Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e31312e302f32342d3234203d3e20323731323633.roa
File:                     3137372e38352e31312e302f32342d3234203d3e20323731323633.roa (raw, json)
Hash identifier:          LiZ+sOk2ArzdGieyfG4RLxxnywY0J9HKifjKAzGf/WU=
Subject key identifier:   D5:35:96:05:A5:F7:3B:83:35:C6:53:A8:30:3F:17:E0:FE:53:ED:1E
Certificate issuer:       /CN=4C24013A290C9BCEE0A6D746C1F57EF15DA2F0A9
Certificate serial:       4FCE520BB9C3E46C532F99CFCFA50723B88B7330
Authority key identifier: 4C:24:01:3A:29:0C:9B:CE:E0:A6:D7:46:C1:F5:7E:F1:5D:A2:F0:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C24013A290C9BCEE0A6D746C1F57EF15DA2F0A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e31312e302f32342d3234203d3e20323731323633.roa
Signing time:             Wed 06 Apr 2022 18:27:29 +0000
ROA not before:           Wed 06 Apr 2022 18:22:29 +0000
ROA not after:            Wed 05 Apr 2023 18:27:29 +0000
asID:                     271263
IP address blocks:        177.85.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ce:52:0b:b9:c3:e4:6c:53:2f:99:cf:cf:a5:07:23:b8:8b:73:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C24013A290C9BCEE0A6D746C1F57EF15DA2F0A9
        Validity
            Not Before: Apr  6 18:22:29 2022 GMT
            Not After : Apr  5 18:27:29 2023 GMT
        Subject: CN=D5359605A5F73B8335C653A8303F17E0FE53ED1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:bc:b6:6c:bc:85:4f:15:53:35:23:ab:04:
                    10:5f:97:3d:26:01:d4:9e:9f:3b:14:c5:47:01:61:
                    47:72:0c:3c:3b:94:60:10:52:2c:b9:08:f9:cc:5c:
                    e5:b3:86:0a:4e:d6:24:52:88:d2:e8:54:04:ba:a0:
                    56:54:63:53:fd:35:87:bc:4f:a8:89:ea:b5:d3:f4:
                    4f:fa:6f:1e:a1:89:a5:8a:e8:35:d6:44:02:51:c9:
                    02:2c:56:6c:df:b4:69:2a:7a:ba:94:4d:73:0f:84:
                    08:61:ca:1b:da:05:39:59:bc:47:5f:f3:40:27:fd:
                    a4:5e:1b:fd:9e:0d:d1:6d:a9:38:60:c2:b9:f3:d7:
                    e7:18:a1:5b:0a:d5:46:1a:51:5b:12:d7:c3:00:c0:
                    dc:cc:f7:f2:c3:b3:f1:7a:59:47:e9:f6:e5:2a:cb:
                    46:8f:37:ce:77:d0:80:e2:c0:f3:e3:fa:bd:e5:5b:
                    f3:c0:b9:a3:f4:6d:50:d7:97:49:42:07:66:52:eb:
                    b9:20:6a:47:d1:44:c1:84:d7:9c:29:7c:d4:79:a8:
                    8b:80:30:e0:51:01:58:c0:2b:65:77:22:0d:98:39:
                    14:44:4a:3e:31:87:03:39:c5:d4:bd:02:a8:93:d8:
                    69:bc:01:8b:ec:6c:29:0c:4b:f0:fd:44:ea:76:38:
                    0e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:35:96:05:A5:F7:3B:83:35:C6:53:A8:30:3F:17:E0:FE:53:ED:1E
            X509v3 Authority Key Identifier:
                keyid:4C:24:01:3A:29:0C:9B:CE:E0:A6:D7:46:C1:F5:7E:F1:5D:A2:F0:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/4C24013A290C9BCEE0A6D746C1F57EF15DA2F0A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C24013A290C9BCEE0A6D746C1F57EF15DA2F0A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e31312e302f32342d3234203d3e20323731323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:51:46:b1:47:1a:4e:a9:2e:b0:29:26:e2:bd:e3:2a:2e:ed:
         27:76:3e:65:7a:ac:6e:37:da:72:5c:7f:68:fd:ca:92:6b:24:
         e0:f0:ae:14:cb:a1:9e:1c:51:4e:b3:d4:1a:e0:4d:5f:18:41:
         5d:74:2d:2f:f6:cd:9d:cb:bc:99:71:ca:ec:0b:23:7b:cc:24:
         d3:af:e0:ed:58:70:b6:c5:89:48:a8:cb:91:93:b8:90:f4:74:
         75:04:fe:d0:e9:2a:4e:f9:e9:55:39:83:b5:7d:da:9c:c1:50:
         35:13:ef:7e:8c:ab:28:a1:de:ef:07:7b:f1:bc:6b:7b:5b:1c:
         8d:f2:d4:02:69:66:3c:c8:0b:36:c5:94:e1:4a:27:ba:6c:1c:
         f8:e2:05:1b:16:79:cb:bf:cd:02:8c:03:17:06:14:43:66:91:
         0f:4e:62:96:8b:9f:01:1d:39:18:c2:19:55:0d:81:e9:02:19:
         8b:6f:67:29:68:d3:68:b9:b6:d0:ba:a9:9f:e3:52:c0:18:fe:
         be:35:50:c3:2c:3a:62:88:4d:13:4d:f6:94:27:c3:76:1e:5a:
         f8:94:0f:05:27:55:cc:0a:1e:c7:a4:24:7e:39:15:ab:84:e5:
         5d:ba:ac:d1:3c:17:f3:0f:21:c0:38:75:74:3b:c2:70:d2:da:
         99:19:35:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org