Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132392e302f32342d3234203d3e20323730353134.roa
File:                     3137372e31312e3132392e302f32342d3234203d3e20323730353134.roa (raw, json)
Hash identifier:          /wflAhhYzVwTIKzgTQs0zorGE412eTzUH2Vgh0e5voY=
Subject key identifier:   C4:EA:CD:65:B9:F9:91:A6:CA:52:2A:B3:13:CD:C7:37:E8:09:45:55
Certificate issuer:       /CN=35F6CB498D4B581CD56EFC2125053A8C6BF1D329
Certificate serial:       2BCBF33FCCAE64746289E3444265530AB3BB5794
Authority key identifier: 35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132392e302f32342d3234203d3e20323730353134.roa
Signing time:             Mon 25 Sep 2023 17:00:00 +0000
ROA not before:           Mon 25 Sep 2023 16:55:00 +0000
ROA not after:            Mon 23 Sep 2024 17:00:00 +0000
asID:                     270514
IP address blocks:        177.11.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:cb:f3:3f:cc:ae:64:74:62:89:e3:44:42:65:53:0a:b3:bb:57:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35F6CB498D4B581CD56EFC2125053A8C6BF1D329
        Validity
            Not Before: Sep 25 16:55:00 2023 GMT
            Not After : Sep 23 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:0e:a4:4f:40:7b:a9:c3:d2:a2:0a:91:dc:
                    22:cf:37:c0:27:1b:32:1b:51:6a:27:cb:2d:87:f1:
                    98:d2:6b:fe:13:16:dd:ef:70:eb:21:f6:e3:a9:70:
                    e9:c0:0c:a4:69:18:8c:3b:a4:26:56:d1:b6:e4:c8:
                    e0:3a:ee:0e:2e:5c:fd:fc:ba:3e:77:4f:9e:37:64:
                    ae:9d:59:3a:2b:41:d5:43:d7:4b:21:6c:45:f0:a4:
                    25:98:87:d5:50:e6:13:65:28:89:6b:07:c2:e6:87:
                    b2:27:74:ab:67:7a:ff:4e:d6:21:e2:09:94:4a:08:
                    84:be:18:3c:91:0d:bb:05:c8:a1:92:f9:17:8a:f6:
                    c3:23:db:8e:12:e9:ec:20:1c:c2:64:bc:9d:bb:f6:
                    aa:8f:bf:4f:62:65:5f:be:7e:74:a5:a2:7c:19:f8:
                    b5:d2:c1:8f:c5:f0:40:93:59:94:2f:76:98:9c:ae:
                    01:c3:8d:86:07:f0:69:1c:b5:31:06:08:f8:2b:6c:
                    25:d7:a8:48:27:02:5c:23:1f:c2:6f:af:c2:97:22:
                    75:f7:51:ea:17:fe:8a:9b:4c:b1:75:fe:32:1f:8a:
                    4c:19:ff:96:36:fd:3b:21:dc:8c:87:70:89:3a:46:
                    6c:d7:dd:fd:de:ba:6b:3e:ab:f2:66:6c:6a:ef:58:
                    c8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EA:CD:65:B9:F9:91:A6:CA:52:2A:B3:13:CD:C7:37:E8:09:45:55
            X509v3 Authority Key Identifier:
                keyid:35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132392e302f32342d3234203d3e20323730353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:de:8b:ba:d7:5d:31:45:5a:08:ba:4e:a5:e6:20:53:da:0d:
         c5:ce:08:10:52:da:61:66:76:10:3a:25:9c:ce:07:47:bf:18:
         6a:b6:50:b5:72:35:c1:29:8d:1d:19:7d:a9:47:88:2d:d3:e0:
         88:3d:20:51:ce:78:eb:1d:eb:fa:fc:e0:37:10:24:99:6a:91:
         57:70:dd:4c:2a:08:6d:cb:cb:fb:00:31:48:d5:d8:e4:96:7e:
         12:4e:06:b6:47:4f:24:ef:a9:88:de:49:94:ee:3b:db:db:4b:
         1e:53:6b:d1:fd:2e:97:95:da:38:9e:de:ba:b1:3e:d2:82:0f:
         61:29:d0:d2:23:06:91:6f:8a:4f:dc:68:80:d6:91:79:3d:3a:
         66:25:a9:e2:0c:84:22:d9:20:61:76:46:68:12:4e:9a:f8:90:
         16:b3:c9:69:b8:fa:3f:09:20:9b:ab:d7:35:0b:e7:a9:7f:e4:
         5e:15:d1:3b:ca:f3:c9:f7:77:a0:78:0b:86:f4:47:71:cd:d9:
         dc:07:7d:8d:54:80:04:9b:eb:0b:96:f5:4d:30:4e:ba:07:37:
         94:91:b8:9c:33:c7:d6:87:f1:ad:ac:37:85:7d:7d:0e:7d:1b:
         f2:71:82:a3:57:ff:18:d2:40:02:da:fa:cf:e6:f4:bb:1c:a6:
         41:f8:97:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org