Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e33392e3234382e302f32312d3234203d3e203533313335.roa
File:                     3137372e33392e3234382e302f32312d3234203d3e203533313335.roa (raw, json)
Hash identifier:          poRpYxVX2my9BfTs4Y2Iv3209YUVXXuJUrSos7Pvcmo=
Subject key identifier:   ED:05:96:45:D1:8B:2B:10:65:5A:8E:9E:36:0D:BA:69:4A:5B:6E:72
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       793A7F2E8E2CAC2281A2FB11D3F6B2763A178155
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e33392e3234382e302f32312d3234203d3e203533313335.roa
Signing time:             Sat 03 Feb 2024 12:53:22 +0000
ROA not before:           Sat 03 Feb 2024 12:48:22 +0000
ROA not after:            Sat 01 Feb 2025 12:53:22 +0000
asID:                     53135
IP address blocks:        177.39.248.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3a:7f:2e:8e:2c:ac:22:81:a2:fb:11:d3:f6:b2:76:3a:17:81:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:22 2024 GMT
            Not After : Feb  1 12:53:22 2025 GMT
        Subject: CN=ED059645D18B2B10655A8E9E360DBA694A5B6E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:e6:1a:da:32:be:7a:4e:19:44:c4:1a:41:
                    b8:43:d6:35:e6:e2:6e:03:12:40:51:d1:b5:a3:fb:
                    56:12:ee:1d:a7:e5:a3:6b:8b:c5:08:57:db:95:1a:
                    ef:6f:8d:b4:5d:a9:0e:e1:f9:ce:b9:fb:78:9a:52:
                    e1:1f:2e:51:57:ba:ac:00:7e:60:8a:74:5d:b9:f9:
                    ab:13:d5:29:32:dd:d8:c4:51:91:52:67:31:ef:e8:
                    22:3e:42:d3:c1:9a:a4:66:d1:90:45:0c:95:95:2d:
                    d0:43:7a:0c:97:28:ee:66:6d:ba:83:9e:2d:4f:83:
                    b8:60:7f:50:f6:49:60:02:22:82:af:ee:eb:5e:37:
                    9e:b3:31:20:f4:15:ba:d8:53:a2:52:2f:c3:89:83:
                    36:6d:12:b4:61:1d:c0:db:75:db:44:20:20:a5:d8:
                    83:36:b7:aa:ab:91:41:03:34:bd:d0:d0:2a:48:d7:
                    76:2a:76:88:7b:cf:70:a6:e5:26:d5:2d:c4:c6:cb:
                    46:5d:f5:96:4c:98:aa:05:e1:b5:dd:ba:55:ab:bd:
                    7a:7b:dd:cf:9e:3e:37:f1:7d:b0:4d:53:26:23:dd:
                    81:b7:a3:08:29:83:69:08:f8:c0:6b:64:05:22:44:
                    5c:66:1d:22:2e:75:31:02:93:7a:f4:75:41:e9:99:
                    40:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:05:96:45:D1:8B:2B:10:65:5A:8E:9E:36:0D:BA:69:4A:5B:6E:72
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e33392e3234382e302f32312d3234203d3e203533313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a9:7c:79:8d:24:4e:50:bb:75:f9:c6:fe:c8:12:b1:a5:08:d9:
         29:bc:97:54:15:64:63:54:c6:eb:1f:70:d4:0d:ef:b2:13:0b:
         a5:5c:a3:60:c7:71:3c:e3:5a:9f:1f:c9:cd:d5:4d:08:fa:cd:
         d5:65:eb:53:34:ae:d7:7f:95:5b:a0:a2:29:7d:7c:67:ee:5c:
         04:40:e6:45:2b:b3:11:a8:c3:34:5a:9e:5f:ea:42:ab:61:0f:
         b3:7b:4f:c8:a3:64:d0:85:b9:d6:37:3f:c0:ab:db:5a:d1:c7:
         8b:1c:f7:91:9c:d2:22:ae:3e:94:53:81:8f:a8:06:18:6f:6e:
         29:59:78:18:c9:47:cc:5c:34:6d:1f:f2:4f:57:ab:b6:d6:a8:
         c9:1a:3b:1f:9b:36:ac:3c:79:96:59:e4:80:65:4e:ab:e0:99:
         83:62:17:88:75:74:21:6a:fb:f8:53:92:a6:e8:68:77:a7:94:
         0b:17:6f:2e:88:23:48:2f:60:60:d1:6b:96:df:fb:e4:8c:bf:
         1b:10:dc:c8:35:3b:74:7a:ce:74:59:28:bb:20:4b:a0:08:c1:
         70:a6:60:d7:90:3b:b6:f3:56:49:60:d3:8b:d9:b8:55:53:c6:
         de:88:f2:d7:ee:2c:07:76:69:be:4a:6b:7c:d3:cd:6b:a6:a1:
         03:78:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org