Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/3137372e3135342e31382e302f32342d3234203d3e20323632393432.roa
File:                     3137372e3135342e31382e302f32342d3234203d3e20323632393432.roa (raw, json)
Hash identifier:          jlzLygDtK3a5dtz4Ul1VW/xOUSnn9gcAP4xNOGsuPMY=
Subject key identifier:   1B:9A:47:1D:BD:89:F5:6D:48:6E:C1:22:39:29:D5:70:ED:22:E0:94
Certificate issuer:       /CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
Certificate serial:       43D1E681B30F6BEE7C120706FACDD62E4D22602B
Authority key identifier: C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/3137372e3135342e31382e302f32342d3234203d3e20323632393432.roa
Signing time:             Wed 03 Apr 2024 18:31:36 +0000
ROA not before:           Wed 03 Apr 2024 18:26:36 +0000
ROA not after:            Wed 02 Apr 2025 18:31:36 +0000
asID:                     262942
IP address blocks:        177.154.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d1:e6:81:b3:0f:6b:ee:7c:12:07:06:fa:cd:d6:2e:4d:22:60:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
        Validity
            Not Before: Apr  3 18:26:36 2024 GMT
            Not After : Apr  2 18:31:36 2025 GMT
        Subject: CN=1B9A471DBD89F56D486EC1223929D570ED22E094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:95:d6:e1:65:cc:53:82:87:71:fd:ed:ad:47:
                    21:13:f0:c1:4e:b6:52:f1:13:19:52:a0:eb:2a:e3:
                    5a:74:69:40:c9:81:96:67:7d:d5:29:34:09:05:15:
                    c0:60:75:30:d1:b7:7f:63:2c:26:44:07:4d:04:a7:
                    e6:60:a1:e5:7a:76:c4:f8:90:db:20:bb:28:9e:fd:
                    63:3a:ef:09:34:bc:a5:d9:6a:04:e5:e1:99:43:ec:
                    97:84:8b:de:f1:cd:f7:dc:eb:c4:e0:5c:f6:6e:08:
                    03:7c:bb:26:87:4d:a9:8a:70:d6:25:27:8e:fb:f9:
                    e9:83:ae:ad:bf:63:82:f3:45:c6:58:47:46:f8:7e:
                    e5:5a:20:22:c2:59:6b:d5:f1:d6:bb:ad:b2:51:54:
                    5c:ce:9b:98:c1:e9:10:40:22:2e:fd:92:cf:d3:87:
                    7d:50:79:f5:da:b1:6b:b5:e3:19:d1:78:c5:2c:2d:
                    4b:f5:f4:fc:f1:53:16:6a:7c:f5:72:db:01:43:0e:
                    6e:ea:f2:d4:53:1e:2d:54:a0:5c:93:a1:cb:93:18:
                    18:03:56:6d:dd:1f:10:b9:f2:cf:95:18:ae:fb:51:
                    1b:ca:da:05:e0:f6:62:fb:81:4a:09:84:60:40:e2:
                    de:f9:eb:70:00:26:23:7a:84:2d:be:6e:7d:d1:c7:
                    36:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9A:47:1D:BD:89:F5:6D:48:6E:C1:22:39:29:D5:70:ED:22:E0:94
            X509v3 Authority Key Identifier:
                keyid:C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/3137372e3135342e31382e302f32342d3234203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:2e:cd:83:12:37:7b:1f:27:fd:a3:56:aa:72:1c:dd:c1:31:
         2b:4b:a7:50:f2:5e:d8:ad:e2:cc:fe:da:82:d6:32:b0:c1:79:
         eb:ec:5f:84:02:b1:a8:e2:59:61:66:a8:fc:e8:19:c2:de:a8:
         62:65:d0:23:4c:6f:36:73:aa:39:3c:8b:b4:d6:61:f1:75:dc:
         2b:d9:ee:7e:69:e1:c1:93:35:3a:97:77:b6:56:b1:90:1f:ac:
         89:7c:f6:50:81:da:19:3b:9c:4c:48:63:11:29:a1:30:a4:a2:
         7c:65:09:c1:81:11:ad:39:34:38:86:b4:fe:29:50:6d:56:ea:
         a9:7e:ac:db:f1:a8:2d:3c:43:44:ca:6e:30:88:19:4e:2e:39:
         01:c4:2f:cc:6c:c6:ce:db:6d:a5:c8:4b:16:c8:05:2d:ab:72:
         1e:0a:84:a7:56:2c:0d:71:f9:0e:4e:08:ff:2c:ab:9a:a5:8e:
         60:24:f0:fd:6a:67:57:53:f8:ec:ab:18:ac:ac:96:d5:85:41:
         21:32:a0:33:09:c6:ac:50:5a:4f:96:07:5a:c0:0a:46:27:ef:
         28:93:4c:db:37:f1:07:c1:ba:d9:71:09:44:3e:e4:6b:68:6f:
         94:c3:69:09:30:ba:dd:77:79:b3:48:66:55:4a:4e:8a:0c:f8:
         a1:f3:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 18:28:26 2024 by rpki-client on console-ams.rpki-client.org