Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e39302e302f32342d3234203d3e20323633363034.roa
File:                     3137372e37312e39302e302f32342d3234203d3e20323633363034.roa (raw, json)
Hash identifier:          ISmOyEl91p4q2OA9ksR9X4dKXSLnmkT/xnxoAp2eSxw=
Subject key identifier:   35:D4:8B:95:C7:D6:9F:4F:6E:EC:40:50:27:68:0F:D9:83:A0:F2:B5
Certificate issuer:       /CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
Certificate serial:       3BE5810165F193D37C2D7A402992D49F606536A8
Authority key identifier: 49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e39302e302f32342d3234203d3e20323633363034.roa
Signing time:             Tue 19 Dec 2023 17:10:16 +0000
ROA not before:           Tue 19 Dec 2023 17:05:16 +0000
ROA not after:            Tue 17 Dec 2024 17:10:16 +0000
asID:                     263604
IP address blocks:        177.71.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e5:81:01:65:f1:93:d3:7c:2d:7a:40:29:92:d4:9f:60:65:36:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
        Validity
            Not Before: Dec 19 17:05:16 2023 GMT
            Not After : Dec 17 17:10:16 2024 GMT
        Subject: CN=35D48B95C7D69F4F6EEC405027680FD983A0F2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:b8:dd:24:b7:6a:71:8a:f2:61:fb:02:32:
                    86:d0:3c:b8:45:0a:61:71:a9:95:ca:81:f3:b0:3f:
                    a1:24:17:72:bd:c5:80:53:37:02:b3:54:ba:3b:05:
                    3c:5d:12:f4:f5:8d:2c:55:3d:b1:bd:32:c6:9f:af:
                    35:ea:5a:1c:bb:a9:de:ad:1e:ff:9d:a5:59:80:95:
                    a1:cd:08:88:ca:a9:25:10:84:18:c1:13:b7:41:4d:
                    f5:c5:b6:1e:e1:b7:1b:b6:9d:4e:ea:cb:21:df:3d:
                    5b:35:2f:53:ed:5b:08:d6:af:89:c3:39:2e:91:f8:
                    d6:88:cf:c8:81:9d:88:3e:2c:57:53:eb:96:0b:06:
                    e4:1b:bc:ee:34:11:1b:1b:4b:f9:b0:d0:ac:f0:54:
                    28:c1:4a:d5:17:bf:35:1c:78:f0:43:b4:ce:84:a8:
                    01:76:6a:19:33:e8:88:3a:31:2b:f4:91:d8:7e:c2:
                    d3:c7:71:b9:7b:b8:1d:51:51:0d:f7:b6:37:f4:c1:
                    ed:73:4a:c7:41:36:4a:59:e0:a6:e9:b8:2a:65:a8:
                    fd:ee:9e:59:53:34:11:e4:72:47:be:d3:0d:c3:83:
                    89:02:d9:d4:bb:6e:0f:c2:24:80:44:84:38:78:49:
                    8a:7d:a9:85:8a:89:06:23:38:6a:a7:6b:03:e3:6d:
                    f9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D4:8B:95:C7:D6:9F:4F:6E:EC:40:50:27:68:0F:D9:83:A0:F2:B5
            X509v3 Authority Key Identifier:
                keyid:49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e39302e302f32342d3234203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:05:46:44:05:ad:86:84:b9:a9:72:c5:9d:21:c7:92:14:07:
         1f:b6:29:73:3f:bd:2b:77:49:bb:c1:01:94:10:d2:7a:e9:c7:
         9c:09:c1:40:ef:0c:81:6d:65:6c:a1:c8:d0:4a:fe:c6:d1:fa:
         80:34:e6:c7:e9:66:ae:25:7a:82:17:e6:13:c4:ae:92:e4:b5:
         40:44:85:8b:10:a0:f5:8a:4c:e0:28:bc:68:7a:8d:c2:6b:e6:
         5c:84:d3:52:7f:84:3d:f5:8a:0c:0c:55:e9:cc:10:76:a2:e7:
         1e:e1:5f:90:03:68:d6:2a:fd:64:22:92:52:f2:7e:1c:87:98:
         77:da:65:0f:66:1f:e4:e3:11:35:44:12:16:0c:71:1b:9e:e7:
         a5:e0:ac:54:17:c0:f5:a5:96:45:af:f7:3e:36:43:00:a0:94:
         fb:93:f0:98:9c:12:c8:77:78:45:cd:b7:97:62:11:85:56:74:
         4d:77:fe:d6:b3:f2:9f:10:25:1c:28:e5:d6:3f:f8:b9:75:f0:
         54:87:69:5a:a8:b0:9f:7e:ba:a0:f7:06:ff:7c:fc:68:e2:d0:
         b5:d3:62:88:fe:0b:06:2c:a0:ad:84:df:39:65:e1:94:46:1b:
         08:2a:95:38:73:20:7b:e1:52:7b:5e:9f:55:d5:8a:fa:26:3e:
         2a:3c:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org