Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa
File:                     3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          8LpCkCc1P83h24BkyCoCsUyeF6NPUE6tRV39WDxIWy4=
Subject key identifier:   0F:9F:3F:37:D2:7C:A9:13:EA:A7:42:21:E5:FE:F9:0C:CF:23:EC:6C
Certificate issuer:       /CN=BA1DB4956D8F5EFAF0970F171D6763A286633C4F
Certificate serial:       125F47CD6B6D9780D1E009BFE0798A68F9BBEED7
Authority key identifier: BA:1D:B4:95:6D:8F:5E:FA:F0:97:0F:17:1D:67:63:A2:86:63:3C:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa
Signing time:             Thu 24 Aug 2023 20:00:00 +0000
ROA not before:           Thu 24 Aug 2023 19:55:00 +0000
ROA not after:            Thu 22 Aug 2024 20:00:00 +0000
asID:                     262903
IP address blocks:        177.23.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5f:47:cd:6b:6d:97:80:d1:e0:09:bf:e0:79:8a:68:f9:bb:ee:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1DB4956D8F5EFAF0970F171D6763A286633C4F
        Validity
            Not Before: Aug 24 19:55:00 2023 GMT
            Not After : Aug 22 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:00:5e:5a:d2:00:c5:16:40:48:a2:f5:a1:
                    7e:fe:41:e7:cc:5d:21:15:e3:3f:6d:33:af:11:b5:
                    58:04:df:c9:ff:61:de:50:1a:59:7b:73:d4:d2:98:
                    e8:75:7f:49:f4:79:55:6b:7c:f6:85:28:77:70:c0:
                    75:16:90:02:b6:95:b7:33:d6:fa:b7:a4:49:8b:67:
                    a0:7c:ed:6b:4e:71:b5:4f:ed:7c:1f:b2:2c:9a:ab:
                    e6:02:6d:3e:6c:74:a6:a0:78:45:f1:e3:9e:f1:cd:
                    52:74:ed:c2:e8:25:89:b6:67:01:c1:b5:33:fb:e9:
                    52:00:01:32:b3:57:64:10:03:4b:88:1c:e1:47:ef:
                    aa:10:83:87:79:08:a2:20:e7:a3:8a:68:a1:27:b3:
                    82:d0:d1:23:a6:b4:35:f9:57:ad:51:a5:f4:2e:a6:
                    ea:94:ca:9c:36:8f:3e:a9:94:df:98:25:b1:5a:a0:
                    bc:32:fc:20:36:72:24:f2:7b:13:3e:e9:e2:8b:24:
                    51:e2:22:51:63:ff:dd:a9:7a:22:ed:ab:bd:4d:cf:
                    d0:88:5a:3e:63:40:d5:a5:81:05:a5:f7:e1:d7:02:
                    20:fc:8e:6b:7a:bc:85:df:39:80:4d:13:cc:cc:e7:
                    fb:14:f2:ee:53:2b:7a:56:88:d9:28:35:d9:82:66:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9F:3F:37:D2:7C:A9:13:EA:A7:42:21:E5:FE:F9:0C:CF:23:EC:6C
            X509v3 Authority Key Identifier:
                keyid:BA:1D:B4:95:6D:8F:5E:FA:F0:97:0F:17:1D:67:63:A2:86:63:3C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:e6:21:62:c1:92:f7:9f:c6:dc:9c:e4:32:65:c3:e2:27:8e:
         04:9e:0c:b1:98:e3:86:11:ad:ed:c3:d0:0d:6f:82:c2:97:3d:
         5b:d6:e7:bc:bd:3b:44:d7:fb:04:70:38:39:3e:f5:3e:e5:1e:
         6f:f9:cd:ca:96:24:f2:2c:07:2b:53:66:8f:01:57:17:d3:ee:
         55:21:dd:48:fb:9a:78:bb:d8:a3:27:ed:5f:f0:05:94:93:ea:
         df:f3:b8:e7:a6:77:65:77:2c:a0:d7:82:32:ba:db:b7:a6:8c:
         ee:62:d3:48:ca:23:a6:37:e0:77:3d:e8:05:69:c5:08:53:c8:
         1e:7a:26:51:7b:bd:ef:ab:3c:6e:9c:ac:2b:6e:16:9f:73:0b:
         7e:fb:91:fc:f9:55:a6:7f:69:2b:26:c3:ed:a7:3c:4e:0e:f4:
         7b:81:bc:df:d6:ad:58:3d:9c:6a:50:54:77:10:d9:15:3e:4d:
         58:86:6f:81:2e:44:91:44:aa:d6:12:29:49:73:17:25:9a:a6:
         8d:48:4e:72:e2:f3:3c:fb:bb:5c:d4:69:61:c8:5a:11:6d:fa:
         23:4f:83:bc:0a:63:48:73:cb:93:31:d3:be:2f:4e:ad:ec:26:
         c8:4e:2a:59:83:d9:2c:eb:9e:0a:31:85:92:61:71:b4:5b:80:
         d0:28:b8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org