Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/0/3137372e3135352e3233382e302f32342d3234203d3e20323633363230.roa
File:                     3137372e3135352e3233382e302f32342d3234203d3e20323633363230.roa (raw, json)
Hash identifier:          Hhd1+26NfEYO92uVuLqTHuMOCsciP4xZ4aAmgRnUqk4=
Subject key identifier:   3E:7C:28:3C:04:D1:52:AA:73:B2:A3:72:83:74:DE:17:C5:E5:60:AC
Certificate issuer:       /CN=C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5
Certificate serial:       2E5C8AF513D93E442CF2F79C44D249303E2670FC
Authority key identifier: C9:92:8A:F4:0E:C3:F3:01:AB:FA:6B:43:CC:A8:45:42:B1:BD:22:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/0/3137372e3135352e3233382e302f32342d3234203d3e20323633363230.roa
Signing time:             Wed 21 Feb 2024 13:39:22 +0000
ROA not before:           Wed 21 Feb 2024 13:34:22 +0000
ROA not after:            Wed 19 Feb 2025 13:39:22 +0000
asID:                     263620
IP address blocks:        177.155.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5c:8a:f5:13:d9:3e:44:2c:f2:f7:9c:44:d2:49:30:3e:26:70:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5
        Validity
            Not Before: Feb 21 13:34:22 2024 GMT
            Not After : Feb 19 13:39:22 2025 GMT
        Subject: CN=3E7C283C04D152AA73B2A3728374DE17C5E560AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3c:a1:11:a5:c7:1f:72:de:bb:ef:b3:9d:52:
                    2a:25:2a:8e:dd:3c:a7:82:4c:d0:48:9f:8b:df:2b:
                    02:02:56:bf:40:89:40:df:b1:7e:b0:bd:fc:9e:1f:
                    34:4a:80:74:cd:20:ee:23:9f:10:69:47:6b:22:60:
                    07:de:3f:8e:38:0d:20:ef:3b:d6:8e:be:2d:fa:0f:
                    70:1a:fc:d7:b6:d6:8d:f4:36:48:53:ad:44:71:1a:
                    5a:ff:a7:75:fb:ba:a1:51:e7:f8:d8:b0:1a:43:7e:
                    6b:41:a6:fc:ac:2d:63:d9:71:1d:04:8f:bf:3c:64:
                    63:95:8c:7f:11:e5:d5:9c:d5:1a:0e:66:4f:30:19:
                    98:ec:96:d3:1f:2f:61:44:4a:47:7e:45:5c:87:40:
                    11:61:bd:5d:ee:f3:d3:16:1d:9d:f1:71:73:b3:17:
                    6b:e2:1d:ac:21:b7:94:6c:e3:86:b0:69:2d:62:67:
                    32:76:f0:69:12:e8:88:3a:d4:d0:5a:b4:3c:7c:ed:
                    52:40:9b:67:28:ee:8f:32:33:96:13:71:8a:e3:ab:
                    0d:04:4b:08:e7:e8:8f:23:d2:4d:f5:3a:67:4e:e6:
                    c3:89:83:05:ed:9b:62:98:9f:6d:02:e2:75:b8:cb:
                    b6:21:82:61:ec:43:92:67:65:64:f5:07:6a:88:02:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7C:28:3C:04:D1:52:AA:73:B2:A3:72:83:74:DE:17:C5:E5:60:AC
            X509v3 Authority Key Identifier:
                keyid:C9:92:8A:F4:0E:C3:F3:01:AB:FA:6B:43:CC:A8:45:42:B1:BD:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/0/C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/0/3137372e3135352e3233382e302f32342d3234203d3e20323633363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ab:78:c3:25:e5:62:c2:ed:9e:bc:1f:58:1f:cf:12:c6:be:
         45:07:36:3d:d5:a0:69:8f:23:82:78:2b:ca:a1:68:c1:2f:b5:
         18:f3:a1:18:e4:aa:9d:e8:cb:65:0d:ea:0f:5d:84:3e:17:33:
         60:3d:d0:4c:e2:40:42:8a:d3:cb:39:27:79:16:04:c7:d3:90:
         e2:99:d0:80:82:6f:ef:ca:20:32:33:f1:5a:b0:18:8c:43:4f:
         47:bb:a0:88:d7:9d:49:be:1d:d9:08:48:fd:98:2c:ff:cd:7c:
         d3:1a:84:29:dd:24:9d:83:9d:5b:36:dd:f3:c6:88:01:f1:66:
         32:00:8f:eb:2f:1d:59:e2:31:09:73:ed:15:74:54:92:2e:b7:
         3c:d1:0b:e9:98:59:a7:a3:8a:81:e5:68:d5:2c:d0:16:8e:01:
         eb:99:89:7a:e1:5a:16:4c:35:f0:44:82:18:e2:de:bf:21:b3:
         3a:a4:d1:35:5c:e1:be:d0:d9:a2:61:a8:ad:11:1b:0c:54:35:
         bb:97:3a:41:d7:aa:85:0c:98:64:f2:5b:9f:da:11:f1:76:ba:
         3b:7c:85:b1:e3:af:bb:ed:3e:4c:24:33:6d:b1:01:c6:d0:b3:
         80:3c:35:32:1e:3a:bd:91:e2:e9:0c:db:0d:6f:99:0b:fd:f7:
         a8:d8:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org