Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/3137372e3132342e3130382e302f32332d3332203d3e20323731333537.roa
File:                     3137372e3132342e3130382e302f32332d3332203d3e20323731333537.roa (raw, json)
Hash identifier:          WpCUC4eUBkRcTe8nHNPnaruh8iafppIh2OMRcW4OD9A=
Subject key identifier:   8B:38:4F:F7:A1:2A:E3:33:E8:69:F0:57:39:F9:43:FD:4A:C3:8E:BB
Certificate issuer:       /CN=861431B4FBAA21381E37B3A294DF68C5F828ED6F
Certificate serial:       42BD353F3B8341912F607B2466F9DDDAC558861C
Authority key identifier: 86:14:31:B4:FB:AA:21:38:1E:37:B3:A2:94:DF:68:C5:F8:28:ED:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/3137372e3132342e3130382e302f32332d3332203d3e20323731333537.roa
Signing time:             Thu 08 Feb 2024 18:02:05 +0000
ROA not before:           Thu 08 Feb 2024 17:57:05 +0000
ROA not after:            Thu 06 Feb 2025 18:02:05 +0000
asID:                     271357
IP address blocks:        177.124.108.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bd:35:3f:3b:83:41:91:2f:60:7b:24:66:f9:dd:da:c5:58:86:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=861431B4FBAA21381E37B3A294DF68C5F828ED6F
        Validity
            Not Before: Feb  8 17:57:05 2024 GMT
            Not After : Feb  6 18:02:05 2025 GMT
        Subject: CN=8B384FF7A12AE333E869F05739F943FD4AC38EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:11:30:10:a7:f8:8e:94:7f:b0:ac:30:15:
                    63:e4:84:2b:bf:ac:5a:9b:4a:62:58:4d:31:68:0c:
                    b7:ec:08:03:9c:b9:44:9d:e3:cb:40:84:d6:96:e8:
                    ef:a2:3b:51:09:80:ba:e8:7d:13:c7:4c:61:61:3c:
                    53:39:fc:e0:27:60:3f:91:f7:c7:2c:a2:e7:9b:b9:
                    bb:63:2e:3e:fa:5c:d4:0c:7e:f3:76:99:0f:02:0e:
                    e7:0d:da:ba:be:fe:e1:3d:76:b2:b7:06:e9:b8:6c:
                    22:d9:78:73:7f:7d:2e:0b:bc:19:7e:b7:1f:03:48:
                    1f:9c:7e:2a:83:a2:20:b7:90:ea:07:a7:d1:60:a6:
                    17:63:78:a8:27:c8:15:26:c9:d8:05:ec:b3:fc:2d:
                    f4:d1:1e:c1:e4:f8:9b:28:7c:b9:d7:92:a6:d6:24:
                    7e:73:2b:26:2a:29:b0:f2:6f:39:fc:6f:4b:a0:0d:
                    b9:0b:8e:b5:6d:5d:45:72:af:ef:7e:ad:bc:88:82:
                    f1:88:6d:81:bd:05:e4:c7:d6:92:67:68:a8:fa:53:
                    d4:95:4e:7e:15:54:65:f4:ce:a3:37:ba:92:8a:2d:
                    68:95:70:83:cd:b9:24:bf:e0:a0:00:39:c8:b9:d7:
                    12:27:a9:4c:b7:86:08:45:05:51:bf:2b:a5:57:ce:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:38:4F:F7:A1:2A:E3:33:E8:69:F0:57:39:F9:43:FD:4A:C3:8E:BB
            X509v3 Authority Key Identifier:
                keyid:86:14:31:B4:FB:AA:21:38:1E:37:B3:A2:94:DF:68:C5:F8:28:ED:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/861431B4FBAA21381E37B3A294DF68C5F828ED6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/3137372e3132342e3130382e302f32332d3332203d3e20323731333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:42:6d:43:98:e3:56:ff:d1:d7:eb:a6:79:13:22:b4:46:f0:
         1e:9e:b7:17:b9:20:ec:25:af:5c:cc:44:3f:04:d3:ff:47:92:
         a0:32:f3:da:84:ff:de:54:1f:d1:22:24:66:5b:a9:75:7f:c2:
         27:c1:9f:59:b4:15:a3:33:42:d1:e2:73:59:a5:a8:f8:c1:13:
         bb:27:f5:2d:40:69:26:0a:bc:ab:30:1b:2a:a9:23:ed:a0:09:
         1f:79:db:ff:a4:a2:89:d6:4b:75:6f:67:24:e9:b0:3c:25:ba:
         8b:13:81:96:29:7e:68:08:30:da:e2:3f:e8:ce:6d:98:be:b2:
         8b:38:a9:cb:6b:8a:29:b2:ca:17:19:14:ac:04:2d:8c:dd:87:
         20:72:59:75:c7:37:49:8f:96:ed:92:7a:1b:d0:a8:ad:7b:65:
         91:72:d8:b1:c8:47:58:06:5a:ee:b4:05:91:34:03:01:8a:dc:
         ff:08:55:7d:fb:92:a8:dd:13:c7:35:c1:e9:5b:bd:d4:06:c9:
         e6:1c:69:56:42:87:ff:c4:2a:58:88:fd:83:68:29:b9:85:f7:
         3e:1e:da:f1:08:bf:fe:3b:fa:61:29:e4:b9:4b:6d:6b:10:33:
         8a:b4:b3:31:b8:03:33:20:df:7d:88:3a:2d:ca:34:ba:a8:8d:
         5e:05:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org