Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34352e302f32342d3234203d3e20323633343237.roa
File:                     3137372e39312e34352e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier:          PkhxidD5HCfCSII4wi25u4oOkPNy1v4h6ccG3in3p/o=
Subject key identifier:   1B:38:AE:99:1B:3F:6C:E4:B3:06:8C:80:2C:97:25:A6:B9:F8:F0:37
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       0777A23D4353028508EB32EC88250850B246D9DF
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34352e302f32342d3234203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:04:34 +0000
ROA not before:           Fri 09 Jun 2023 21:59:34 +0000
ROA not after:            Fri 07 Jun 2024 22:04:34 +0000
asID:                     263427
IP address blocks:        177.91.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:77:a2:3d:43:53:02:85:08:eb:32:ec:88:25:08:50:b2:46:d9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 21:59:34 2023 GMT
            Not After : Jun  7 22:04:34 2024 GMT
        Subject: CN=1B38AE991B3F6CE4B3068C802C9725A6B9F8F037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:c0:3e:f1:8d:e7:09:b1:18:c4:3b:c5:54:
                    01:31:d8:af:2e:7d:a8:a0:30:5e:ae:dc:d5:ce:bd:
                    8b:e4:64:31:3d:48:a3:81:45:df:58:eb:c3:a6:b1:
                    d7:27:1a:a2:26:37:f0:bd:3c:6d:d8:5c:da:02:b6:
                    7a:03:ab:c7:e2:67:e4:7c:6b:15:40:25:ec:60:89:
                    d7:fb:97:6c:83:77:b2:6c:24:e5:bb:52:43:37:6a:
                    55:0f:41:35:c0:10:89:71:4d:b4:8d:1a:82:bd:ad:
                    d6:ef:a0:30:8e:58:20:e5:f0:fb:37:1c:a0:f4:e0:
                    dd:57:ad:cd:09:8a:0c:d0:c1:39:af:56:bb:9d:ed:
                    a8:ad:76:8c:85:d4:75:22:07:69:ea:87:2f:5c:b3:
                    d9:23:53:d8:f0:a1:17:46:f9:c6:b3:8e:6f:b8:24:
                    df:ee:a8:02:23:a7:af:f7:40:ad:c6:3b:d5:b5:e8:
                    92:33:40:db:0a:51:05:19:af:5d:cf:fd:e8:32:d5:
                    b9:74:53:4b:b8:1c:c2:26:d2:08:29:c6:20:3d:17:
                    5a:e1:be:e2:96:d7:f5:8b:90:77:52:e3:ef:05:e7:
                    a2:b8:de:2e:c5:9a:b3:e0:54:c6:bb:c9:ba:fe:7a:
                    06:56:0f:17:7f:d3:92:c0:c7:25:3d:8b:9d:61:4a:
                    76:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:38:AE:99:1B:3F:6C:E4:B3:06:8C:80:2C:97:25:A6:B9:F8:F0:37
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34352e302f32342d3234203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:8c:11:8d:d9:2a:ea:02:b1:a0:24:38:5c:88:96:2f:d0:bd:
         57:96:47:a9:ed:cb:33:da:ad:6f:3b:1a:76:c8:59:44:5c:11:
         e4:d6:87:e7:06:9a:d3:47:d2:88:10:e6:7b:85:15:37:22:78:
         07:00:26:e3:0f:0e:c7:ad:8a:c7:6e:73:f0:e2:b5:da:50:6e:
         08:24:7a:f7:d8:b6:28:8f:5d:f4:4c:cc:db:cf:22:04:d3:0d:
         6a:8f:05:3e:71:3e:03:93:cf:36:2e:8e:9b:e2:53:c0:dd:b4:
         27:1c:a4:33:7c:ca:53:e1:be:59:19:4d:aa:de:b5:79:96:f7:
         3a:eb:58:7c:12:7a:2f:e1:06:c4:6a:16:fa:42:0e:da:68:93:
         da:36:ed:fa:cf:38:a5:f5:a6:15:a5:0a:b4:81:c7:8b:90:41:
         13:5e:ea:d3:f9:76:7f:d5:95:b7:c1:26:ea:9b:26:02:70:88:
         c9:3a:ff:5c:03:b5:1a:1d:9a:f7:c6:8f:01:47:96:e7:4a:34:
         f2:5e:ff:24:49:b8:8f:3b:5f:85:5c:46:61:af:ad:41:08:83:
         84:54:10:a5:c5:a3:cc:1d:e9:65:76:70:a0:7f:6d:aa:a2:3b:
         9c:dc:28:dc:0e:c8:aa:b4:e0:93:53:79:ae:4b:48:eb:b1:f3:
         e2:c6:fd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org