Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e34342e3139322e302f32302d3234203d3e20323632393037.roa
File:                     3137372e34342e3139322e302f32302d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          jHK/4BluYjffTxNjzJ1ysRJdbkd6o1mVbIKaNd98BXc=
Subject key identifier:   C3:2A:81:B0:ED:23:C7:88:55:78:C8:DF:70:27:75:B5:0A:D2:C8:3D
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       4B8B02EE199F2DB294805F4B4DCB3F0A677782CE
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e34342e3139322e302f32302d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:21 +0000
ROA not before:           Sat 03 Feb 2024 12:48:21 +0000
ROA not after:            Sat 01 Feb 2025 12:53:21 +0000
asID:                     262907
IP address blocks:        177.44.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8b:02:ee:19:9f:2d:b2:94:80:5f:4b:4d:cb:3f:0a:67:77:82:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:21 2024 GMT
            Not After : Feb  1 12:53:21 2025 GMT
        Subject: CN=C32A81B0ED23C7885578C8DF702775B50AD2C83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:bd:8d:57:ee:6e:03:7c:35:ec:64:e9:63:
                    f6:7e:71:e2:9e:fa:e0:fd:c4:21:ea:ad:37:f3:79:
                    7d:8c:b2:58:85:32:0c:2a:bf:38:27:11:c2:c0:26:
                    c6:4c:ec:f3:77:06:a1:43:1a:a7:31:0f:3f:83:0c:
                    98:44:0d:c7:80:44:40:4d:06:50:6c:1a:3b:89:bc:
                    b5:26:9c:6a:86:94:0f:fd:fc:88:49:8c:a0:b2:1c:
                    09:07:65:46:1d:fc:ce:76:56:90:fd:cb:fe:36:04:
                    41:d8:e9:11:01:e4:8e:71:e5:0c:d5:84:60:49:bb:
                    03:95:69:1b:d9:d3:95:ed:b0:73:8d:45:40:da:31:
                    a5:ed:68:ee:e0:cf:bd:d3:2b:f0:48:6e:a3:4c:0d:
                    cf:9b:85:26:49:87:51:84:41:cf:1a:f8:3a:ff:7b:
                    fe:36:1a:01:01:7f:09:84:01:30:e7:47:29:9f:e9:
                    80:48:cc:aa:40:10:95:1d:c4:11:41:f4:69:a1:d4:
                    1e:56:7c:f8:84:81:f9:a3:17:9b:56:5f:15:83:82:
                    40:5b:1f:22:61:e4:d4:14:40:f8:d9:a9:2e:65:35:
                    65:ab:99:91:39:42:ac:65:8e:4d:80:8c:02:31:5e:
                    be:98:27:d9:df:2f:5d:81:df:ad:a9:22:0b:45:dc:
                    fc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2A:81:B0:ED:23:C7:88:55:78:C8:DF:70:27:75:B5:0A:D2:C8:3D
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e34342e3139322e302f32302d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1e:d0:4a:91:b0:0d:90:ad:76:70:b5:08:74:58:0e:e8:65:91:
         0e:24:a1:83:1b:1a:ab:91:d1:c8:76:a2:fb:1c:f4:19:a8:44:
         0f:0e:51:ad:65:f2:ab:bb:a8:1e:ac:a7:02:1b:11:eb:72:c4:
         ad:15:e3:90:bf:81:7d:93:c0:2b:d9:bb:40:df:09:50:d4:44:
         1c:19:aa:06:46:82:ff:0b:88:37:1e:d4:38:c0:a9:50:66:f3:
         6b:d4:f5:54:6f:e5:0f:03:95:c2:21:43:8b:19:c9:ec:b3:46:
         1e:f3:e5:0f:d6:9a:75:25:f0:78:46:2d:a0:da:36:aa:6d:91:
         d8:d2:23:6a:0e:71:a4:c7:be:81:d0:f2:b3:db:62:0d:2d:51:
         d0:b3:fb:98:35:98:10:32:f8:35:d4:b2:73:1a:3a:dc:9f:79:
         f4:10:4e:4c:98:30:85:ab:63:a9:cf:e5:2e:a5:c6:8d:02:f5:
         e9:c6:a2:38:e6:19:02:fc:ec:d5:91:82:68:55:ad:cf:72:2a:
         5e:4c:96:6d:a2:56:c7:82:48:b1:4a:56:98:3f:95:46:0b:5f:
         6a:5c:0e:d6:cd:52:28:e1:21:5e:19:47:bb:08:b7:7b:d9:68:
         58:df:fb:12:b2:88:34:be:d3:6e:12:3b:71:f5:a7:f2:07:2b:
         17:6b:bd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org