Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234312e302f32342d3234203d3e20323632383636.roa
File:                     3137372e31322e3234312e302f32342d3234203d3e20323632383636.roa (raw, json)
Hash identifier:          v/xaudvLjMPMjOhfavkAuax+o51Zmf3zniX8FEAy+I8=
Subject key identifier:   88:EC:62:2E:C1:4E:FD:95:B8:B9:BC:CE:8E:B4:60:9F:AB:B3:52:FD
Certificate issuer:       /CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
Certificate serial:       4DBDD07C64EBABA9B21558AB4ECB021A761B3C3E
Authority key identifier: E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234312e302f32342d3234203d3e20323632383636.roa
Signing time:             Fri 12 Jan 2024 18:11:18 +0000
ROA not before:           Fri 12 Jan 2024 18:06:18 +0000
ROA not after:            Fri 10 Jan 2025 18:11:18 +0000
asID:                     262866
IP address blocks:        177.12.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bd:d0:7c:64:eb:ab:a9:b2:15:58:ab:4e:cb:02:1a:76:1b:3c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1420DF098810B8B6F41BD0334D08AD27E0BDC1C
        Validity
            Not Before: Jan 12 18:06:18 2024 GMT
            Not After : Jan 10 18:11:18 2025 GMT
        Subject: CN=88EC622EC14EFD95B8B9BCCE8EB4609FABB352FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:5a:ce:34:5e:3e:61:4c:b3:4d:a3:7d:f9:
                    9d:c2:79:56:45:bb:d0:72:47:e0:47:3b:7c:bd:df:
                    53:c9:cd:c2:78:78:9b:c2:77:2e:ab:f0:71:18:85:
                    0d:85:59:83:c3:a8:b7:ce:aa:64:59:7b:0b:88:f2:
                    e7:0a:b1:ee:00:bd:08:49:f4:66:d9:09:55:81:41:
                    eb:83:03:40:13:54:b7:82:28:6b:6c:8b:fa:c0:53:
                    a1:84:46:fb:e0:5a:e8:3a:b6:a4:24:6a:18:26:9f:
                    d7:51:36:2c:d4:ee:c1:be:ef:be:91:ed:61:18:44:
                    d4:e8:9a:bb:74:2b:17:9e:8e:09:59:cf:60:ea:ac:
                    92:d1:d2:49:10:6f:2c:f0:18:20:40:bc:b0:38:4c:
                    b1:f9:66:3c:d4:8e:33:ff:8e:56:37:e2:37:5d:1f:
                    d5:91:c3:bd:1c:1c:0a:4b:04:63:6a:17:96:13:97:
                    86:57:18:25:b8:26:5b:31:0b:3c:b5:ff:0b:ec:0a:
                    b8:20:8d:62:2a:9c:8a:03:ba:d3:f9:67:b6:0c:ae:
                    2d:0e:e2:11:0e:4e:1b:b1:65:24:d8:34:05:bf:80:
                    8e:69:f9:fb:76:d2:3c:9a:b7:86:d4:aa:17:cb:e8:
                    92:a7:12:31:39:0c:90:8c:ff:e0:54:65:79:e9:bf:
                    ac:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EC:62:2E:C1:4E:FD:95:B8:B9:BC:CE:8E:B4:60:9F:AB:B3:52:FD
            X509v3 Authority Key Identifier:
                keyid:E1:42:0D:F0:98:81:0B:8B:6F:41:BD:03:34:D0:8A:D2:7E:0B:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1420DF098810B8B6F41BD0334D08AD27E0BDC1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/3137372e31322e3234312e302f32342d3234203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:28:56:2a:fa:bb:d2:68:b4:2c:73:2b:9b:a9:4b:5b:3f:9a:
         36:41:33:15:ed:d9:3e:09:90:d1:6d:dd:6f:6d:89:87:3a:6d:
         a0:ba:d3:91:11:87:78:8b:14:48:fc:9e:0c:ea:85:57:04:6d:
         7e:ae:fd:b3:d3:a1:ef:64:49:ee:30:3d:a9:4b:12:81:74:24:
         67:68:be:40:bc:f8:fe:50:1e:b3:9e:5c:96:b2:c6:da:e5:b8:
         3b:47:4e:35:b1:85:72:90:31:43:23:62:57:9f:11:33:47:f2:
         90:09:fd:93:ce:c2:79:52:d8:70:1b:d5:27:1d:ed:62:cc:57:
         97:6c:07:81:d7:da:b0:b7:69:da:82:db:7e:02:19:01:04:e4:
         6b:ef:ee:af:d4:97:98:dc:ed:fa:70:10:fa:dd:d8:80:7d:1b:
         ee:3c:5d:82:96:7e:3f:d6:f7:e1:bd:4b:cd:58:c3:43:a7:5e:
         05:b3:ad:01:a2:f4:b8:94:33:f8:2d:91:e8:0d:43:ee:cc:d9:
         49:28:4c:10:dc:da:5d:40:a7:12:14:e2:70:9e:75:c7:d6:7d:
         34:2e:d7:ba:5d:40:f2:10:f6:5f:31:ed:93:ee:e8:a6:0b:ac:
         49:1b:a6:ec:70:3c:02:65:69:2f:a1:ed:43:1b:88:fd:a5:ce:
         77:6f:ea:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org