Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/3137372e3132382e36342e302f32312d3234203d3e203532383639.roa
File:                     3137372e3132382e36342e302f32312d3234203d3e203532383639.roa (raw, json)
Hash identifier:          1JZr6ZpkTCvxQndBomjqBGw1TaH/3poETEOR1D+KZ1E=
Subject key identifier:   66:AF:D0:DD:CD:CC:5E:FE:95:A5:3D:DA:95:1E:84:43:CE:8C:E4:48
Certificate issuer:       /CN=B016900AD234CF99B5077C525DF4FFE7A750EAB2
Certificate serial:       48A53EEF634D2DE2C207DAB0D7EBE94A1D64D8DA
Authority key identifier: B0:16:90:0A:D2:34:CF:99:B5:07:7C:52:5D:F4:FF:E7:A7:50:EA:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/3137372e3132382e36342e302f32312d3234203d3e203532383639.roa
Signing time:             Fri 05 Jan 2024 19:31:49 +0000
ROA not before:           Fri 05 Jan 2024 19:26:49 +0000
ROA not after:            Fri 03 Jan 2025 19:31:49 +0000
asID:                     52869
IP address blocks:        177.128.64.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a5:3e:ef:63:4d:2d:e2:c2:07:da:b0:d7:eb:e9:4a:1d:64:d8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B016900AD234CF99B5077C525DF4FFE7A750EAB2
        Validity
            Not Before: Jan  5 19:26:49 2024 GMT
            Not After : Jan  3 19:31:49 2025 GMT
        Subject: CN=66AFD0DDCDCC5EFE95A53DDA951E8443CE8CE448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4f:2d:6c:8f:18:33:10:57:7e:cf:62:6a:7e:
                    32:d8:a4:46:8f:ab:ce:b4:5c:43:1e:c3:c4:d1:74:
                    ee:c7:57:b9:43:cc:4a:3a:72:f9:37:af:fd:04:23:
                    18:de:e4:b1:55:78:2b:6d:b6:66:e4:74:f3:e1:92:
                    d0:93:42:be:f8:3c:d2:72:a5:43:d1:dd:3c:99:bf:
                    49:63:bf:8d:fc:09:3f:0f:1e:a8:d7:43:69:3c:97:
                    71:27:01:8b:b2:43:64:b5:ae:45:4b:c9:c5:7d:9b:
                    31:66:1b:cc:36:88:08:47:3f:45:0d:c7:59:e2:60:
                    30:33:0a:d5:fb:44:dc:9e:28:2b:d9:2e:7e:5c:c9:
                    4e:c6:d7:e7:e2:76:4d:5b:c3:b4:c6:ba:56:cd:da:
                    23:cc:04:4e:b9:ff:b0:a6:3c:55:71:ad:35:e9:72:
                    4d:6c:bb:9e:0d:f5:27:82:a4:b5:5e:0c:94:db:d1:
                    c5:78:5e:ec:9e:2f:12:98:a9:d8:e9:bc:74:42:f3:
                    46:4b:09:36:c7:a3:c2:bc:1c:f9:57:0c:e3:4f:c3:
                    36:d0:9d:72:64:96:57:f2:3a:36:b7:77:f8:f5:c5:
                    70:46:9d:40:41:e1:d5:68:74:66:de:47:ad:3f:87:
                    a6:15:01:b8:45:88:69:e4:69:9b:9d:2b:9d:99:83:
                    9b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AF:D0:DD:CD:CC:5E:FE:95:A5:3D:DA:95:1E:84:43:CE:8C:E4:48
            X509v3 Authority Key Identifier:
                keyid:B0:16:90:0A:D2:34:CF:99:B5:07:7C:52:5D:F4:FF:E7:A7:50:EA:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/3137372e3132382e36342e302f32312d3234203d3e203532383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:9e:2b:24:0b:c8:5d:c0:e7:01:0c:bf:62:e4:9e:b2:d6:c2:
         cf:20:ea:15:62:5c:7d:c5:58:b7:9d:60:6b:e7:76:ec:f5:a3:
         46:ca:a4:9b:a0:fc:2b:a5:a7:9d:aa:04:1a:bf:57:69:c1:5c:
         fc:d7:7b:64:4d:8d:3b:20:b3:cc:b2:8d:b4:77:45:22:57:17:
         ff:b1:c0:d7:26:59:66:e0:36:0e:39:18:b2:5f:e2:67:ae:4b:
         86:69:0a:e5:47:20:c6:a3:2e:a3:1e:9b:da:25:5b:cf:d7:66:
         66:17:d5:76:81:b3:cf:31:7e:ac:1e:4f:78:d9:ed:66:2d:d6:
         c6:79:8b:a5:e9:3c:af:98:33:a9:e9:e5:81:1f:13:84:38:97:
         5c:64:0e:ce:3a:e7:45:4c:ab:2e:61:de:67:ff:dd:b7:c6:f2:
         22:36:ae:39:ea:0c:51:b8:4a:45:b0:db:35:1c:27:f3:fe:c7:
         b9:db:32:eb:52:08:f5:a0:fa:07:18:61:f5:d5:ce:c1:e9:c6:
         19:14:b1:c6:e7:0f:94:95:37:dd:11:93:04:76:0d:34:70:b7:
         3e:c3:f9:a5:dd:e9:b9:8d:8d:07:a2:e7:bc:34:8c:69:3a:42:
         01:f2:5b:24:8f:f9:54:0d:95:71:f5:ec:0e:85:94:d8:a3:eb:
         80:3a:71:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org