Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32302d3234203d3e20323632393031.roa
File:                     3137372e32322e3139322e302f32302d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          dilX79yUrQUhn5ImCu1Ekol5CVOfxegdXleR8TVu7To=
Subject key identifier:   73:B4:50:D8:92:DD:8E:BD:9E:9B:78:EE:DE:3B:DD:EC:7D:43:FD:76
Certificate issuer:       /CN=06881049B94787E5C7A09A8083CA7953DD26CC5E
Certificate serial:       720AE0DE0F4FF3981C4C5FCBA575AA5685C6ABF5
Authority key identifier: 06:88:10:49:B9:47:87:E5:C7:A0:9A:80:83:CA:79:53:DD:26:CC:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06881049B94787E5C7A09A8083CA7953DD26CC5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32302d3234203d3e20323632393031.roa
Signing time:             Thu 22 Feb 2024 16:12:38 +0000
ROA not before:           Thu 22 Feb 2024 16:07:38 +0000
ROA not after:            Thu 20 Feb 2025 16:12:38 +0000
asID:                     262901
IP address blocks:        177.22.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0a:e0:de:0f:4f:f3:98:1c:4c:5f:cb:a5:75:aa:56:85:c6:ab:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06881049B94787E5C7A09A8083CA7953DD26CC5E
        Validity
            Not Before: Feb 22 16:07:38 2024 GMT
            Not After : Feb 20 16:12:38 2025 GMT
        Subject: CN=73B450D892DD8EBD9E9B78EEDE3BDDEC7D43FD76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:89:a0:f2:42:30:29:52:ae:15:be:4e:f9:
                    87:ec:08:81:56:14:f6:d5:99:b9:d7:0c:6e:ab:2b:
                    81:20:1e:1e:a9:fa:5c:3c:0b:c5:88:76:8b:5f:5f:
                    20:d9:86:cc:2b:6e:87:3f:53:53:ae:54:af:39:7a:
                    ea:22:b7:8a:d1:71:4b:da:e4:aa:8d:3f:07:4b:9b:
                    ab:e5:37:60:47:50:06:05:fb:72:6a:e4:ff:92:3d:
                    4f:e1:49:e0:94:c5:e7:2c:a7:21:5d:6d:be:d7:ad:
                    ca:53:79:bb:dd:5d:a4:13:bb:3c:c3:2d:39:6c:4a:
                    ba:76:2d:96:88:8c:26:c6:85:8b:19:82:7e:d9:8d:
                    c4:99:80:f1:d0:67:f2:83:96:5b:6d:c7:8b:35:33:
                    20:05:d4:5e:ee:40:1c:4a:44:4f:de:17:d1:36:75:
                    aa:86:ac:05:bd:2f:45:d1:54:3f:cc:8a:6f:83:0c:
                    4a:4b:28:cb:ad:9d:42:82:0a:bb:e2:16:8f:7a:2d:
                    fe:f1:4c:0a:6e:00:1b:77:e4:84:c7:84:28:fb:5b:
                    ec:5c:ec:38:5c:1c:bc:d0:e6:3d:7f:45:50:db:01:
                    c5:1a:17:32:6a:7d:db:98:9f:cd:ed:6e:7f:b8:28:
                    58:5c:1c:55:30:bc:fe:09:1d:83:3a:83:e1:fb:2f:
                    4a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B4:50:D8:92:DD:8E:BD:9E:9B:78:EE:DE:3B:DD:EC:7D:43:FD:76
            X509v3 Authority Key Identifier:
                keyid:06:88:10:49:B9:47:87:E5:C7:A0:9A:80:83:CA:79:53:DD:26:CC:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/06881049B94787E5C7A09A8083CA7953DD26CC5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06881049B94787E5C7A09A8083CA7953DD26CC5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32302d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:1c:d2:16:1c:84:31:18:fa:54:17:07:2c:c8:4f:41:22:89:
         04:ac:64:ce:a9:0f:19:d4:09:6b:b6:6d:63:63:ee:c3:37:63:
         b0:25:27:23:41:3e:e4:29:78:61:0b:4e:d4:7e:5c:71:dd:f8:
         d6:6a:6f:b8:10:ea:69:19:86:ac:05:c3:d3:f0:e6:c1:23:19:
         d7:a8:ee:4c:f5:a6:33:ac:bc:bd:66:28:40:cf:a9:0e:d9:bb:
         a9:f1:31:69:fb:81:d5:37:d9:04:6e:ae:c9:7a:c3:f7:b0:c5:
         b8:bf:fe:19:a5:da:17:93:6b:50:df:86:6d:c8:03:33:2e:15:
         d4:f5:75:59:17:97:af:a4:1a:f8:2f:cc:63:ed:69:34:b6:32:
         0d:6f:f1:d7:ab:8e:02:7b:aa:e1:53:22:68:fe:56:2f:2f:f6:
         8c:82:2e:ad:a7:77:a2:4f:54:08:ee:2b:63:80:45:75:67:60:
         a1:c4:02:5b:67:33:95:49:df:e3:27:3e:db:bd:2f:b0:5c:fa:
         ee:36:76:7a:31:81:39:49:dc:73:ac:a3:66:cb:04:f5:f0:0d:
         7e:ca:91:12:62:46:fe:4c:08:48:f6:d8:e7:8b:5d:d8:4c:9a:
         eb:a3:96:4e:1e:d9:40:56:d4:bc:68:cf:b8:cd:f9:40:20:e2:
         31:16:d3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org