02:23 2023 GMT
            Not After : Nov 26 14:07:23 2024 GMT
        Subject: CN=CDA63F336AFE08FBFBB12D74D1B4464289208C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:7d:76:c4:af:4f:8a:f7:6b:2f:41:71:b4:
                    5d:d5:1d:b5:08:4d:ed:4d:49:2e:3e:a3:fb:6f:5a:
                    91:f7:89:50:0e:29:ff:31:7c:f8:20:e6:b5:6e:41:
                    35:94:45:d4:6a:c9:dc:3b:7e:1f:94:94:5f:6c:8a:
                    87:39:6e:33:02:8c:91:6c:56:e1:5e:f3:54:ae:2e:
                    b3:47:e0:52:83:50:72:45:48:a1:01:43:6f:92:9f:
                    24:7f:43:65:d4:b8:a6:90:ff:b2:c4:9f:7c:c3:4a:
                    a7:cd:07:86:de:74:51:3f:a1:d7:90:f1:60:93:91:
                    39:e2:c2:f2:80:eb:86:ed:97:c6:60:f0:8c:54:c9:
                    b8:0d:3d:5c:09:8e:b1:96:0b:04:32:15:cc:2f:92:
                    4a:48:3a:10:6b:b5:ed:21:b3:07:ed:81:21:bb:87:
                    46:b7:3b:56:f8:ce:d0:ed:f7:17:dd:48:2d:e0:17:
                    31:22:89:87:3a:89:f7:b0:d3:8f:a3:1d:a1:f0:2d:
                    1d:71:ef:fa:b7:dd:d6:e2:47:9d:dc:1f:d7:30:9c:
                    f4:a6:92:01:23:49:d5:4d:3c:ca:59:45:a6:51:da:
                    c2:1f:54:b8:aa:3c:f5:11:fb:f4:9c:fa:26:85:79:
                    f6:58:dd:aa:d7:6e:42:a1:db:79:4d:a7:70:57:65:
                    22:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A6:3F:33:6A:FE:08:FB:FB:B1:2D:74:D1:B4:46:42:89:20:8C:9C
            X509v3 Authority Key Identifier:
                keyid:83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/3137372e34372e3234302e302f32312d3231203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:bb:69:1a:2d:a3:3e:72:c2:ad:3e:86:d2:9b:e7:cd:9c:8b:
         08:8e:d6:d8:f8:0d:d8:ab:cc:48:44:21:8a:10:67:dd:92:8a:
         3f:83:94:7b:50:0c:33:73:ae:05:54:84:45:a7:38:c7:9c:f5:
         c6:a5:cb:a2:86:43:34:d0:4b:85:ff:4a:46:ee:76:e9:22:b2:
         eb:24:ce:7b:c5:59:53:4f:5b:b6:75:ef:45:33:63:af:b3:dd:
         b3:97:4b:1e:9c:a9:7f:48:64:fe:46:58:0e:5a:f2:24:49:2a:
         fa:b0:25:f0:b6:ec:80:1f:45:db:c1:94:8f:07:c1:05:e9:3a:
         e3:2e:55:a8:af:e3:c6:ac:1b:f1:d6:3c:ce:d5:71:02:9e:12:
         9a:ae:69:a6:c1:91:fc:ea:22:75:5a:db:db:56:da:7d:ac:b7:
         36:d9:98:c4:79:9a:bc:76:00:bc:3d:8e:0a:cf:3f:cd:59:48:
         85:d1:09:50:85:52:c2:90:7d:71:a2:64:f3:7b:75:10:9e:8e:
         d1:69:7f:9a:47:7a:72:c8:c0:bd:6e:fe:d9:06:a3:f8:f1:d5:
         a2:a8:dd:cb:e7:e1:d8:76:67:d0:5c:1d:2e:ff:d8:61:5e:13:
         74:6d:01:2c:bd:c4:30:f0:17:9c:8c:83:33:aa:9c:22:d6:c7:
         ad:70:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:24 2024 by rpki-client on console-ams.rpki-client.org