Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32322d3233203d3e20323633353733.roa
File:                     3137372e3138342e3231362e302f32322d3233203d3e20323633353733.roa (raw, json)
Hash identifier:          nTHHhwlyvh4xEDjBfzmLh3MVUh6yhNO5ly8A06B+m8o=
Subject key identifier:   41:48:A0:0F:58:0C:EC:0E:32:19:2D:CF:1A:C3:73:44:8A:DB:F9:B5
Certificate issuer:       /CN=40F7219B2EA11F86580542EBE162507BE414E3D9
Certificate serial:       45618DA25354666501BC1DA25D4617B9397F98CD
Authority key identifier: 40:F7:21:9B:2E:A1:1F:86:58:05:42:EB:E1:62:50:7B:E4:14:E3:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F7219B2EA11F86580542EBE162507BE414E3D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32322d3233203d3e20323633353733.roa
Signing time:             Thu 12 Aug 2021 01:00:00 +0000
ROA not before:           Thu 12 Aug 2021 00:55:00 +0000
ROA not after:            Fri 12 Aug 2022 01:00:00 +0000
asID:                     263573
IP address blocks:        177.184.216.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:61:8d:a2:53:54:66:65:01:bc:1d:a2:5d:46:17:b9:39:7f:98:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F7219B2EA11F86580542EBE162507BE414E3D9
        Validity
            Not Before: Aug 12 00:55:00 2021 GMT
            Not After : Aug 12 01:00:00 2022 GMT
        Subject: CN=3082010A0282010100AC099AFF907A3B8D30D1A30FA565AFE259C97715C955A75099A96CD12E40D1A4A5BD2B75FDCBCEB73E13288EF76E6854FC2A89FB5E01AA50B8050B3CD846ED17F5D9341027193503DE9C66BDE6C716BF1528C35BF26162B5F12366FC4DE20B461093326D9018B827D884C86892D7161B9209EEFCE10034CB630A0F54B2247DA965E1A0154DA1194444BE10CF71889D16DF339FA26DE591EB9E017FCF12707738590D0E934C5970D171E1455BE00733F32AC38C22FD389492E8132B9AA1640864FB3FBFE231434F226547955265744C15F699996CFF0AFE1BCF6D51664FF024FE86FFAC4C05FEB722964344B14FBC571A7553A4CFD10F70D31B59A9F0D031EFD50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:9a:ff:90:7a:3b:8d:30:d1:a3:0f:a5:65:
                    af:e2:59:c9:77:15:c9:55:a7:50:99:a9:6c:d1:2e:
                    40:d1:a4:a5:bd:2b:75:fd:cb:ce:b7:3e:13:28:8e:
                    f7:6e:68:54:fc:2a:89:fb:5e:01:aa:50:b8:05:0b:
                    3c:d8:46:ed:17:f5:d9:34:10:27:19:35:03:de:9c:
                    66:bd:e6:c7:16:bf:15:28:c3:5b:f2:61:62:b5:f1:
                    23:66:fc:4d:e2:0b:46:10:93:32:6d:90:18:b8:27:
                    d8:84:c8:68:92:d7:16:1b:92:09:ee:fc:e1:00:34:
                    cb:63:0a:0f:54:b2:24:7d:a9:65:e1:a0:15:4d:a1:
                    19:44:44:be:10:cf:71:88:9d:16:df:33:9f:a2:6d:
                    e5:91:eb:9e:01:7f:cf:12:70:77:38:59:0d:0e:93:
                    4c:59:70:d1:71:e1:45:5b:e0:07:33:f3:2a:c3:8c:
                    22:fd:38:94:92:e8:13:2b:9a:a1:64:08:64:fb:3f:
                    bf:e2:31:43:4f:22:65:47:95:52:65:74:4c:15:f6:
                    99:99:6c:ff:0a:fe:1b:cf:6d:51:66:4f:f0:24:fe:
                    86:ff:ac:4c:05:fe:b7:22:96:43:44:b1:4f:bc:57:
                    1a:75:53:a4:cf:d1:0f:70:d3:1b:59:a9:f0:d0:31:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:48:A0:0F:58:0C:EC:0E:32:19:2D:CF:1A:C3:73:44:8A:DB:F9:B5
            X509v3 Authority Key Identifier:
                keyid:40:F7:21:9B:2E:A1:1F:86:58:05:42:EB:E1:62:50:7B:E4:14:E3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/40F7219B2EA11F86580542EBE162507BE414E3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F7219B2EA11F86580542EBE162507BE414E3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32322d3233203d3e20323633353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:7d:1c:5e:1b:ad:2c:08:df:38:52:25:99:67:d3:2e:a5:aa:
         cc:fc:94:dd:ab:9c:08:a0:83:87:7d:b5:4a:3a:1e:e1:49:7d:
         9a:52:6b:8a:9f:2e:59:42:7f:a4:e6:21:24:9f:75:28:d3:f4:
         6a:ca:a5:0d:bb:60:5d:80:b0:cb:e8:85:ad:21:5d:a5:7b:d0:
         60:e4:ed:cd:4c:9b:38:dc:87:e8:f5:37:8f:fc:9c:cd:e0:e2:
         3c:18:61:9d:29:1a:7b:68:2d:bf:d7:73:98:1e:b5:23:81:ad:
         6c:7c:cc:4e:5a:34:d2:57:b5:80:20:ac:ba:c7:58:6c:97:d6:
         fd:07:22:ba:f3:34:b5:5f:ef:c9:43:5f:ed:d0:3c:f4:fa:96:
         22:f8:7d:5d:d3:60:c9:94:f6:7c:fc:f1:ab:39:f0:c0:43:81:
         7f:7b:d5:01:f3:b8:38:00:1a:1b:2f:54:26:6b:17:23:ad:e5:
         26:69:ff:b8:94:43:75:5e:3a:8f:c5:0f:18:df:fd:17:ea:9f:
         50:85:d4:27:25:db:e4:ee:e7:80:5e:d4:51:6c:cb:05:71:b5:
         61:e0:7a:4b:ec:3f:05:5b:9e:f7:29:17:1e:1e:dd:83:f2:76:
         2c:36:5f:a3:fb:21:04:f0:df:5e:f4:b0:43:92:92:5b:76:c1:
         a5:d5:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:35 2023 by rpki-client on console-fra.rpki-client.org