Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa
File:                     3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa (raw, json)
Hash identifier:          spO+TZvdkymYUYPld2siWJ+EBDyHveP7vYufsrawijE=
Subject key identifier:   6B:7F:AF:FD:18:0D:0A:C8:26:36:E5:6A:E4:91:06:47:33:93:12:4B
Certificate issuer:       /CN=DAFBE65FF96BBA89F467D4F20B0549C579F099DA
Certificate serial:       2D8D022BA74ABEC9A10F93AE25867EFB77439F1F
Authority key identifier: DA:FB:E6:5F:F9:6B:BA:89:F4:67:D4:F2:0B:05:49:C5:79:F0:99:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa
Signing time:             Wed 04 Oct 2023 23:00:00 +0000
ROA not before:           Wed 04 Oct 2023 22:55:00 +0000
ROA not after:            Wed 02 Oct 2024 23:00:00 +0000
asID:                     263145
IP address blocks:        177.154.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8d:02:2b:a7:4a:be:c9:a1:0f:93:ae:25:86:7e:fb:77:43:9f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAFBE65FF96BBA89F467D4F20B0549C579F099DA
        Validity
            Not Before: Oct  4 22:55:00 2023 GMT
            Not After : Oct  2 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:63:d2:69:59:75:59:47:b1:f9:50:82:e5:
                    15:5b:08:4d:c6:27:17:67:00:31:1d:67:e1:84:92:
                    8d:83:5e:9f:a1:74:92:89:af:a9:c3:6c:24:f6:05:
                    8f:06:c2:5e:72:4d:03:db:39:46:c0:fc:55:1e:4a:
                    44:bf:73:c1:68:65:e4:4c:15:62:31:bb:90:b0:00:
                    4d:b7:f2:da:ca:5b:15:f1:ae:74:02:23:04:55:ca:
                    ab:23:7c:9d:76:cd:1c:91:6a:bb:ba:0a:10:07:f3:
                    42:69:0a:61:5e:ce:f5:26:d1:64:17:c0:47:ad:08:
                    e5:e0:11:3b:4b:46:46:ab:82:9a:f8:22:65:5a:af:
                    8b:16:eb:e0:90:52:39:0c:15:7a:cb:90:ba:13:d1:
                    ea:49:ed:9c:23:2d:a9:85:2c:24:6f:73:3a:d6:95:
                    03:5c:c5:56:c4:cd:cf:21:d7:75:a8:db:3b:85:55:
                    43:e4:64:ae:f2:eb:b9:dc:d2:2b:f5:6f:32:ed:17:
                    64:19:2c:3f:3d:2d:47:a5:98:39:2b:26:4e:3c:2e:
                    9f:de:5f:10:d7:14:f6:a9:a7:c0:c2:ff:83:69:8e:
                    40:c6:a1:e3:d0:17:4a:70:10:52:3a:05:3e:b0:4d:
                    9f:f8:85:a9:bc:16:f1:01:ef:6d:8c:3e:73:51:1a:
                    98:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7F:AF:FD:18:0D:0A:C8:26:36:E5:6A:E4:91:06:47:33:93:12:4B
            X509v3 Authority Key Identifier:
                keyid:DA:FB:E6:5F:F9:6B:BA:89:F4:67:D4:F2:0B:05:49:C5:79:F0:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:62:d4:3c:3a:dc:a0:78:f3:b3:28:6a:b1:e6:ed:da:b2:84:
         bb:5c:31:43:bf:a1:b6:6a:0d:f5:4a:e3:f0:1e:b4:d4:49:1a:
         8c:27:b6:6a:44:72:c6:f8:9d:35:eb:c1:d4:80:be:94:f6:7f:
         14:b7:f0:05:c4:b2:cd:53:e4:1a:b6:d9:e6:8d:f8:74:16:28:
         2f:47:f3:c2:4a:e3:39:4d:e9:f3:c4:aa:c5:63:42:ea:96:94:
         65:bc:87:b4:39:90:b4:a8:38:e1:30:c9:0b:7f:69:29:e7:ca:
         3a:f8:49:a7:7a:5f:8e:82:62:55:12:d5:25:d2:96:45:cc:49:
         13:3f:45:ae:ae:4f:4d:82:07:83:fa:3c:84:a7:e2:a1:d4:6d:
         d8:41:a5:06:ef:e3:58:9d:55:fb:71:67:00:2e:1c:71:78:4b:
         b8:66:97:5a:8c:1a:c6:ad:3f:e9:cb:99:55:36:af:2b:13:90:
         a1:1c:68:b6:92:36:dd:7a:90:fd:63:1a:81:20:c2:7e:55:1d:
         1c:ef:1d:0d:30:d1:7f:bc:5a:6b:4b:0b:ba:70:da:39:34:9c:
         5d:a9:10:96:4a:2e:99:bc:8a:7b:29:47:a7:aa:71:7f:6a:cf:
         77:35:4a:55:42:4a:20:ed:5d:a7:1d:51:fb:45:ce:98:4f:c9:
         d4:63:71:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org