Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa
File:                     3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa (raw, json)
Hash identifier:          6eiT8T30ERnYall76Ts9+5kxLIXtU9R0tVQRyoiRdJA=
Subject key identifier:   50:DD:04:1E:09:09:02:6F:5A:9A:76:EA:29:54:01:75:AA:74:86:9B
Certificate issuer:       /CN=302EB8317A945F8D97CC748C3CC1101F31F5E9CF
Certificate serial:       4E14F4101E9702D6023BFA1F234DE978D907121A
Authority key identifier: 30:2E:B8:31:7A:94:5F:8D:97:CC:74:8C:3C:C1:10:1F:31:F5:E9:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/302EB8317A945F8D97CC748C3CC1101F31F5E9CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa
Signing time:             Sun 07 Nov 2021 19:08:09 +0000
ROA not before:           Sun 07 Nov 2021 19:03:09 +0000
ROA not after:            Sun 06 Nov 2022 19:08:09 +0000
asID:                     263145
IP address blocks:        177.154.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:14:f4:10:1e:97:02:d6:02:3b:fa:1f:23:4d:e9:78:d9:07:12:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302EB8317A945F8D97CC748C3CC1101F31F5E9CF
        Validity
            Not Before: Nov  7 19:03:09 2021 GMT
            Not After : Nov  6 19:08:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0b:2c:1f:39:4f:24:39:12:0c:93:03:65:8c:
                    0f:d6:5d:85:83:2c:6e:57:5d:6a:fb:4b:5c:51:5c:
                    66:9a:e8:7d:14:ac:a8:9b:2a:c8:5d:33:1f:74:2e:
                    3b:86:b6:ac:f1:48:60:c0:a1:ef:03:a0:d3:72:4f:
                    75:1e:e3:2d:cb:48:c0:b3:f4:45:f5:e3:82:6f:42:
                    01:f9:78:ee:5c:62:ac:64:f1:cb:7d:25:e0:96:5d:
                    8e:a1:20:1d:6c:d5:af:af:f3:e1:72:a1:fe:8c:a5:
                    67:a1:ea:e5:2a:e2:53:ab:b2:81:7d:c2:5a:83:af:
                    78:9b:a0:ca:39:13:c4:56:12:1d:ab:36:50:dc:f1:
                    e7:38:2f:4b:e9:0b:6f:57:2f:12:a0:29:32:04:01:
                    ee:72:72:8e:d8:01:8c:ac:5d:6d:4e:ad:f1:a4:67:
                    96:5f:af:b9:7f:67:ac:82:2b:26:e4:e7:2a:ca:e4:
                    b6:e9:c4:6f:1b:fb:88:55:53:0f:55:f5:55:7e:07:
                    43:54:42:51:8a:86:d1:81:23:1a:b1:c3:49:22:74:
                    6a:a5:f1:f7:bd:f5:57:49:0e:1e:89:de:41:05:e5:
                    29:19:9e:46:dd:c6:ab:46:68:cb:cf:01:dd:38:9a:
                    c2:48:95:78:df:1f:5f:2d:01:f1:0e:8b:c8:29:53:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DD:04:1E:09:09:02:6F:5A:9A:76:EA:29:54:01:75:AA:74:86:9B
            X509v3 Authority Key Identifier:
                keyid:30:2E:B8:31:7A:94:5F:8D:97:CC:74:8C:3C:C1:10:1F:31:F5:E9:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/302EB8317A945F8D97CC748C3CC1101F31F5E9CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/302EB8317A945F8D97CC748C3CC1101F31F5E9CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:4b:75:8f:e5:66:ff:10:75:f4:bd:45:11:b6:b3:5b:69:e7:
         15:f7:4e:c0:0c:fc:fd:d0:d8:25:14:5d:3c:2c:57:31:da:1b:
         58:4e:2f:a0:31:69:e9:3e:09:8b:2f:a1:97:0d:79:3e:0d:de:
         66:f3:71:34:fe:39:c4:e7:78:1a:fa:cf:34:cb:53:18:67:9f:
         6e:89:de:e0:73:4f:74:9a:85:01:21:ee:18:29:aa:3d:d8:41:
         9f:2a:39:a3:42:8d:b0:34:f2:4e:82:5b:d7:13:b2:18:75:92:
         a9:3c:a1:85:6c:fc:e7:16:0b:83:03:36:88:32:86:21:b0:c9:
         e8:de:ca:0b:9e:bc:2f:96:ef:cf:d3:81:f0:24:c9:64:ce:16:
         e4:86:7b:ec:5f:cc:96:a5:f2:e4:bf:fe:d0:51:dc:39:0f:48:
         aa:85:38:df:da:77:db:ee:df:dd:a2:13:dc:bc:ac:f8:94:af:
         75:58:e4:72:e1:16:82:18:fd:1a:8e:e5:71:98:94:e0:38:4d:
         37:49:5a:de:8f:28:ee:a8:f0:d6:dd:4d:c2:ae:f1:26:a4:a7:
         8c:16:e5:ea:41:15:02:e3:38:e0:28:c2:f4:bb:2a:93:66:57:
         6b:8c:e0:82:d6:c8:c9:46:ba:17:dc:aa:6d:e5:ab:50:cc:a4:
         be:f4:75:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org