Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32342d3234203d3e20323633363034.roa
File:                     3137372e37312e38382e302f32342d3234203d3e20323633363034.roa (raw, json)
Hash identifier:          bsyjXfipy/Fe3NUcG21tB7L9Q3bFqKRgkIxUXgZZTv4=
Subject key identifier:   29:00:C2:5B:32:AC:2A:C5:90:F5:1B:AB:41:A1:2F:10:38:D2:CD:C2
Certificate issuer:       /CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
Certificate serial:       20E9E7093EF7A5FC69A8DE663B68367508CCAD3A
Authority key identifier: 11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32342d3234203d3e20323633363034.roa
Signing time:             Thu 21 Sep 2023 13:36:55 +0000
ROA not before:           Thu 21 Sep 2023 13:31:55 +0000
ROA not after:            Thu 19 Sep 2024 13:36:55 +0000
asID:                     263604
IP address blocks:        177.71.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e9:e7:09:3e:f7:a5:fc:69:a8:de:66:3b:68:36:75:08:cc:ad:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
        Validity
            Not Before: Sep 21 13:31:55 2023 GMT
            Not After : Sep 19 13:36:55 2024 GMT
        Subject: CN=2900C25B32AC2AC590F51BAB41A12F1038D2CDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:54:54:13:f7:1f:ef:0c:b5:47:19:ab:a9:
                    40:ed:42:00:e8:11:c8:0e:2c:b8:5e:40:ca:3e:1d:
                    21:c7:40:42:fc:65:0b:cb:5d:c5:38:89:22:e6:80:
                    ab:aa:92:89:7c:af:3d:e5:be:c4:d4:b9:46:58:66:
                    7e:7c:f4:9c:c8:f5:82:b0:91:df:91:bb:2f:ed:b5:
                    5d:3e:47:1e:7b:0c:fa:1e:f7:4e:7f:4a:1b:c3:74:
                    f3:77:e9:be:bc:9f:3c:e2:69:a6:15:da:2e:05:00:
                    89:4a:18:14:f3:f0:6a:e5:d9:4b:48:3a:65:a6:f8:
                    7c:de:ea:d4:b9:a8:77:5e:b2:1d:19:d0:2e:cc:80:
                    61:df:1b:83:80:ee:14:96:d8:86:b3:32:74:d5:05:
                    e8:83:38:46:b9:c5:28:f7:0d:88:68:68:c1:ef:c0:
                    9a:a0:9a:56:18:4b:a2:92:23:66:99:5a:aa:27:5d:
                    7d:a1:65:24:68:cb:0e:1e:52:c7:d3:40:6a:47:74:
                    95:8e:e0:9a:92:8b:6a:5d:9b:7e:14:c8:37:9a:77:
                    02:a8:9c:38:bd:d5:85:3e:31:22:e4:18:92:49:8a:
                    b5:58:98:b4:74:de:60:b4:de:08:c1:ac:7c:8c:8d:
                    ee:42:52:83:54:f3:5b:9a:87:c8:97:ae:d2:6c:fd:
                    40:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:00:C2:5B:32:AC:2A:C5:90:F5:1B:AB:41:A1:2F:10:38:D2:CD:C2
            X509v3 Authority Key Identifier:
                keyid:11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32342d3234203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:5c:f9:45:69:c0:80:fe:4a:08:5d:27:56:1b:4c:c4:b8:67:
         c7:f7:e1:73:8e:0e:1f:84:67:bb:6e:ee:7b:a3:58:82:7a:c7:
         c0:c6:f2:19:ba:34:77:91:a7:cf:d9:ab:6c:2b:f3:51:fe:a9:
         81:37:fb:11:a6:b0:90:13:70:b4:e5:89:ae:10:02:60:06:a9:
         c8:e6:02:a6:1d:e4:f7:70:d0:d3:9b:5e:22:d0:0d:d5:49:b5:
         83:23:97:0e:57:13:f3:d8:06:fb:07:fd:e8:b9:39:b0:d1:25:
         8f:a5:54:8b:d0:20:d6:c7:23:c3:5c:c5:63:0e:67:37:92:3a:
         2f:61:8b:11:a7:15:74:f3:d3:51:1e:4a:7a:25:f3:0b:69:73:
         c9:40:0f:70:02:6d:72:e5:89:28:ca:35:84:d0:37:0a:9f:dc:
         cd:4d:87:f9:f6:ef:fe:58:bf:54:9d:6d:13:44:d5:e9:87:dc:
         69:ab:45:62:a0:91:00:03:9e:a3:9a:47:04:ae:4c:81:6f:6b:
         61:2a:7b:58:84:06:aa:dc:bf:55:ed:bf:ce:bd:64:23:34:22:
         1d:8a:84:47:79:7c:0b:bc:f4:ac:56:c2:03:62:8c:d5:0c:bc:
         78:07:b2:3e:d9:5a:c7:f0:64:61:b4:a2:42:db:0e:c0:23:f4:
         c1:74:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org