Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e31312e3139322e302f32312d3234203d3e20323632393037.roa
File:                     3137372e31312e3139322e302f32312d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          KGWULm6t1zfWlKtpKpqXLpG4Q5r5awzEzjXs/EEk1fM=
Subject key identifier:   0E:D5:D0:F0:F1:7A:37:15:5E:CD:37:9F:E8:BC:90:57:B9:8E:1C:91
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       0FA2A727F6017E42820DA80AFB2F286825EA16F1
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e31312e3139322e302f32312d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:22 +0000
ROA not before:           Sat 03 Feb 2024 12:48:22 +0000
ROA not after:            Sat 01 Feb 2025 12:53:22 +0000
asID:                     262907
IP address blocks:        177.11.192.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a2:a7:27:f6:01:7e:42:82:0d:a8:0a:fb:2f:28:68:25:ea:16:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:22 2024 GMT
            Not After : Feb  1 12:53:22 2025 GMT
        Subject: CN=0ED5D0F0F17A37155ECD379FE8BC9057B98E1C91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e6:52:5b:81:79:e2:0a:c5:b2:11:a7:f1:ae:
                    e3:81:ff:6e:51:89:6c:17:a5:f7:5a:ad:0f:88:02:
                    ba:4a:b9:98:20:0d:3d:64:e8:29:97:aa:f4:1e:d0:
                    b8:1a:5e:fb:71:4c:31:9b:ed:39:82:75:ca:b1:3c:
                    66:6e:f5:74:cc:36:e0:2e:9a:40:55:0b:85:60:83:
                    4c:6e:de:82:a4:e2:c7:56:1a:c1:9c:1a:ef:05:f3:
                    f1:b8:be:3c:18:1c:8d:1e:09:66:58:a2:46:78:1c:
                    c9:50:49:7b:5d:86:ee:e3:26:aa:ef:95:fe:c9:fa:
                    52:cb:21:34:de:ba:5c:ef:9a:6d:cd:bd:90:8f:09:
                    43:06:96:5c:2b:89:23:0b:52:d3:8a:b4:21:7d:35:
                    08:a6:9f:92:17:d6:55:db:f2:10:8e:da:22:06:5a:
                    eb:42:b9:8b:70:65:de:5a:53:a4:09:42:5f:38:bd:
                    8d:c6:71:bc:f5:9f:04:db:cd:6a:b9:2b:0e:ba:2f:
                    06:3b:ad:2b:77:68:35:33:fb:6c:c0:16:bd:ba:49:
                    f4:94:cc:8b:bd:16:ee:6b:2a:a3:80:05:e9:4f:da:
                    21:6a:63:14:7e:81:dd:67:70:ab:7d:3e:b5:f1:ad:
                    d9:6f:f7:68:3b:56:4e:b6:aa:f7:28:db:1b:0e:06:
                    6a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D5:D0:F0:F1:7A:37:15:5E:CD:37:9F:E8:BC:90:57:B9:8E:1C:91
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e31312e3139322e302f32312d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:cf:ec:ed:aa:dc:83:4e:83:65:21:2a:78:e7:34:8a:0f:15:
         4c:fa:af:fa:54:83:2e:09:cc:20:a4:5f:4b:90:4d:2f:08:fc:
         24:3e:ac:9f:1d:1d:76:7d:d2:60:c2:28:9b:4f:78:ba:5b:78:
         c6:11:81:00:1b:f0:b9:d9:48:ad:7d:3a:0d:34:4a:f3:17:54:
         65:1b:e1:2d:20:5e:d6:70:a3:9a:9a:ed:45:19:05:24:07:c3:
         c5:e6:3e:dc:3b:d1:95:0c:0f:39:b1:ba:7a:80:24:f6:6a:46:
         c0:49:80:7e:d6:41:1f:df:3b:76:5d:4d:ed:ac:e2:e8:6c:10:
         f8:31:a3:1c:32:83:b6:b3:de:c0:e7:d3:d0:db:00:1f:71:63:
         68:6b:7a:00:ef:e8:a8:a8:c8:fd:60:24:26:7a:fe:66:32:85:
         f9:ec:90:0c:7a:57:50:d3:1b:a7:41:de:8a:15:97:5b:df:6d:
         cb:ce:45:5f:de:75:2b:d0:a2:7b:36:1c:7e:d0:90:1f:6a:44:
         d9:5b:4a:56:cf:7c:ae:db:48:f4:e8:09:60:84:00:59:3e:6a:
         c7:12:f5:e9:81:8a:a4:46:e1:d1:3d:ec:59:e9:94:55:81:1b:
         cb:05:fe:5b:c6:d2:49:3e:e6:23:22:19:0d:05:67:ae:a9:ea:
         8f:5c:c1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org