Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34322e302f32342d3234203d3e20323633303338.roa
File:                     3137372e32332e34322e302f32342d3234203d3e20323633303338.roa (raw, json)
Hash identifier:          jF408B5OWnqSgWwnVdEWm8nUj42/ryegaIcqlT+Pbc0=
Subject key identifier:   E5:97:D6:F4:11:A2:3A:17:77:1E:9B:5B:C7:AB:12:F7:65:31:B8:B9
Certificate issuer:       /CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
Certificate serial:       740F87C264C00B36715406C04EFF7C0AF0E6C985
Authority key identifier: D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34322e302f32342d3234203d3e20323633303338.roa
Signing time:             Mon 26 Feb 2024 13:57:55 +0000
ROA not before:           Mon 26 Feb 2024 13:52:55 +0000
ROA not after:            Mon 24 Feb 2025 13:57:55 +0000
asID:                     263038
IP address blocks:        177.23.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0f:87:c2:64:c0:0b:36:71:54:06:c0:4e:ff:7c:0a:f0:e6:c9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
        Validity
            Not Before: Feb 26 13:52:55 2024 GMT
            Not After : Feb 24 13:57:55 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:31:81:ab:6c:fe:3a:60:07:0a:4f:16:0b:
                    0d:b9:d1:1d:dd:d2:c9:41:38:a0:d7:6f:87:f3:03:
                    ae:ff:d9:2f:6a:8d:01:43:c0:47:ab:cb:cc:5e:33:
                    d9:c4:82:d2:4a:94:96:31:39:ce:b9:e1:0d:a0:a5:
                    18:18:6e:67:8e:e0:b4:d4:b7:99:e6:97:7a:b0:48:
                    1c:f1:08:7f:37:35:a1:c9:61:da:79:72:ef:7b:61:
                    f7:bb:db:83:79:08:31:60:60:0a:76:9c:9d:ea:24:
                    eb:65:51:74:63:67:ce:13:9f:91:14:98:10:e2:5d:
                    70:92:3a:9f:13:f7:af:33:0d:a3:8a:7d:07:8c:a6:
                    49:e2:53:7c:51:fa:f8:67:25:10:f4:11:60:08:54:
                    b5:f6:06:fc:26:af:d4:7f:0d:1b:32:7c:ce:90:eb:
                    55:ed:9c:50:9d:72:8d:19:6f:66:c1:7d:39:f0:9b:
                    21:6e:70:dd:79:bd:7a:c7:6a:e9:9c:4f:c1:44:39:
                    de:0e:f6:b8:18:78:f1:d9:14:27:e8:20:e9:9a:cd:
                    f5:ab:b5:22:bf:9d:6f:0e:76:0e:3c:f8:3e:d3:99:
                    c9:67:96:11:38:fb:fd:91:89:b2:78:8e:37:12:b1:
                    e9:02:0d:7e:1c:7d:c5:86:79:a2:d4:03:d6:15:82:
                    0b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:97:D6:F4:11:A2:3A:17:77:1E:9B:5B:C7:AB:12:F7:65:31:B8:B9
            X509v3 Authority Key Identifier:
                keyid:D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34322e302f32342d3234203d3e20323633303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:58:b4:a7:2a:b7:4e:42:7b:03:01:69:d4:97:3c:44:47:25:
         29:d4:16:19:f4:b6:36:e8:92:72:19:9f:bc:c3:c9:64:cd:0c:
         34:bf:cf:a2:c6:e7:d4:90:3e:db:92:fd:d9:0c:75:78:85:85:
         e5:05:1e:83:08:f1:fd:1f:57:ed:b8:f3:81:0c:62:78:38:98:
         4a:71:b6:8f:bd:29:2e:1e:7f:70:6f:fe:15:8d:a8:e3:00:91:
         34:44:31:03:76:44:ac:bc:5c:fe:65:2b:71:42:4b:d6:4e:91:
         63:ff:2b:4c:36:a8:9b:5e:be:b5:4c:3e:0d:46:05:06:64:4a:
         4c:26:b3:23:fa:53:27:60:32:87:89:b5:8d:b6:17:04:1f:93:
         59:26:54:5d:f4:61:4f:6f:02:7b:e7:23:fd:89:eb:79:73:5b:
         30:a1:aa:5f:d5:79:8c:cc:6c:63:f0:31:2a:68:b4:69:7c:89:
         5f:15:4e:fb:a8:49:2f:b2:16:0a:a3:f3:d8:3d:88:3e:c4:bb:
         c1:d1:7a:ba:a5:f6:72:34:dc:bc:85:c6:1f:b0:4b:a0:fe:af:
         c1:e9:f2:d1:29:e3:9a:03:e6:c3:b7:16:7f:fa:cc:a9:f9:98:
         ae:9d:37:fb:b3:87:30:42:cb:70:a9:5c:66:59:bb:89:85:ef:
         a8:57:bc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org