Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3132362e312e302f32342d3234203d3e20323635333033.roa
File:                     3137372e3132362e312e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          /mOoqnxB5cmq28bilRSbWzK2wy+t3qfoINuS3P7uhRs=
Subject key identifier:   56:33:24:17:B8:9D:D4:3A:6E:14:AE:35:A2:A2:61:FD:16:BF:2A:77
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       593C94DAB69980AAB2D7B94E3A103EF4C4F8BFF1
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3132362e312e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:07:52 +0000
ROA not before:           Mon 08 Apr 2024 14:02:52 +0000
ROA not after:            Mon 07 Apr 2025 14:07:52 +0000
asID:                     265303
IP address blocks:        177.126.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3c:94:da:b6:99:80:aa:b2:d7:b9:4e:3a:10:3e:f4:c4:f8:bf:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 14:02:52 2024 GMT
            Not After : Apr  7 14:07:52 2025 GMT
        Subject: CN=56332417B89DD43A6E14AE35A2A261FD16BF2A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:a4:af:ca:81:38:08:5a:66:1b:e4:d1:68:
                    50:7e:1e:33:7f:ca:5f:3e:92:4f:cc:35:8f:8d:32:
                    7a:b1:63:87:2e:60:cd:7f:de:6e:f6:32:0e:d2:79:
                    a2:b5:69:7a:83:11:1c:69:44:0a:93:4b:d0:17:d0:
                    57:ff:ad:0d:e2:2b:80:da:3b:99:e1:2d:c0:83:be:
                    74:df:3f:54:30:a4:65:3e:23:f0:a6:39:72:37:8a:
                    05:2c:d1:44:42:09:3e:94:cc:42:94:21:ec:9a:42:
                    60:70:4e:82:bb:74:db:55:58:c9:2b:33:e7:a7:3c:
                    ec:0f:2d:10:20:f2:06:3e:36:4b:ad:59:54:25:6d:
                    d4:22:36:9e:a5:04:21:a2:32:01:5a:b9:a4:9b:8c:
                    c8:fc:16:68:94:c2:fa:17:3b:d9:c4:fa:21:07:ac:
                    ff:09:1b:05:25:64:92:d8:b9:c1:e3:d3:85:af:37:
                    f0:c9:ae:51:0a:6c:ba:34:79:59:ee:ff:39:2f:43:
                    48:5d:d9:69:c5:d7:b0:99:04:d3:16:35:a6:7d:63:
                    d7:6e:b8:2e:b3:53:0d:a6:36:5a:21:a4:f3:51:d0:
                    72:59:cc:e2:50:51:d7:d9:e4:be:69:c7:be:19:db:
                    4a:a9:26:07:5d:75:16:04:44:f7:02:c6:cb:f5:d8:
                    5a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:33:24:17:B8:9D:D4:3A:6E:14:AE:35:A2:A2:61:FD:16:BF:2A:77
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3132362e312e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:70:48:b7:3e:46:05:40:d7:cd:2d:e4:57:8b:e9:63:43:00:
         b0:76:d5:a3:bb:be:89:8a:7a:b4:a8:de:c2:2f:7f:18:cb:85:
         2b:16:2d:0d:f2:68:6c:45:9e:77:a4:f1:f5:d4:b9:61:71:0b:
         e0:9c:f4:e3:0c:32:70:a5:91:03:63:af:20:a0:c1:4f:6b:f3:
         8e:85:9c:4f:92:d2:3d:06:eb:fb:c1:a4:43:5e:09:42:6b:49:
         5f:91:81:a2:fd:e3:89:ab:42:c4:df:38:ac:3a:70:b3:c8:42:
         01:88:dd:58:fa:ad:5e:ec:00:16:9a:18:7f:43:48:21:06:90:
         38:3d:37:18:0c:e4:33:c7:48:ac:a9:62:8d:e2:a9:19:c8:e7:
         9a:08:ff:5f:15:10:0e:0e:50:ce:0e:a9:15:e4:08:a5:67:5b:
         6a:fe:a9:b8:07:98:d1:2a:8b:3b:09:4c:10:1f:65:6b:cf:f6:
         43:6c:2c:82:53:5b:8b:5f:e3:fb:f8:d5:8f:ef:82:e2:67:e6:
         56:cf:23:aa:a7:fc:23:75:a8:bc:1c:2b:39:7d:e0:1e:30:1e:
         fd:65:96:4b:29:22:30:9a:17:e3:94:95:1f:38:7f:90:3e:34:
         49:90:c8:76:3c:5b:22:17:3e:6b:f4:3e:2f:70:0f:7c:f7:c9:
         ca:2f:ea:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org