Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e35342e3232342e302f32342d3234203d3e20323639323338.roa
File:                     3137372e35342e3232342e302f32342d3234203d3e20323639323338.roa (raw, json)
Hash identifier:          nsB1qfAEINcPIG9zUo2xW1+u37q/OTeTreS1L5GS7pE=
Subject key identifier:   3A:57:12:75:43:D6:51:59:4D:E9:55:66:DC:56:A4:7C:FE:EC:B9:35
Certificate issuer:       /CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
Certificate serial:       0A7550D90438FD24F5622E0550CE12F3A7E59C9D
Authority key identifier: 2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e35342e3232342e302f32342d3234203d3e20323639323338.roa
Signing time:             Wed 07 Feb 2024 14:07:44 +0000
ROA not before:           Wed 07 Feb 2024 14:02:44 +0000
ROA not after:            Wed 05 Feb 2025 14:07:44 +0000
asID:                     269238
IP address blocks:        177.54.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:75:50:d9:04:38:fd:24:f5:62:2e:05:50:ce:12:f3:a7:e5:9c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
        Validity
            Not Before: Feb  7 14:02:44 2024 GMT
            Not After : Feb  5 14:07:44 2025 GMT
        Subject: CN=3A57127543D651594DE95566DC56A47CFEECB935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:d8:2f:be:92:ce:12:13:37:3d:4f:68:09:
                    b5:71:7e:80:c1:46:1e:cc:6e:72:77:4c:dd:a1:0b:
                    0a:b8:69:a6:4f:53:35:c8:66:82:77:25:e3:85:fa:
                    d4:b4:85:e6:17:f0:d0:f0:66:21:0e:1b:3c:39:fb:
                    5f:f8:30:f3:6b:27:7b:08:3c:16:eb:1c:cc:7a:23:
                    38:40:6b:be:4b:a8:b1:8a:02:94:b8:db:7e:21:e4:
                    3f:44:bd:e8:d5:bb:c8:e2:70:b0:9c:66:54:97:7f:
                    a3:cc:41:c8:a7:30:7c:e0:d6:a0:9f:41:d1:6f:86:
                    22:b2:66:8f:81:c3:9c:da:17:3e:08:f0:f0:aa:13:
                    12:85:bc:0b:7d:b7:be:71:2a:e2:00:ce:7a:29:c6:
                    37:2d:84:23:b5:92:4e:ed:5d:a4:60:59:44:92:7a:
                    e6:22:f7:4f:d2:1e:75:63:d9:32:02:e4:c0:4f:cb:
                    17:ac:25:eb:9f:f6:71:cb:ea:f0:2e:6b:d3:a2:4a:
                    b5:5f:f9:5e:b2:ca:9e:36:e7:c8:fd:85:37:51:e4:
                    fd:ca:0e:4e:c0:d7:6e:a5:4c:3e:96:08:aa:11:85:
                    77:19:f3:6a:49:e4:ef:ba:5e:4b:10:69:ef:c6:74:
                    27:f5:de:b1:56:6a:7a:74:61:63:bc:7d:3f:20:21:
                    06:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:57:12:75:43:D6:51:59:4D:E9:55:66:DC:56:A4:7C:FE:EC:B9:35
            X509v3 Authority Key Identifier:
                keyid:2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e35342e3232342e302f32342d3234203d3e20323639323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:90:ea:8d:bc:5b:83:6e:8d:a5:b7:63:14:01:e1:d8:9f:55:
         0f:49:53:09:01:62:50:0a:19:27:12:94:59:3b:8c:52:6d:5b:
         bb:c9:e9:9d:ab:54:97:b9:9d:a9:19:08:f6:63:e4:ea:49:b6:
         67:5a:38:bb:94:77:94:7d:dc:74:aa:2e:85:d0:fe:1c:a0:a6:
         01:ef:0e:e1:70:90:27:56:15:d8:b8:d7:76:7d:01:9d:5c:bf:
         a7:88:3e:d7:4f:be:a7:e4:67:bd:eb:e0:a2:80:5b:71:da:93:
         af:26:43:85:d0:97:d2:d8:66:d4:b4:07:55:17:62:48:f2:6c:
         9f:fc:7b:d9:f0:4e:90:90:34:84:ca:db:eb:6e:4f:d6:bf:93:
         ab:65:5a:c8:99:12:87:84:4a:37:09:57:f2:af:5f:ff:41:5f:
         97:cb:3c:e5:86:25:ab:57:c5:29:50:8a:8c:5a:cb:e0:ab:64:
         66:83:c0:83:81:f1:76:d0:3d:19:15:2a:a2:f8:75:9c:52:dd:
         d8:1b:15:f2:ef:e7:96:6e:19:8e:01:c5:ae:fe:69:9d:00:ab:
         97:7b:27:83:e6:56:18:db:e8:88:f9:80:09:81:e8:c4:c4:f8:
         12:c9:03:e0:e7:29:d5:ce:16:73:70:1e:98:c2:7d:15:a0:29:
         16:58:94:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org