Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3133372e3235322e302f32322d3234203d3e20323637333031.roa
File:                     3137372e3133372e3235322e302f32322d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          NkpjYYu1EnMMGV1mVe5Q1tYzhTp7K1Dg1CelJf5E7kY=
Subject key identifier:   66:31:E8:41:50:BF:D7:75:69:13:2C:B5:0B:6C:76:0E:11:0E:D6:12
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       5AF4D1697D9400B3A4E8245B309C8B8FDD696465
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3133372e3235322e302f32322d3234203d3e20323637333031.roa
Signing time:             Mon 22 May 2023 16:58:23 +0000
ROA not before:           Mon 22 May 2023 16:53:23 +0000
ROA not after:            Mon 20 May 2024 16:58:23 +0000
asID:                     267301
IP address blocks:        177.137.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f4:d1:69:7d:94:00:b3:a4:e8:24:5b:30:9c:8b:8f:dd:69:64:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 22 16:53:23 2023 GMT
            Not After : May 20 16:58:23 2024 GMT
        Subject: CN=6631E84150BFD77569132CB50B6C760E110ED612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:37:8b:50:0e:69:00:71:90:73:26:ba:62:
                    df:3b:ca:c3:d8:24:6b:e3:04:65:dc:01:24:68:8f:
                    f1:70:01:a5:43:82:8b:39:d2:b7:f7:0b:8f:59:2f:
                    af:55:ac:6e:d2:20:a8:67:29:24:27:b4:f5:b2:44:
                    d8:c6:33:b9:6b:1a:02:b1:0c:37:db:b1:19:33:db:
                    fe:fb:4d:c0:c1:d6:28:08:28:f4:27:07:d6:04:1f:
                    05:a5:1d:de:b4:c6:33:a6:c8:13:9b:3c:2c:10:5e:
                    bc:f9:7f:7c:eb:b3:02:30:cc:d8:13:93:c5:46:6d:
                    7e:60:2d:17:33:d8:fa:07:3d:f8:d7:cb:40:b1:4b:
                    9f:1a:32:98:d5:43:a8:7f:53:b5:a8:20:12:f9:25:
                    23:46:34:62:bd:c8:e6:0d:85:03:16:ad:72:e6:18:
                    d5:bf:05:75:4b:0b:2f:03:4d:d1:ff:8e:aa:75:63:
                    b5:b0:ca:9e:29:72:28:d0:b2:db:ac:61:c2:7e:e6:
                    1e:d1:28:26:2b:58:06:94:92:69:0e:12:d6:df:8c:
                    9c:bf:cc:e0:a7:a9:fc:31:42:fe:74:a8:4b:90:ed:
                    14:13:c8:4e:26:f6:be:ad:4c:87:f3:cf:95:80:48:
                    5b:4f:5a:2b:da:30:b7:19:99:04:68:6d:d1:b7:be:
                    f0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:31:E8:41:50:BF:D7:75:69:13:2C:B5:0B:6C:76:0E:11:0E:D6:12
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3133372e3235322e302f32322d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:46:5d:9d:bd:cb:46:07:ca:69:05:06:25:c3:45:b1:64:36:
         44:37:fc:47:46:f5:e1:54:21:62:46:2b:db:cb:56:1b:23:6e:
         97:ad:4c:cc:33:95:86:9e:5b:59:67:07:ca:4f:46:19:97:33:
         06:4e:b2:67:c1:3d:85:f3:3d:0a:30:f6:a4:cc:b2:da:e0:ad:
         bf:f9:db:21:41:89:b8:a8:69:6e:b8:d1:72:bf:c5:33:74:a2:
         eb:ec:ed:09:2e:d2:7a:b7:ad:bf:38:67:cc:3c:47:75:37:4c:
         60:70:3e:a1:03:60:2f:40:8e:b7:8b:53:55:b7:88:4c:25:4a:
         73:e3:d6:e1:5e:07:34:bf:fa:de:83:d8:8a:05:c1:44:d8:78:
         57:18:d7:30:18:a7:fc:56:d9:70:b1:51:47:a3:3e:fa:ec:6e:
         10:71:67:69:ed:6c:7c:7c:89:b7:6b:86:24:29:86:dc:8d:d3:
         76:74:9a:55:3b:42:8e:4a:b9:a5:1c:dc:79:59:b5:d6:6c:c1:
         73:b3:51:88:bb:51:39:b0:a3:53:b3:d1:24:a5:a0:cf:83:4a:
         5b:0d:a9:b8:71:a6:d0:06:19:54:bd:be:2c:d6:c4:78:92:96:
         7c:de:6b:7b:d0:5c:e0:f7:c4:4b:10:1e:a8:40:e3:81:e1:e2:
         a9:5e:55:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org