Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3137372e3132392e36382e302f32322d3332203d3e203238363339.roa
File:                     3137372e3132392e36382e302f32322d3332203d3e203238363339.roa (raw, json)
Hash identifier:          v83/ei1CXRuu/kvjMsekeG+dKIv53XjYYVUFnhonUTQ=
Subject key identifier:   CA:BA:C7:99:83:2F:88:74:F4:82:3F:B3:8C:4C:6F:EE:A9:C2:AC:C1
Certificate issuer:       /CN=0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1
Certificate serial:       1CDBC0214B23CE10F20A5F166669BE6ADC30250B
Authority key identifier: 0D:48:62:7D:50:F9:C4:D0:D9:AA:77:8F:24:6C:52:27:F7:AA:F5:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3137372e3132392e36382e302f32322d3332203d3e203238363339.roa
Signing time:             Sat 24 Feb 2024 13:00:37 +0000
ROA not before:           Sat 24 Feb 2024 12:55:37 +0000
ROA not after:            Sat 22 Feb 2025 13:00:37 +0000
asID:                     28639
IP address blocks:        177.129.68.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:db:c0:21:4b:23:ce:10:f2:0a:5f:16:66:69:be:6a:dc:30:25:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1
        Validity
            Not Before: Feb 24 12:55:37 2024 GMT
            Not After : Feb 22 13:00:37 2025 GMT
        Subject: CN=CABAC799832F8874F4823FB38C4C6FEEA9C2ACC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:c6:07:9b:97:d6:95:a2:1f:0f:c4:a9:41:
                    2f:4f:47:b1:8d:34:6f:9f:bf:65:6e:d6:d7:62:71:
                    02:f2:a0:77:37:c1:5d:bc:71:38:20:fb:12:e4:13:
                    bb:2b:77:2f:78:f8:7b:02:d7:a0:2a:f4:b9:5b:5f:
                    77:c6:d7:31:c5:a4:4a:2f:80:b9:e1:46:96:d6:fa:
                    14:6c:32:84:f4:54:c3:f9:ca:ae:21:8c:ec:ed:1d:
                    fd:98:b7:99:84:f7:5b:83:27:a2:75:fe:a8:9b:cb:
                    41:43:65:99:d1:00:a2:58:de:c9:8a:77:c2:af:b0:
                    58:95:76:64:e9:27:d9:22:16:09:08:4a:a4:8c:a0:
                    12:71:13:50:27:c3:05:fa:02:99:72:ff:53:82:7f:
                    7a:8d:37:1e:69:c8:cb:77:79:7f:f3:fa:8f:b5:61:
                    cd:0e:29:2d:7e:02:4b:18:4b:23:d7:9e:a7:33:59:
                    59:b9:ab:c1:d8:c2:aa:9b:5f:19:4c:21:84:38:72:
                    72:e6:e2:f3:3b:9e:1c:0c:cb:f0:70:25:da:05:ce:
                    a7:1f:01:d7:47:09:22:3a:f7:42:2a:27:62:fa:6d:
                    87:0b:50:04:3a:e3:9e:18:7b:2f:bf:df:e9:5c:4c:
                    c8:1c:f5:70:d9:b0:01:a0:ef:cf:37:d3:52:a9:9b:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BA:C7:99:83:2F:88:74:F4:82:3F:B3:8C:4C:6F:EE:A9:C2:AC:C1
            X509v3 Authority Key Identifier:
                keyid:0D:48:62:7D:50:F9:C4:D0:D9:AA:77:8F:24:6C:52:27:F7:AA:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D48627D50F9C4D0D9AA778F246C5227F7AAF5D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3137372e3132392e36382e302f32322d3332203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:60:bd:88:bd:cc:80:28:f0:cd:5e:6f:31:31:fd:4d:c4:d6:
         ee:d5:ed:ad:9a:35:e1:ce:b8:54:88:6f:74:5a:93:09:45:59:
         7d:42:ca:95:7d:b7:7e:1c:98:af:17:2e:8a:59:15:9e:be:af:
         18:61:40:d6:c0:66:1c:66:53:4a:50:9c:f7:e2:d5:4b:d5:2c:
         57:a9:f6:dc:af:16:ce:49:51:c9:9d:03:96:60:5b:55:23:22:
         3b:52:51:8d:aa:2d:62:a0:d8:61:68:2b:e1:d2:4e:03:8f:c1:
         fb:f6:b6:3c:c3:ec:fa:ed:8b:ad:e5:a4:33:3a:db:fa:5c:82:
         46:de:c0:39:3e:7e:80:4c:d1:a9:0b:00:04:c5:d1:7c:b5:00:
         c0:81:56:6a:6e:43:7d:99:1f:58:2f:40:7b:4b:04:2b:76:61:
         38:72:0d:77:2e:f2:fa:9f:a7:c0:be:26:30:9c:c7:8b:d8:a5:
         bb:39:01:49:67:9f:34:b6:aa:29:2b:66:f7:9f:ea:69:b2:37:
         ed:72:9f:ec:10:4f:ab:b4:d0:3d:b9:b0:28:53:7c:7a:97:e3:
         88:72:50:aa:66:e7:51:5e:56:26:f5:63:4d:d0:b6:32:22:fb:
         af:91:09:45:e6:f4:79:b7:30:5e:d4:83:00:34:59:18:fc:96:
         1e:c7:bf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org