Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e39312e302f32342d3234203d3e20323633363034.roa
File:                     3137372e37312e39312e302f32342d3234203d3e20323633363034.roa (raw, json)
Hash identifier:          7OcXIrGMQCFn5dxDCqaEzMici8mI0Bew8l0mhbnTMW0=
Subject key identifier:   14:DB:8F:EE:38:B8:B8:46:E5:EF:AE:68:08:7C:FC:29:C6:C8:DF:D1
Certificate issuer:       /CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
Certificate serial:       5F5BFBC01C32C2D83CE7F89FE34F0F056A117D21
Authority key identifier: 11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e39312e302f32342d3234203d3e20323633363034.roa
Signing time:             Thu 21 Sep 2023 13:36:58 +0000
ROA not before:           Thu 21 Sep 2023 13:31:58 +0000
ROA not after:            Thu 19 Sep 2024 13:36:58 +0000
asID:                     263604
IP address blocks:        177.71.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5b:fb:c0:1c:32:c2:d8:3c:e7:f8:9f:e3:4f:0f:05:6a:11:7d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
        Validity
            Not Before: Sep 21 13:31:58 2023 GMT
            Not After : Sep 19 13:36:58 2024 GMT
        Subject: CN=14DB8FEE38B8B846E5EFAE68087CFC29C6C8DFD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6b:80:60:1a:09:a8:6e:e7:3b:2a:8e:69:30:
                    64:cd:48:ae:6d:29:98:28:47:89:0e:d0:d0:54:f3:
                    0c:7d:73:5c:58:4b:34:7d:4f:1b:0f:e7:78:8c:c2:
                    a0:d2:36:d2:35:61:d4:31:51:28:dc:39:41:ec:52:
                    1c:ab:9b:37:c8:81:79:2d:c7:71:8c:a9:5a:1f:8d:
                    21:73:a3:10:39:75:f1:56:11:c2:61:25:ea:00:89:
                    64:c0:09:97:9b:9f:f5:5f:a1:66:58:6c:76:ea:ca:
                    f8:22:6e:9c:c9:78:81:4f:92:ab:1d:9b:f0:a6:49:
                    75:59:ed:84:5e:1a:5e:63:5b:f7:8d:3a:81:d1:eb:
                    40:bc:f6:79:74:76:61:9e:93:a6:8b:0d:7e:76:ec:
                    88:26:f8:e9:0f:47:65:cb:a4:5e:57:97:bf:f0:20:
                    58:c0:bb:97:aa:90:ef:58:33:e2:e1:df:04:13:b8:
                    df:94:9d:82:ad:7f:9d:94:07:e9:a1:28:8a:06:23:
                    a9:e6:4e:a8:2e:7b:7a:f6:04:44:f7:e2:29:6c:f9:
                    1c:87:4f:b5:7b:c2:08:2d:38:dd:fb:cc:0d:e1:61:
                    6f:db:78:f2:fd:9d:4b:18:61:68:98:49:b8:28:5b:
                    a9:ef:0e:1d:a1:17:e3:5c:30:7b:70:15:6e:ca:df:
                    8a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DB:8F:EE:38:B8:B8:46:E5:EF:AE:68:08:7C:FC:29:C6:C8:DF:D1
            X509v3 Authority Key Identifier:
                keyid:11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e39312e302f32342d3234203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:2e:8b:48:99:1a:18:b2:7c:44:e2:c6:cb:0b:43:dd:9a:52:
         b2:f1:8e:91:64:87:f2:6a:2c:b2:c2:e9:83:4f:57:47:1b:90:
         ae:c6:41:b3:04:e5:1b:9e:c7:5f:b3:09:40:15:4b:2f:de:e1:
         a6:fd:a9:f2:e5:bd:31:bb:13:8b:d5:64:7c:00:f4:aa:ef:60:
         d6:fc:67:df:65:fb:26:7f:3b:16:e3:e7:11:ec:54:c1:aa:09:
         bc:0c:71:10:07:e0:f3:97:c6:fe:75:e0:b3:7b:3c:63:66:17:
         58:c5:0b:b4:7c:32:99:75:ab:6a:ec:be:e2:76:4a:ee:91:58:
         da:03:90:e9:21:6c:fb:d3:36:40:36:43:a2:d5:75:e3:d6:51:
         6b:c2:f3:1b:c4:22:82:a1:81:73:97:dd:56:dd:35:0d:cc:db:
         b4:51:d0:87:41:7c:f2:11:dc:ed:53:f3:1d:97:b0:3e:ea:3a:
         06:3c:a0:97:5a:57:9c:d4:53:43:3e:13:49:87:15:ff:48:21:
         85:96:f0:dd:14:44:10:c4:ec:93:a9:c9:3d:d4:4f:43:e1:18:
         5f:8a:03:50:63:b6:05:94:24:44:60:8b:81:12:0c:59:b9:15:
         97:42:51:19:97:39:93:f3:e0:03:bf:b7:45:b9:98:42:f1:80:
         df:fa:58:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org