Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/3137372e35332e3136302e302f32322d3234203d3e20323730323437.roa
File:                     3137372e35332e3136302e302f32322d3234203d3e20323730323437.roa (raw, json)
Hash identifier:          SzorqW8nJ+WFX+JvpTvooqDxVOTGjFknFlzn3VBJ+8g=
Subject key identifier:   54:E8:86:97:4B:A0:7B:0F:C0:EB:FE:50:50:04:63:B4:15:4F:21:3B
Certificate issuer:       /CN=A17E1666B400764AAB84BF876124DB6CB1EB0DC3
Certificate serial:       174F86D2E0BFF95A332541FBB4066DD8C6F1D942
Authority key identifier: A1:7E:16:66:B4:00:76:4A:AB:84:BF:87:61:24:DB:6C:B1:EB:0D:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/3137372e35332e3136302e302f32322d3234203d3e20323730323437.roa
Signing time:             Wed 10 Apr 2024 13:19:33 +0000
ROA not before:           Wed 10 Apr 2024 13:14:33 +0000
ROA not after:            Wed 09 Apr 2025 13:19:33 +0000
asID:                     270247
IP address blocks:        177.53.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4f:86:d2:e0:bf:f9:5a:33:25:41:fb:b4:06:6d:d8:c6:f1:d9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A17E1666B400764AAB84BF876124DB6CB1EB0DC3
        Validity
            Not Before: Apr 10 13:14:33 2024 GMT
            Not After : Apr  9 13:19:33 2025 GMT
        Subject: CN=54E886974BA07B0FC0EBFE50500463B4154F213B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:60:96:27:1d:10:47:44:8c:22:e5:86:17:
                    38:71:c1:e2:82:3f:67:7e:ac:ec:e1:ae:b0:0b:10:
                    08:dd:04:15:39:f7:c0:3e:68:d6:d2:bf:82:1f:fb:
                    22:da:65:31:11:88:0b:b9:c0:38:93:7d:52:f2:58:
                    a6:27:26:52:79:b2:0b:4c:af:d3:9e:ff:31:83:7a:
                    a1:3b:86:32:2f:bc:1f:c3:33:bb:80:0f:ed:78:a5:
                    be:e5:66:20:22:2c:9b:ee:c0:f9:d7:6e:77:19:ef:
                    a8:6b:ab:e2:74:b5:82:90:67:d0:4d:51:93:ae:f0:
                    b4:03:07:b3:eb:57:c1:a9:d5:59:5b:bd:6e:11:6b:
                    8d:35:fa:43:d7:d8:a9:f5:5d:cb:05:75:a8:db:0a:
                    ab:00:79:0a:56:ba:0a:bc:07:8a:43:3f:4f:d0:a3:
                    1d:7b:29:20:5d:21:bb:5e:ca:46:3b:df:57:51:ca:
                    cd:31:69:b0:a0:37:d7:c1:20:8c:13:e2:4a:98:6a:
                    24:f9:87:4e:a3:c3:b5:20:83:15:27:fb:57:db:ef:
                    6b:93:05:96:8f:83:b8:94:98:66:a5:d7:3b:bc:70:
                    65:38:5f:01:4d:a6:04:b3:e4:a9:24:ee:28:0a:22:
                    38:b3:fa:7d:04:3c:37:28:0d:ac:d0:47:62:84:e0:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E8:86:97:4B:A0:7B:0F:C0:EB:FE:50:50:04:63:B4:15:4F:21:3B
            X509v3 Authority Key Identifier:
                keyid:A1:7E:16:66:B4:00:76:4A:AB:84:BF:87:61:24:DB:6C:B1:EB:0D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/3137372e35332e3136302e302f32322d3234203d3e20323730323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:57:dc:7e:4f:e7:9b:d5:dd:c5:8c:84:1c:74:d7:73:ac:b9:
         d2:54:8f:65:c6:a2:6d:d3:56:e4:9b:6a:0e:35:db:e9:17:09:
         c0:26:a3:4c:6a:44:94:79:48:9e:f0:22:62:80:d3:f8:65:b8:
         a5:c8:0c:88:f8:f7:59:d4:d0:02:08:92:78:47:c7:a9:ba:12:
         02:02:e2:d8:99:3b:d6:8e:83:64:a5:12:d0:87:94:5f:b3:7a:
         e3:05:bd:96:82:cc:82:dd:08:a0:ce:d0:e0:c1:2c:28:1a:52:
         42:86:87:92:88:4a:45:5b:79:77:86:ed:36:38:82:23:86:43:
         87:fc:d0:25:25:4b:eb:6c:cf:0a:40:a5:5f:ab:58:83:b0:47:
         c3:dd:0f:93:3c:db:c0:aa:31:86:bb:c8:de:b2:82:34:3c:88:
         6a:90:03:6b:42:ac:d6:f4:c2:0e:18:40:cf:9b:66:1d:55:d8:
         4a:f8:e3:a4:39:8b:9d:d8:f0:43:91:5e:b0:a0:d3:49:b1:d6:
         aa:c8:f6:57:3c:f0:01:c6:71:52:ec:fb:92:d5:af:5e:78:b2:
         1e:89:15:8a:6b:56:88:bb:13:4f:60:46:5f:08:49:92:45:67:
         3e:3d:6a:04:a8:ee:73:93:33:db:43:50:ca:e2:0a:dc:76:6e:
         1d:7c:ca:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org