Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa
File:                     3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa (raw, json)
Hash identifier:          du06XOR6oAnbkiEdpLCQPKQWVZ2IaKDGMXVdHKthzG8=
Subject key identifier:   A9:DB:CD:53:EA:D2:4E:40:63:60:E2:B2:C1:21:9A:E1:02:77:57:87
Certificate issuer:       /CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
Certificate serial:       3295E8B3954D83FCF4C784BACCC9FE8872B17F10
Authority key identifier: CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa
Signing time:             Thu 20 Jul 2023 22:00:00 +0000
ROA not before:           Thu 20 Jul 2023 21:55:00 +0000
ROA not after:            Thu 18 Jul 2024 22:00:00 +0000
asID:                     262891
IP address blocks:        177.20.184.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:95:e8:b3:95:4d:83:fc:f4:c7:84:ba:cc:c9:fe:88:72:b1:7f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
        Validity
            Not Before: Jul 20 21:55:00 2023 GMT
            Not After : Jul 18 22:00:00 2024 GMT
        Subject: CN=A9DBCD53EAD24E406360E2B2C1219AE102775787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a4:39:00:db:8d:a4:76:a9:20:1e:3b:e6:a7:
                    08:63:69:f6:43:04:fd:97:a0:82:51:1e:cc:d1:2e:
                    f3:fd:29:c6:be:3d:a9:95:11:33:4d:41:a4:1d:0f:
                    d0:f7:1f:ba:04:a8:fd:72:63:f9:20:b2:1c:ae:b2:
                    bd:ed:54:b7:e8:2b:71:b6:c7:ca:9c:6b:c2:66:fd:
                    1d:44:60:cf:f1:d0:90:61:b8:14:a8:fa:2c:77:88:
                    5d:aa:5f:41:54:3b:d0:5f:22:6d:8f:13:16:e1:71:
                    1a:11:c7:74:64:eb:21:59:8b:a6:66:05:4a:af:de:
                    19:26:63:58:e2:d4:8a:e4:2d:fd:ec:31:ea:59:ab:
                    2d:ea:86:dc:b7:a6:eb:c6:6a:67:ca:9e:65:ef:7d:
                    d0:25:c0:1c:de:82:dd:44:40:87:f2:e0:6e:ac:e2:
                    24:8a:8a:46:9b:27:23:9f:90:69:07:a9:7f:50:83:
                    34:a5:83:22:db:40:5e:71:32:8e:59:64:6a:43:fb:
                    64:cf:23:17:5f:1c:c0:c8:09:e8:b9:73:f1:63:72:
                    7f:b2:1a:b6:65:b5:99:ec:b8:5a:8b:be:13:0a:94:
                    f6:ed:57:41:fa:d9:df:5e:9e:ad:0e:1a:d4:d1:08:
                    9e:04:e4:12:94:ce:31:18:62:84:7d:a5:54:1b:83:
                    27:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DB:CD:53:EA:D2:4E:40:63:60:E2:B2:C1:21:9A:E1:02:77:57:87
            X509v3 Authority Key Identifier:
                keyid:CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:4d:2d:65:ac:f5:35:4d:71:5b:bd:3e:bd:ae:42:20:b2:4f:
         cc:f8:5d:bf:8e:97:06:65:cd:c1:cf:a2:20:21:ec:9c:5c:c1:
         56:27:f5:68:0b:76:cb:b0:09:91:ed:96:e7:5a:d4:d9:4b:19:
         0d:bf:ab:58:91:d6:dd:b5:82:46:39:f3:c2:d2:38:88:c0:58:
         9b:01:01:70:f0:f4:22:5c:71:1a:ab:46:01:f4:4e:00:3a:a2:
         54:53:f2:21:f7:d3:24:85:1b:79:aa:92:9e:15:79:6b:2d:3b:
         8d:ae:0c:30:d1:68:b7:3b:30:01:ab:e8:d0:65:9c:92:22:96:
         6d:0a:32:4f:76:8c:0e:9f:50:10:98:fb:d0:3d:4a:1f:61:6c:
         3d:ee:18:12:15:e7:2b:2a:c5:7c:94:a4:15:a6:f1:d3:28:b2:
         39:da:b1:fa:ed:86:04:91:74:3e:e9:24:70:68:c6:84:45:00:
         ed:7c:21:b4:24:a5:ac:d7:7d:69:64:e4:0f:32:fd:e1:16:89:
         82:f7:04:bb:bc:cd:09:d1:f6:e7:a4:64:c3:f5:e0:13:6e:b4:
         f4:0d:14:1a:46:d2:a4:cd:81:90:d0:6d:4e:f9:16:46:f8:55:
         35:db:2a:8e:39:00:7a:1b:81:4a:9f:9f:26:e1:c5:4b:88:48:
         b8:fe:ee:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org