Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/3137372e3135342e31392e302f32342d3234203d3e20323632393432.roa
File:                     3137372e3135342e31392e302f32342d3234203d3e20323632393432.roa (raw, json)
Hash identifier:          /Tv3+plE1GmaO/gnGSzoWSK28oZxe/vo7a6r3JtDcdE=
Subject key identifier:   82:28:09:BA:A2:2E:59:C3:FF:86:A1:E1:EA:4F:CA:CC:05:C0:26:CD
Certificate issuer:       /CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
Certificate serial:       5359F75A7F221B990E66E544B14E2082B122FC0A
Authority key identifier: DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/3137372e3135342e31392e302f32342d3234203d3e20323632393432.roa
Signing time:             Fri 23 Feb 2024 16:00:00 +0000
ROA not before:           Fri 23 Feb 2024 15:55:00 +0000
ROA not after:            Fri 21 Feb 2025 16:00:00 +0000
asID:                     262942
IP address blocks:        177.154.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:59:f7:5a:7f:22:1b:99:0e:66:e5:44:b1:4e:20:82:b1:22:fc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
        Validity
            Not Before: Feb 23 15:55:00 2024 GMT
            Not After : Feb 21 16:00:00 2025 GMT
        Subject: CN=822809BAA22E59C3FF86A1E1EA4FCACC05C026CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:6f:43:44:67:35:e9:fb:3a:f0:fd:4a:32:
                    53:33:f7:01:77:05:24:0b:18:bf:c2:24:a6:64:5b:
                    f7:e4:ab:14:6f:25:81:e5:96:4d:93:2e:21:d0:cc:
                    36:27:73:eb:89:75:1c:8f:8a:7b:8d:0a:71:94:af:
                    07:13:f4:6a:76:89:e1:55:52:05:37:13:8c:ed:ed:
                    c6:1b:b4:1b:16:e7:52:bf:18:aa:9a:51:2b:cc:dc:
                    f3:cf:9b:cf:b4:7c:2d:62:d8:45:66:d9:21:03:c0:
                    34:e8:b9:9c:a7:81:0f:5a:70:54:28:6c:b0:06:ab:
                    da:f1:83:4e:84:a4:6f:02:58:3e:1a:fc:c4:67:32:
                    ca:8c:f4:22:9b:a0:94:c4:8c:27:fd:d9:b8:7b:80:
                    5e:46:d6:bb:62:f4:bc:8b:66:f7:e8:7a:f6:42:fa:
                    27:ae:6d:ce:55:de:26:9a:f7:73:95:96:5f:93:27:
                    21:75:5b:c9:d5:32:e2:0b:dd:14:ad:09:56:64:11:
                    ad:5b:3b:9c:4e:84:e1:8e:51:f7:4a:44:02:a7:75:
                    5c:96:78:e1:8f:92:a6:24:f7:33:60:a1:94:24:f0:
                    c7:d2:18:ab:fb:a2:03:42:f4:95:a2:8d:48:4c:73:
                    54:05:d7:56:39:7c:f8:5c:4f:ea:1d:57:43:f1:cc:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:28:09:BA:A2:2E:59:C3:FF:86:A1:E1:EA:4F:CA:CC:05:C0:26:CD
            X509v3 Authority Key Identifier:
                keyid:DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/3137372e3135342e31392e302f32342d3234203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:86:e4:b1:1c:66:89:03:93:cb:5a:d4:5c:4b:7d:3f:be:a9:
         3b:82:14:4f:4f:7f:2b:9d:c7:68:c2:46:3b:b0:6e:64:bf:72:
         c3:28:56:b6:f3:09:6c:c4:fd:10:e9:44:ba:14:27:9c:c9:c4:
         fd:35:e1:47:76:9b:fd:c0:a8:40:3b:f5:29:c5:9d:a5:a4:cc:
         b5:36:af:02:94:80:41:b5:51:3b:2e:47:ae:6b:f5:03:9e:2b:
         db:bb:e0:4e:ce:7b:37:e1:25:76:49:c9:04:69:b9:ce:54:24:
         6d:84:3d:37:00:47:44:3d:9d:06:1b:9f:25:9b:53:4c:73:bc:
         03:ee:d0:da:84:08:cd:03:78:ab:c1:78:5b:66:8a:c5:3b:9c:
         ca:65:31:b5:0f:67:4e:ae:23:7f:d7:8d:d6:b3:cf:0e:55:28:
         a9:49:40:09:11:4f:ff:6e:94:e8:17:e5:a9:7d:72:1d:84:4d:
         b5:31:b8:b0:98:9c:ff:b5:75:9b:d6:75:c9:92:42:f6:37:b9:
         a4:32:25:89:93:2c:29:cb:66:99:8e:09:65:2a:58:e8:9e:3a:
         03:fd:af:e1:91:ee:94:32:d5:08:1e:74:70:59:94:6d:45:2b:
         04:d7:d0:e8:7d:94:de:f4:25:5c:5a:e6:88:e9:43:df:0a:ec:
         f6:91:57:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org