Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34352e302f32342d3234203d3e20323633303338.roa
File:                     3137372e32332e34352e302f32342d3234203d3e20323633303338.roa (raw, json)
Hash identifier:          qfRYfylNB5FBGw+yUfYtmxR+UHOr1cD4gvp1+l/Tujk=
Subject key identifier:   4F:20:F9:0C:94:ED:CA:FB:7B:0D:BD:EB:BD:F4:BD:11:D4:BA:F1:0A
Certificate issuer:       /CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
Certificate serial:       51CE950BDCBE77AA464C2D5B45374F6C138CC5D1
Authority key identifier: D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34352e302f32342d3234203d3e20323633303338.roa
Signing time:             Mon 26 Feb 2024 13:57:56 +0000
ROA not before:           Mon 26 Feb 2024 13:52:56 +0000
ROA not after:            Mon 24 Feb 2025 13:57:56 +0000
asID:                     263038
IP address blocks:        177.23.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ce:95:0b:dc:be:77:aa:46:4c:2d:5b:45:37:4f:6c:13:8c:c5:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
        Validity
            Not Before: Feb 26 13:52:56 2024 GMT
            Not After : Feb 24 13:57:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:32:f6:92:9e:ef:0d:5b:26:39:e4:c6:1d:
                    42:eb:e8:5f:5a:4b:3a:2b:04:06:bb:01:56:8e:60:
                    35:f8:d2:9f:5d:ec:5d:97:8f:08:0b:a4:10:5e:d6:
                    20:d4:c0:b7:54:c0:3f:69:91:2a:e2:e1:9c:0c:9f:
                    8a:ca:f2:bd:a8:cb:6b:b5:c4:ef:27:ed:34:5e:6d:
                    14:d5:39:c1:d4:47:48:e2:61:8e:67:6d:e7:bf:50:
                    3f:69:55:e7:ac:e2:82:c5:d5:df:b2:04:cf:ec:00:
                    a3:28:28:e4:9f:ca:dd:67:17:90:14:8c:58:dd:6e:
                    7c:79:63:be:16:a9:18:18:fd:f6:40:89:d6:23:8a:
                    dc:b5:61:c8:44:b7:da:dd:a3:f0:53:8a:ed:cf:a5:
                    20:b6:a7:b6:5c:09:74:a5:ab:74:8d:ca:82:d5:17:
                    09:66:90:bb:d8:fe:10:08:7f:eb:1d:bf:ec:ae:64:
                    41:de:f7:fd:12:24:5f:6e:18:32:eb:42:4d:39:54:
                    e7:e2:2e:c6:94:33:ac:cd:96:a5:83:26:7e:e5:eb:
                    82:f0:75:68:6d:aa:7c:2f:ce:c4:b9:3f:a2:92:fa:
                    f0:f0:ac:ab:6c:b8:54:72:4e:2f:3a:49:05:f6:01:
                    c2:76:29:75:8b:9b:c0:17:47:d1:f3:9c:e8:89:69:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:20:F9:0C:94:ED:CA:FB:7B:0D:BD:EB:BD:F4:BD:11:D4:BA:F1:0A
            X509v3 Authority Key Identifier:
                keyid:D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34352e302f32342d3234203d3e20323633303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:a8:8c:99:28:71:c3:a2:82:b2:c1:a6:bc:5f:64:2f:7a:44:
         ea:59:60:61:97:8a:c6:0f:62:39:46:83:c8:c4:f3:ca:c3:29:
         de:70:c5:dc:ad:fa:70:e5:15:d1:60:3b:fe:0d:b8:dc:a7:84:
         8f:38:e6:5c:34:a8:2b:3a:34:eb:39:4a:57:ef:08:72:84:93:
         70:bf:13:d8:f1:94:9e:53:1b:82:d0:6e:b4:8e:b9:aa:da:d2:
         d5:5e:9a:96:f8:5d:e8:12:28:f2:e5:de:f6:6a:35:c4:d9:ee:
         c2:9e:79:91:5a:26:a7:6c:aa:35:83:89:63:8b:53:ba:52:6c:
         8d:0b:2e:16:dc:f3:1c:a2:20:04:e4:bb:8b:4c:1b:62:16:f0:
         20:f8:74:d3:d3:30:91:3b:5b:e8:41:be:75:f6:0c:4d:bf:44:
         68:56:41:fa:4d:1a:be:1e:e0:e6:bc:17:b7:8b:45:6b:f8:b6:
         ac:07:14:69:07:d1:71:2d:6d:14:31:17:bd:1e:9d:c0:46:ad:
         57:57:00:bb:02:65:f0:bc:4e:d0:13:f9:a7:f8:ee:7a:df:5b:
         31:0b:8b:15:9a:60:c6:e1:29:d6:51:03:61:8e:b8:d8:9a:26:
         32:1f:42:2f:de:7c:c9:ad:6d:9e:aa:a3:bf:cf:4c:ca:7f:a0:
         3a:be:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org