Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/3137372e3135342e31362e302f32322d3232203d3e20323632393432.roa
File:                     3137372e3135342e31362e302f32322d3232203d3e20323632393432.roa (raw, json)
Hash identifier:          H+MUpzH8PTO1dcA43M5iXZmo8aSKhVd2+jnOV4TahUY=
Subject key identifier:   E0:40:CF:02:51:BE:B2:24:E9:FF:CA:53:54:F2:9B:77:C7:C8:69:91
Certificate issuer:       /CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
Certificate serial:       74992C6F8D7FC9D9549B9EC75499BFE6CC649B7D
Authority key identifier: C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/3137372e3135342e31362e302f32322d3232203d3e20323632393432.roa
Signing time:             Wed 03 Apr 2024 18:31:35 +0000
ROA not before:           Wed 03 Apr 2024 18:26:35 +0000
ROA not after:            Wed 02 Apr 2025 18:31:35 +0000
asID:                     262942
IP address blocks:        177.154.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:99:2c:6f:8d:7f:c9:d9:54:9b:9e:c7:54:99:bf:e6:cc:64:9b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
        Validity
            Not Before: Apr  3 18:26:35 2024 GMT
            Not After : Apr  2 18:31:35 2025 GMT
        Subject: CN=E040CF0251BEB224E9FFCA5354F29B77C7C86991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:6c:c1:16:fa:30:84:76:a8:cc:7f:f9:5c:
                    f6:c8:fa:7b:b2:5b:c3:04:97:ec:4f:c2:28:70:7b:
                    55:1f:15:3f:a1:a6:7a:e8:c6:7f:7d:5f:81:01:ca:
                    72:8e:c1:2f:58:d2:1d:1c:7f:16:89:3a:78:dc:33:
                    d9:a3:b8:2f:2a:e0:16:14:b6:a8:ce:52:66:82:a9:
                    90:64:97:69:91:03:a7:40:97:31:77:8c:30:4f:2f:
                    19:d4:f8:06:3f:1a:16:ee:eb:c1:c6:c0:69:ee:73:
                    16:a4:45:77:a3:d6:93:7a:15:09:f0:64:2a:c1:ae:
                    fd:9a:7a:aa:ee:f3:c8:3c:89:3a:bb:36:38:3c:fa:
                    0f:b0:2c:12:4c:f4:8a:a0:ea:67:36:67:d8:4c:fe:
                    95:67:90:b8:f7:26:10:6d:37:c7:3f:33:e5:2a:7b:
                    f7:05:b8:aa:e6:3d:06:5e:ee:0c:ac:d2:83:74:16:
                    23:9a:4c:69:d4:52:d6:cc:6d:e5:a0:01:c2:56:0a:
                    cc:cf:bd:43:4b:1b:b3:f9:fe:a4:de:54:97:67:b8:
                    73:89:79:18:81:8e:11:af:1c:6f:c9:15:f5:95:ac:
                    5f:3f:e4:ff:19:89:05:3a:27:c1:02:d5:57:f9:c7:
                    70:a7:6c:50:25:e2:db:29:77:b6:63:9f:56:cc:79:
                    44:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:40:CF:02:51:BE:B2:24:E9:FF:CA:53:54:F2:9B:77:C7:C8:69:91
            X509v3 Authority Key Identifier:
                keyid:C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/3137372e3135342e31362e302f32322d3232203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:56:d2:76:5e:32:fc:ff:ea:b2:56:ba:c3:fa:f6:c7:8a:23:
         f7:a7:18:dc:c5:48:36:63:36:6a:87:44:b2:3a:a6:3e:e6:dc:
         5e:ee:c9:e1:b7:e4:0d:65:be:c6:f7:2a:a5:4c:5d:4e:09:af:
         61:b0:fb:c0:d0:e8:59:87:d3:02:96:49:0f:b7:a7:fb:25:ca:
         8d:67:ac:b2:3a:b7:16:b8:89:63:44:d6:f0:ba:52:c6:63:81:
         ad:c7:dd:39:21:45:e5:02:8d:3d:ed:7f:25:c2:59:12:8d:52:
         7d:62:fd:54:78:f7:4c:cd:ab:c6:c5:59:8a:36:39:01:dc:c2:
         3c:1a:d6:ca:76:24:ec:6f:69:fc:b3:bf:69:8c:57:e2:76:b0:
         23:e9:76:24:0a:e0:11:66:0b:2d:ac:8c:09:99:f4:97:d6:5e:
         66:28:68:51:da:2a:69:79:61:d3:d0:10:26:62:66:f6:de:74:
         75:c1:3e:3b:f4:a7:62:fa:44:d7:18:70:57:b1:93:fa:9a:b4:
         8b:c1:9b:2f:ee:03:4a:96:55:44:94:02:8e:da:fd:0f:58:aa:
         e8:d1:f8:05:b0:eb:93:e5:a0:a6:ba:dd:a5:51:32:b0:93:5b:
         38:34:5e:c9:5a:80:92:ac:2a:30:2a:53:ce:29:c9:1b:1d:67:
         bc:08:f3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 16:21:29 2024 by rpki-client on console-fra.rpki-client.org