Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa
File:                     3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa (raw, json)
Hash identifier:          ZTNnnqiCeZuc3ZpH4yGehotFLWh3/L0DTrOyHy4cAxg=
Subject key identifier:   FE:40:EA:3B:3B:F4:5D:B2:EF:71:38:66:AC:AD:AA:57:FD:2A:C3:89
Certificate issuer:       /CN=68CE662D15AAF5135C77B867D79586761F235231
Certificate serial:       379730B4BC3DED8ADF064DABA12CC1424EFACB35
Authority key identifier: 68:CE:66:2D:15:AA:F5:13:5C:77:B8:67:D7:95:86:76:1F:23:52:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68CE662D15AAF5135C77B867D79586761F235231.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa
Signing time:             Wed 07 Feb 2024 21:00:00 +0000
ROA not before:           Wed 07 Feb 2024 20:55:00 +0000
ROA not after:            Wed 05 Feb 2025 21:00:00 +0000
asID:                     263135
IP address blocks:        177.190.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:97:30:b4:bc:3d:ed:8a:df:06:4d:ab:a1:2c:c1:42:4e:fa:cb:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68CE662D15AAF5135C77B867D79586761F235231
        Validity
            Not Before: Feb  7 20:55:00 2024 GMT
            Not After : Feb  5 21:00:00 2025 GMT
        Subject: CN=FE40EA3B3BF45DB2EF713866ACADAA57FD2AC389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:4b:b9:38:33:4f:36:68:8f:7e:12:26:bf:47:
                    a8:42:9f:8b:50:cc:de:29:60:b7:eb:53:d5:25:3d:
                    a2:e7:4d:e4:de:7f:a5:87:25:33:5d:5c:84:e8:d5:
                    d8:d7:f9:98:cb:d3:e6:fe:51:d2:29:2a:1c:d2:3a:
                    1b:55:91:d1:23:d5:ac:0a:e1:48:c4:46:b2:75:14:
                    44:e2:9f:7c:53:17:a9:f2:5e:94:ab:ce:af:1f:32:
                    8c:7b:86:1c:c1:01:dc:8f:41:df:bf:c0:90:60:7d:
                    17:ea:da:5c:4b:cb:79:db:28:92:24:82:c9:61:83:
                    75:45:9d:f3:5b:f0:3e:e2:9f:5a:ea:da:a4:60:94:
                    db:e2:96:8d:a8:62:ad:62:aa:39:c1:c1:d0:be:b4:
                    10:94:d7:d6:9f:b3:c3:8f:b4:98:bf:7a:69:0a:45:
                    01:90:20:9b:48:3b:f5:47:70:3a:41:61:a5:7e:1f:
                    df:a2:8e:3b:e9:7c:82:12:72:c0:f7:09:f0:69:b1:
                    df:c2:8e:16:09:fd:f7:47:51:34:46:f1:7c:b5:a5:
                    a5:53:62:9b:c7:ab:1f:c1:2b:da:1d:50:16:ab:6c:
                    10:8f:02:15:4c:84:65:9c:29:27:85:29:2f:a0:70:
                    ce:25:49:ac:21:bc:fa:7d:86:60:07:fe:04:8c:dc:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:40:EA:3B:3B:F4:5D:B2:EF:71:38:66:AC:AD:AA:57:FD:2A:C3:89
            X509v3 Authority Key Identifier:
                keyid:68:CE:66:2D:15:AA:F5:13:5C:77:B8:67:D7:95:86:76:1F:23:52:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/68CE662D15AAF5135C77B867D79586761F235231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68CE662D15AAF5135C77B867D79586761F235231.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:8e:c9:9e:7d:17:60:82:9f:ab:2c:01:e6:89:4c:44:f2:67:
         cd:89:24:63:bb:aa:d9:d5:37:4c:42:38:7d:2a:c7:07:74:ff:
         17:d7:16:52:3f:a3:6a:99:5e:fd:aa:35:9b:2a:91:3c:c4:63:
         e3:e5:a2:03:bb:b0:da:21:e1:fd:38:a7:30:ea:e5:ff:39:0d:
         15:fb:8f:53:46:18:0b:94:11:f7:03:11:ac:d0:a6:3b:0d:b8:
         44:9a:84:32:88:7e:11:f3:65:45:54:8d:97:1d:9e:e2:86:df:
         45:a0:14:e5:46:c9:c4:27:43:1a:a2:f2:83:54:11:2b:d8:ad:
         99:3d:33:f9:ea:9b:3f:60:40:a4:83:1a:2c:ef:54:c4:71:6f:
         a1:b6:8e:c5:06:d6:53:c3:18:82:f5:15:c8:a9:c2:08:fe:1b:
         e1:4e:25:f8:7f:a1:cc:80:6a:75:13:33:3b:de:8e:c1:1b:61:
         7b:6b:7c:22:7c:a5:5d:d3:86:c9:83:d3:03:4f:e5:3b:31:55:
         c7:6d:a5:a7:ef:0f:2a:6a:48:2a:b6:43:75:3c:a7:1d:f8:bc:
         d2:dc:e9:18:75:24:67:27:74:0b:ac:f1:ac:49:05:4a:0e:71:
         9e:83:dd:7f:2b:31:a3:6b:2f:56:84:40:6b:a4:b4:81:8f:e0:
         6c:43:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org