Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3136382e302f32312d3231203d3e203532393133.roa
File:                     3137372e32332e3136382e302f32312d3231203d3e203532393133.roa (raw, json)
Hash identifier:          0neiaFYk5ffppGPAtgKfPsEsxR4ANVIECNJCcAFRigo=
Subject key identifier:   B8:83:14:6C:DB:49:1A:B1:45:32:F8:4E:F3:6C:C1:24:A2:5B:C1:78
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       4549341350812C997A8900924BDCCBE07D5E6242
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3136382e302f32312d3231203d3e203532393133.roa
Signing time:             Thu 07 Mar 2024 21:20:47 +0000
ROA not before:           Thu 07 Mar 2024 21:15:47 +0000
ROA not after:            Thu 06 Mar 2025 21:20:47 +0000
asID:                     52913
IP address blocks:        177.23.168.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:49:34:13:50:81:2c:99:7a:89:00:92:4b:dc:cb:e0:7d:5e:62:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar  7 21:15:47 2024 GMT
            Not After : Mar  6 21:20:47 2025 GMT
        Subject: CN=B883146CDB491AB14532F84EF36CC124A25BC178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:d3:47:ee:5e:89:00:50:55:9e:dd:8a:a3:
                    a5:6b:ff:95:1d:a7:c1:58:d7:7b:d4:d6:bc:bf:1a:
                    6b:d8:27:d7:1b:0f:ea:71:6a:41:70:43:be:87:66:
                    ad:59:9b:41:71:4d:d0:eb:4e:a8:b2:ef:02:19:75:
                    26:2a:49:71:b3:9c:f4:70:bb:b3:c4:82:e2:85:49:
                    4a:54:48:c9:25:6a:bc:a0:f9:28:4b:0e:00:6f:ea:
                    e4:0c:7b:37:c8:6f:e5:5d:4f:a1:24:96:37:3d:25:
                    00:00:44:c9:57:ed:ca:e5:79:1d:fb:41:b6:ee:41:
                    0c:24:9f:8f:0e:79:75:d6:5c:1c:89:01:80:7b:5b:
                    0e:9a:cd:58:6f:d0:10:ae:04:59:93:6e:07:59:a0:
                    01:19:91:f2:23:07:df:3c:bc:2e:b5:5b:da:c3:58:
                    f3:5d:c1:c3:e8:fe:1e:0d:d0:da:81:83:25:41:8b:
                    17:5e:49:ee:c4:a3:d0:76:bf:12:5f:5a:fb:38:f0:
                    ff:fe:34:81:55:ac:28:0d:ec:3a:0b:75:2b:e4:83:
                    cc:ff:d4:b5:72:e6:22:24:b9:23:4f:fb:e5:4a:22:
                    6b:cb:4d:da:ff:ad:df:e6:83:27:5e:85:16:76:61:
                    b2:b7:7f:50:00:15:37:8d:c0:bb:d7:0f:78:53:ac:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:83:14:6C:DB:49:1A:B1:45:32:F8:4E:F3:6C:C1:24:A2:5B:C1:78
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3136382e302f32312d3231203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:28:36:1e:3e:da:54:00:7e:5f:ff:68:93:53:6d:89:3c:ee:
         32:1a:74:62:53:89:fe:07:7b:94:6f:4e:fb:79:aa:31:ad:4d:
         23:b2:52:10:25:21:27:2d:48:66:7f:b1:09:52:6d:4f:98:55:
         a8:20:fd:d6:bf:1d:c0:a7:f0:d1:55:c3:4d:6b:50:f0:29:71:
         8d:eb:d8:1d:4e:4d:40:46:9c:05:56:a5:f1:a1:fd:f4:40:14:
         15:0c:3b:73:e2:45:dc:cb:e9:89:f3:65:56:20:0d:8f:02:3b:
         66:c3:cc:81:3a:af:3a:2d:e4:00:a7:69:60:0d:b4:21:0d:f2:
         44:08:ad:54:dd:1c:df:89:06:c9:14:15:94:83:f1:4c:82:2c:
         60:21:e5:66:e5:36:6f:49:0a:73:cd:c0:2f:0b:0e:82:97:3c:
         db:1d:60:95:a5:49:2a:ae:c6:1d:dc:9a:d2:52:9e:a5:e2:d1:
         a0:a1:c9:5e:6a:9c:bd:5b:78:5c:fd:03:00:be:95:a9:6d:e6:
         c1:71:9b:d8:2b:a5:ef:16:20:4f:07:33:6f:6e:4e:65:3d:3b:
         75:ed:59:7b:79:99:c7:dc:96:1a:49:61:60:0e:30:1a:95:26:
         7d:4a:3c:3f:49:a1:5d:f8:2a:d1:cb:9a:65:48:e2:a3:50:10:
         bc:44:1c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org