Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3139322e302f32312d3234203d3e20323632373230.roa
File:                     3137372e382e3139322e302f32312d3234203d3e20323632373230.roa (raw, json)
Hash identifier:          NKzhtO4RxVUPej5PRe+U/bD0MCRpdcm6h4VjcYbs8HY=
Subject key identifier:   4F:C5:55:71:DB:E1:E4:18:55:E2:94:D6:8E:2A:BD:5A:11:5A:06:51
Certificate issuer:       /CN=A1C39F0D906B4AD35DDAD082757E6F55FD546352
Certificate serial:       1BA26C1C10CBA8AB54DD2E06CD102CAD727887F2
Authority key identifier: A1:C3:9F:0D:90:6B:4A:D3:5D:DA:D0:82:75:7E:6F:55:FD:54:63:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1C39F0D906B4AD35DDAD082757E6F55FD546352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3139322e302f32312d3234203d3e20323632373230.roa
Signing time:             Thu 04 Nov 2021 20:12:22 +0000
ROA not before:           Thu 04 Nov 2021 20:07:22 +0000
ROA not after:            Thu 03 Nov 2022 20:12:22 +0000
asID:                     262720
IP address blocks:        177.8.192.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a2:6c:1c:10:cb:a8:ab:54:dd:2e:06:cd:10:2c:ad:72:78:87:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C39F0D906B4AD35DDAD082757E6F55FD546352
        Validity
            Not Before: Nov  4 20:07:22 2021 GMT
            Not After : Nov  3 20:12:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:04:97:22:82:56:d1:05:1f:cb:ba:bd:e9:24:
                    9d:5f:43:1d:ad:48:ef:a0:95:79:b6:b7:d8:5d:f2:
                    89:0e:d1:ff:bf:7e:78:af:75:e6:22:b1:ab:55:8b:
                    12:04:0d:52:c6:50:68:6e:ff:b5:e6:18:63:61:50:
                    95:3e:5e:bc:10:8b:77:5d:68:39:1d:ef:99:40:d6:
                    88:97:c3:bc:38:4d:bd:27:1b:87:45:82:d5:df:b7:
                    30:ee:56:d5:62:a3:cb:3c:90:57:5c:ee:86:56:0b:
                    c7:11:03:c3:ee:ce:4d:98:fa:2c:ce:8b:e4:e5:83:
                    b1:41:50:89:a6:b9:89:d7:d6:16:74:1a:63:1d:53:
                    42:4d:6d:1c:ad:7e:37:9a:15:6b:64:d0:91:af:2f:
                    f4:b6:a1:52:ca:ae:a6:66:e1:d0:18:90:4e:6a:5c:
                    67:5c:f4:e3:d1:03:33:f0:5e:af:8e:e0:89:4f:81:
                    47:4e:cf:9b:24:19:a1:53:4c:86:6e:61:05:d2:52:
                    aa:b1:9d:ef:85:46:8e:19:e3:e4:a8:a2:db:6d:cc:
                    07:ee:f6:34:dc:4b:c7:32:fa:60:49:d7:bd:b9:e7:
                    9a:4c:f2:98:4d:a3:e0:85:9d:b9:89:b3:48:da:74:
                    fb:9c:d0:1e:17:52:ba:f9:09:89:84:61:6f:e7:5f:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C5:55:71:DB:E1:E4:18:55:E2:94:D6:8E:2A:BD:5A:11:5A:06:51
            X509v3 Authority Key Identifier:
                keyid:A1:C3:9F:0D:90:6B:4A:D3:5D:DA:D0:82:75:7E:6F:55:FD:54:63:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/A1C39F0D906B4AD35DDAD082757E6F55FD546352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1C39F0D906B4AD35DDAD082757E6F55FD546352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3139322e302f32312d3234203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b7:75:86:ce:35:88:66:93:58:5b:c6:67:21:3a:1d:fd:a6:79:
         7b:2c:e1:91:90:87:f8:2f:f6:ad:ef:cf:2e:7d:e2:dc:d2:7b:
         00:22:5c:41:f1:19:91:5e:fb:48:10:25:24:b3:66:a7:9a:13:
         f4:ce:9a:cf:3f:b5:d7:2d:01:08:a5:e2:73:e5:32:db:9f:e7:
         b4:de:06:36:bc:bf:45:96:12:59:d0:4d:e5:4d:5f:a9:ef:02:
         ec:19:4e:cc:f4:69:eb:72:61:aa:fd:af:76:45:d5:f5:89:4c:
         e6:13:3b:eb:fb:b8:01:91:77:cf:d0:20:8e:4f:99:e7:5a:7d:
         38:0f:90:01:35:ba:22:47:8a:31:f0:4d:2d:86:cb:34:85:2f:
         7d:74:f9:ce:3f:d4:66:96:93:bc:cf:3a:2b:0b:60:07:62:3d:
         bf:a5:69:df:6e:c7:8c:ab:33:32:d2:4c:49:21:8c:a4:42:63:
         e9:d7:05:be:02:56:5c:ca:cd:ad:20:20:3b:38:8c:d2:0d:08:
         c2:a9:41:b2:e2:41:84:b2:b0:a0:23:06:19:8b:3c:eb:0d:bd:
         e9:29:30:8e:37:1a:0c:4c:1d:7f:b2:56:64:ea:0a:fa:bf:56:
         78:f4:be:9d:03:9f:17:b6:58:40:6b:2f:b5:ad:cc:6e:33:80:
         df:d1:f3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org