Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/3137372e3132342e32342e302f32332d3233203d3e20323632333135.roa
File:                     3137372e3132342e32342e302f32332d3233203d3e20323632333135.roa (raw, json)
Hash identifier:          NIEFVC0BTNWJ7We90R9nztMxIWeO0GQMMYOtPEHW1QI=
Subject key identifier:   68:F9:5D:BA:DF:DB:44:98:F6:10:E7:2D:75:B0:D1:6D:C4:66:40:7B
Certificate issuer:       /CN=71227233A4C9097DDA2442755C381DEA6E3523C2
Certificate serial:       39790333B32AE461396849BD9A720259A0807ADE
Authority key identifier: 71:22:72:33:A4:C9:09:7D:DA:24:42:75:5C:38:1D:EA:6E:35:23:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71227233A4C9097DDA2442755C381DEA6E3523C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/3137372e3132342e32342e302f32332d3233203d3e20323632333135.roa
Signing time:             Mon 15 May 2023 20:38:42 +0000
ROA not before:           Mon 15 May 2023 20:33:42 +0000
ROA not after:            Mon 13 May 2024 20:38:42 +0000
asID:                     262315
IP address blocks:        177.124.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:79:03:33:b3:2a:e4:61:39:68:49:bd:9a:72:02:59:a0:80:7a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71227233A4C9097DDA2442755C381DEA6E3523C2
        Validity
            Not Before: May 15 20:33:42 2023 GMT
            Not After : May 13 20:38:42 2024 GMT
        Subject: CN=68F95DBADFDB4498F610E72D75B0D16DC466407B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:18:4e:a4:92:da:40:bf:ae:0e:46:8e:de:1b:
                    12:4b:78:55:f5:90:e1:e2:7e:b5:47:11:8a:48:4d:
                    3b:e7:a8:3d:b6:aa:aa:d8:bb:1e:2a:f0:a3:9c:aa:
                    db:1b:10:68:b5:c6:12:2d:89:93:41:01:4d:f9:8e:
                    b3:4e:50:5a:4f:4c:37:8f:61:ad:05:68:50:69:ef:
                    ee:99:cb:92:18:b3:27:d2:e7:f7:16:fd:03:76:85:
                    f1:59:00:d7:ec:39:6b:f2:b5:76:a3:8e:b6:82:0d:
                    fd:a5:e4:9d:ff:1a:62:51:c8:8b:a2:39:6f:6c:58:
                    46:52:ce:69:1b:51:ce:bb:c5:07:a5:01:47:f7:37:
                    97:1b:4b:8b:74:c2:da:88:e6:1d:2a:4e:95:d8:6e:
                    5b:64:9d:05:cb:8c:f6:68:2d:1d:77:67:92:62:46:
                    9b:b7:94:f4:6d:21:ea:2a:40:94:58:d4:e7:68:64:
                    73:d3:15:c5:82:4b:0a:8d:6e:29:7f:df:4b:52:6f:
                    4f:66:d7:a4:88:98:eb:21:56:d0:01:2c:10:e4:27:
                    fa:2a:29:82:0d:cd:b2:d9:2d:53:62:b7:62:ec:d8:
                    7f:a9:7f:5a:59:d6:63:37:b8:33:a7:30:9b:89:7d:
                    fc:c3:2a:76:19:d6:6c:c3:18:49:54:8c:99:65:6d:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F9:5D:BA:DF:DB:44:98:F6:10:E7:2D:75:B0:D1:6D:C4:66:40:7B
            X509v3 Authority Key Identifier:
                keyid:71:22:72:33:A4:C9:09:7D:DA:24:42:75:5C:38:1D:EA:6E:35:23:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/71227233A4C9097DDA2442755C381DEA6E3523C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71227233A4C9097DDA2442755C381DEA6E3523C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/3137372e3132342e32342e302f32332d3233203d3e20323632333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:f2:6c:11:dd:51:a9:ac:91:8a:ce:cd:3b:24:ef:03:bd:95:
         5a:b4:3e:c4:31:cd:a1:7e:8f:ce:c8:16:3f:27:12:6b:a0:b6:
         49:72:11:68:4c:1e:e1:45:eb:0c:48:b0:68:ca:e0:03:85:88:
         b5:3a:49:65:87:8b:e2:92:21:e4:cf:4d:1f:56:a2:ef:81:63:
         1c:65:fc:dc:0c:cf:92:13:8e:07:83:f0:28:65:99:f7:6b:ed:
         09:fa:b1:d9:70:85:b2:e9:47:ba:2a:7e:2d:22:a3:47:02:00:
         44:17:6d:15:2a:d8:35:cf:b4:ba:c6:5b:18:27:b4:12:82:6f:
         9b:46:2e:b6:d0:ff:7d:50:a5:57:91:d1:71:b5:fa:82:86:6d:
         5b:3a:08:fa:0b:28:ac:3b:bf:b1:43:5b:84:c5:c4:b1:6a:50:
         a0:59:d1:ae:95:0f:2b:3e:45:8a:e6:88:d4:a0:cb:e1:58:ae:
         dd:05:4f:a2:46:eb:f0:bd:d6:aa:4f:53:eb:41:b9:b0:aa:76:
         11:13:de:55:08:ad:14:06:cb:6d:9f:83:47:b3:a5:44:e4:bd:
         7b:30:54:59:d4:b3:47:7d:fa:21:43:ef:3d:cf:41:59:01:b5:
         21:7c:d1:cf:ee:79:e4:80:04:b9:af:8c:15:e5:2e:d0:bd:c5:
         d4:c2:26:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org