Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3137332e302f32342d3234203d3e203238363536.roa
File:                     3230312e37372e3137332e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          snKteh3RB9a2ZVbu1a2cc2sPprOBfgCUEwKr1fQsnh4=
Subject key identifier:   C4:0C:7B:92:CC:1F:CE:58:4A:CD:23:8B:E2:F3:58:64:26:5B:F9:46
Certificate issuer:       /CN=4504054E9F641914E3EF0F436CCB1E127C868221
Certificate serial:       404449B4D2670A32A29BC8FAED4FBD1A9A95F49C
Authority key identifier: 45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3137332e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 23 Oct 2022 13:22:13 +0000
ROA not before:           Sun 23 Oct 2022 13:17:13 +0000
ROA not after:            Sun 22 Oct 2023 13:22:13 +0000
asID:                     28656
IP address blocks:        201.77.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:44:49:b4:d2:67:0a:32:a2:9b:c8:fa:ed:4f:bd:1a:9a:95:f4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4504054E9F641914E3EF0F436CCB1E127C868221
        Validity
            Not Before: Oct 23 13:17:13 2022 GMT
            Not After : Oct 22 13:22:13 2023 GMT
        Subject: CN=C40C7B92CC1FCE584ACD238BE2F35864265BF946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:3a:57:8c:af:fa:de:f7:5e:32:45:e4:ea:
                    65:4e:62:16:97:5d:82:6a:17:ba:5c:6a:8b:3a:7c:
                    af:02:56:f6:00:c8:de:36:69:3d:78:94:2b:e1:ac:
                    4e:31:ec:7e:62:78:fe:c4:ca:66:3a:5b:b6:f8:8e:
                    ba:bb:5c:e4:e3:e6:68:e1:20:03:7a:6b:97:16:a9:
                    73:d7:8b:a5:22:ed:ba:8b:0c:26:37:9b:0e:70:ea:
                    a9:87:3c:70:39:2a:a4:9b:51:81:b3:71:27:80:49:
                    9f:9a:d3:e0:be:91:a4:24:25:d2:c6:7e:20:d0:e9:
                    ec:de:62:80:2d:47:31:c0:58:06:42:f2:2d:12:b0:
                    04:dc:ef:75:e1:b1:4a:ac:9b:f1:fe:87:24:55:60:
                    05:63:8e:b5:10:50:12:a0:2c:1a:47:8e:80:f9:34:
                    e9:f3:0d:d1:66:5c:9c:43:fd:f1:9e:d0:26:4f:b1:
                    f5:7b:11:9f:92:67:17:62:db:69:20:f5:9a:7f:6b:
                    5d:b7:7e:e2:95:0f:47:b0:68:f1:28:fb:f5:f4:a6:
                    6c:ec:1f:1a:37:3b:5a:b1:01:70:05:bf:40:36:2e:
                    d2:38:a0:12:1d:53:65:76:93:cf:eb:50:79:62:98:
                    a5:e2:a4:bd:92:72:28:d7:ee:68:52:94:9a:34:be:
                    12:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0C:7B:92:CC:1F:CE:58:4A:CD:23:8B:E2:F3:58:64:26:5B:F9:46
            X509v3 Authority Key Identifier:
                keyid:45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/4504054E9F641914E3EF0F436CCB1E127C868221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3137332e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:74:2e:b9:de:b4:e0:a4:4c:31:89:37:d4:3a:82:b0:4c:08:
         46:26:56:6f:b1:f4:fc:94:70:d1:6c:9d:fb:79:dd:22:1c:33:
         31:79:d0:73:96:da:9a:d6:65:5f:3d:b2:e2:a0:69:31:bd:27:
         5a:a6:77:c8:54:7b:2d:59:55:12:22:8b:1c:fc:d8:3b:b8:ea:
         a0:aa:f3:3b:de:5a:f4:43:ac:00:65:f0:b3:11:2d:09:4c:9c:
         37:4a:24:c1:41:50:ea:e2:4f:f1:ed:4d:84:c3:ef:2b:6b:5a:
         f3:da:ca:7c:fe:87:3e:ee:20:3e:6b:f3:d9:12:e7:9c:cb:6d:
         10:41:49:8e:17:ba:6a:c5:67:23:4a:90:81:2c:07:63:fa:95:
         d5:b0:d7:98:4d:62:5c:a0:2a:6d:1b:6b:41:11:6c:ae:85:b9:
         17:12:d0:ec:32:22:ef:22:6d:b3:b5:a5:5b:50:97:a3:ae:8c:
         89:76:d4:a7:b3:c9:3c:7a:ae:10:15:c1:8b:41:b2:e8:73:0b:
         15:32:4a:bb:f0:f9:7b:7f:6e:ec:84:89:c1:bf:2c:11:00:5c:
         33:48:6e:c8:71:09:d4:fe:64:fe:c2:7c:57:de:5e:04:f4:d9:
         ff:30:1a:cd:6f:57:75:c8:9c:57:15:c1:f1:96:ec:9d:40:74:
         5f:af:ba:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org