Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3137342e302f32342d3234203d3e203532393133.roa
File:                     3137372e32332e3137342e302f32342d3234203d3e203532393133.roa (raw, json)
Hash identifier:          SPlbwyTRHEgad+ZIPvqDbmmEox92BwvTekGGlQvo4Ek=
Subject key identifier:   21:84:14:1F:35:F2:49:BD:B2:E3:08:6A:4E:0A:E5:28:90:7E:5A:CE
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       4354640AC9CD6A46C4B1A51ACEAE87EA6D1000C5
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3137342e302f32342d3234203d3e203532393133.roa
Signing time:             Thu 07 Mar 2024 21:20:39 +0000
ROA not before:           Thu 07 Mar 2024 21:15:39 +0000
ROA not after:            Thu 06 Mar 2025 21:20:39 +0000
asID:                     52913
IP address blocks:        177.23.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:54:64:0a:c9:cd:6a:46:c4:b1:a5:1a:ce:ae:87:ea:6d:10:00:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar  7 21:15:39 2024 GMT
            Not After : Mar  6 21:20:39 2025 GMT
        Subject: CN=2184141F35F249BDB2E3086A4E0AE528907E5ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:cf:3f:4f:b2:85:bb:2f:26:9a:48:7e:73:
                    58:8a:9a:f1:2d:aa:9f:08:7f:3f:8c:e8:cf:96:c2:
                    7f:ae:ae:c0:2a:b6:b2:9d:72:94:5e:43:19:8c:73:
                    f2:c1:04:d4:eb:37:c7:7e:50:64:f8:12:c5:56:05:
                    f0:78:cb:d0:04:55:85:0e:41:07:0b:15:d4:14:4f:
                    da:19:f5:41:98:77:64:8f:12:29:e2:ce:4b:c9:05:
                    ac:db:81:79:98:f3:b9:33:ec:f9:1c:8d:df:28:5f:
                    89:69:95:65:13:70:d8:08:0b:06:dc:c1:de:9f:f5:
                    08:11:5d:45:ba:b2:51:9d:ec:2d:79:bb:24:1b:ff:
                    d1:54:bd:bc:c5:92:d2:92:49:15:eb:60:a0:80:c4:
                    bb:5c:16:97:1b:87:ca:12:91:60:07:9a:bd:b0:39:
                    3b:44:ed:4f:e1:e3:87:f5:f9:eb:2d:68:ad:e9:c8:
                    b9:93:04:bd:00:30:c6:22:a8:12:75:bb:8b:f7:db:
                    af:c9:68:6b:0d:cd:f7:b0:db:5c:5d:79:9e:f5:49:
                    3b:fc:d3:53:5c:79:ee:ee:e6:3d:14:c7:9d:53:73:
                    40:18:ed:28:6e:c2:9e:39:d7:7b:7c:d7:d5:0b:0f:
                    1b:48:bb:09:0c:a2:a9:74:b5:f4:99:66:54:9c:3f:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:84:14:1F:35:F2:49:BD:B2:E3:08:6A:4E:0A:E5:28:90:7E:5A:CE
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3137342e302f32342d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:35:35:00:c8:86:94:d6:87:af:59:d1:1d:3a:87:1e:e3:f9:
         2f:05:ef:83:0d:90:d0:7d:ab:a4:57:e3:03:96:9b:80:6f:30:
         4f:18:ed:18:d4:df:a4:5b:da:29:76:db:71:ac:f0:1c:1e:9e:
         5c:9b:b2:82:9d:00:dc:ba:56:b4:2a:20:a7:95:b6:05:7d:e1:
         e7:74:28:0c:59:b1:28:50:e4:0b:64:e6:46:f7:00:81:ed:a3:
         ae:40:2a:8a:01:7e:69:9a:23:75:83:cc:b2:b3:3c:05:f0:da:
         b4:0c:14:59:42:9f:34:c4:36:24:fe:2e:3b:1b:0c:f7:6a:54:
         2f:29:c2:a8:85:46:4b:ce:ae:b5:48:4f:5c:36:12:1c:69:07:
         f8:b3:41:cb:a6:31:51:be:86:a6:39:a8:42:65:90:ef:bc:1f:
         fd:fe:e9:61:3a:44:4c:27:d3:be:e3:0e:8b:62:bb:f9:48:e6:
         b1:a2:28:a4:65:e7:de:4e:e4:00:12:46:04:a7:67:b4:58:e4:
         62:72:5c:a1:4e:e0:cf:1f:7c:77:37:70:5f:ae:23:20:b0:f3:
         b6:7f:d4:db:4f:82:a7:f3:f1:13:0e:d9:29:70:03:90:1c:13:
         01:95:18:88:f4:9d:f9:60:d5:d0:58:03:06:78:36:47:ba:79:
         f3:a8:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org