Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/3137372e3132342e32362e302f32332d3233203d3e20323632333135.roa
File:                     3137372e3132342e32362e302f32332d3233203d3e20323632333135.roa (raw, json)
Hash identifier:          fecZpfvx9nV20iearJq0BabNX8nQe2OvsNFmCOm0eZ4=
Subject key identifier:   C3:DD:F6:09:1B:AA:DE:DD:36:EC:F4:34:32:BE:21:55:5B:E0:30:0D
Certificate issuer:       /CN=71227233A4C9097DDA2442755C381DEA6E3523C2
Certificate serial:       533965FC03E8BF4594AD9FB7A7EDD14CCD6FCC3F
Authority key identifier: 71:22:72:33:A4:C9:09:7D:DA:24:42:75:5C:38:1D:EA:6E:35:23:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71227233A4C9097DDA2442755C381DEA6E3523C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/3137372e3132342e32362e302f32332d3233203d3e20323632333135.roa
Signing time:             Mon 15 May 2023 20:38:49 +0000
ROA not before:           Mon 15 May 2023 20:33:49 +0000
ROA not after:            Mon 13 May 2024 20:38:49 +0000
asID:                     262315
IP address blocks:        177.124.26.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:39:65:fc:03:e8:bf:45:94:ad:9f:b7:a7:ed:d1:4c:cd:6f:cc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71227233A4C9097DDA2442755C381DEA6E3523C2
        Validity
            Not Before: May 15 20:33:49 2023 GMT
            Not After : May 13 20:38:49 2024 GMT
        Subject: CN=C3DDF6091BAADEDD36ECF43432BE21555BE0300D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:b5:3a:08:01:02:ee:aa:c6:7d:d6:89:c3:
                    6d:5e:c5:9a:61:c5:c0:ba:e1:b0:c4:5c:78:53:2f:
                    35:33:58:e6:aa:ba:25:c0:82:b5:28:3d:f6:e9:38:
                    16:e1:72:3e:fe:4c:77:92:db:eb:c8:40:84:9c:40:
                    50:5a:d7:c4:24:95:8b:2f:a0:fd:14:b4:b4:62:9a:
                    3d:9b:f4:fb:e5:7d:0d:88:9e:af:e6:1a:6a:db:a1:
                    27:02:f3:d0:28:3d:b3:2a:78:f7:49:c1:c9:9c:5c:
                    f0:6d:d1:be:48:be:74:1d:d0:56:d2:a1:df:34:18:
                    61:5a:10:c8:58:70:73:1e:fe:26:bb:cf:51:39:e7:
                    0e:60:17:31:ac:50:bf:31:7e:c8:03:77:52:7b:31:
                    06:46:d0:a1:2c:6e:7e:ae:4e:88:cc:da:eb:79:d4:
                    96:f6:07:44:ea:0f:b9:60:eb:a2:51:52:cf:29:e3:
                    cf:48:c6:1a:54:66:55:62:11:e7:6a:71:29:97:19:
                    c2:2e:f1:47:f3:38:aa:0b:7a:57:2d:3c:4d:eb:90:
                    af:80:d7:15:98:4e:57:47:e7:df:7a:8d:5a:6b:08:
                    35:49:d1:3f:49:50:09:ed:27:a3:fd:d4:ac:09:31:
                    e4:7d:8a:48:55:5a:44:47:10:32:4a:f1:81:7d:18:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DD:F6:09:1B:AA:DE:DD:36:EC:F4:34:32:BE:21:55:5B:E0:30:0D
            X509v3 Authority Key Identifier:
                keyid:71:22:72:33:A4:C9:09:7D:DA:24:42:75:5C:38:1D:EA:6E:35:23:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/71227233A4C9097DDA2442755C381DEA6E3523C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71227233A4C9097DDA2442755C381DEA6E3523C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/3137372e3132342e32362e302f32332d3233203d3e20323632333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:92:9e:e9:0e:1f:fe:bc:07:2d:7c:f1:1c:14:e2:8c:3a:a8:
         85:c8:2e:3e:05:f1:a5:40:63:38:56:a8:d4:cc:51:a8:c2:c6:
         f2:6a:08:df:88:98:8d:db:98:77:cf:dc:ef:07:c9:93:4e:4e:
         15:e7:3b:4a:fe:8f:d1:b4:06:96:5a:e0:6b:55:82:e6:66:9a:
         f2:f8:c0:7a:49:27:4b:69:30:06:f5:0f:d6:ff:ca:55:24:ac:
         97:84:cd:a0:97:fe:22:05:5f:b4:b3:6c:37:a6:db:fc:1b:cb:
         f2:26:18:2e:eb:d9:91:43:ad:c8:a9:e1:b3:39:3d:51:23:3b:
         76:3b:49:49:92:20:91:d6:33:93:cd:f4:d5:c7:6f:aa:6c:95:
         36:1d:0a:5e:e3:80:91:f7:1d:90:dd:63:6a:24:4c:b8:85:60:
         27:f4:a9:f4:2e:6b:4d:cb:7c:54:8a:38:49:7c:2e:e3:89:55:
         dc:0b:9e:48:de:5c:4a:23:f5:8e:9d:03:c6:60:ee:03:54:3c:
         30:88:6c:3c:5a:60:47:49:b1:48:fa:20:2b:fd:1d:37:42:ff:
         12:aa:41:97:cf:2b:fe:04:68:e8:fb:4c:f8:2f:99:67:cd:3d:
         27:59:cf:ef:c4:48:26:5c:d9:da:38:a0:b4:33:cc:6d:71:07:
         69:a1:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org