Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0/3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa
File:                     3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa (raw, json)
Hash identifier:          iU3mo1KtCizfWagk6Z50Tkt0RMsNSbNwgpmep1nlFX0=
Subject key identifier:   36:90:7B:1B:46:57:B1:64:1B:9E:02:04:FC:F8:7D:D1:70:1F:CF:3C
Certificate issuer:       /CN=C1B003996E3E8D38EAE8A4E943863B4777429D8C
Certificate serial:       50B47A34F54E4CEA0C5FA9834389BFA622C513D4
Authority key identifier: C1:B0:03:99:6E:3E:8D:38:EA:E8:A4:E9:43:86:3B:47:77:42:9D:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B003996E3E8D38EAE8A4E943863B4777429D8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0/3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa
Signing time:             Thu 09 Nov 2023 14:47:49 +0000
ROA not before:           Thu 09 Nov 2023 14:42:49 +0000
ROA not after:            Thu 07 Nov 2024 14:47:49 +0000
asID:                     271002
IP address blocks:        177.223.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b4:7a:34:f5:4e:4c:ea:0c:5f:a9:83:43:89:bf:a6:22:c5:13:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B003996E3E8D38EAE8A4E943863B4777429D8C
        Validity
            Not Before: Nov  9 14:42:49 2023 GMT
            Not After : Nov  7 14:47:49 2024 GMT
        Subject: CN=36907B1B4657B1641B9E0204FCF87DD1701FCF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:19:25:19:bb:5b:b4:2a:7f:a6:32:03:fb:
                    d5:ce:f1:09:14:eb:78:29:f3:2d:0b:69:b0:1f:b0:
                    6f:6d:e5:f8:c0:be:60:03:b0:c5:77:31:7f:61:ef:
                    a3:01:9a:87:76:3e:48:9e:0e:da:50:d3:26:95:fb:
                    41:12:76:03:cd:f3:c4:69:51:b3:a5:01:61:6a:ab:
                    15:8b:e2:3d:27:da:40:7b:48:b2:08:7b:d6:67:d9:
                    b0:6a:9d:11:ff:e7:21:87:91:44:e0:e2:52:d4:66:
                    55:5a:5e:4f:17:f4:94:65:a1:70:2b:34:63:6b:92:
                    c9:aa:a6:d6:f4:b8:21:3c:fc:5b:83:22:60:0f:4d:
                    b2:91:50:f9:dc:7d:9a:47:94:5d:52:a2:fd:19:3f:
                    87:71:f0:a9:5a:52:43:a5:af:84:1e:8e:df:2b:72:
                    3a:b9:cf:f2:55:28:8c:8a:18:35:8a:58:22:6a:5b:
                    d8:f7:de:34:ff:b2:1a:ad:f4:b4:88:91:6b:39:7f:
                    c6:e0:6d:44:8f:e6:e1:a2:c6:42:6d:3d:04:6c:58:
                    0b:1e:6f:80:de:87:d6:ab:8c:10:67:a6:03:2a:50:
                    78:1c:01:75:b0:59:a4:b8:d8:d9:ce:bc:f2:2e:89:
                    a7:da:d0:44:9d:5d:88:35:48:0c:d3:3e:2b:7a:42:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:90:7B:1B:46:57:B1:64:1B:9E:02:04:FC:F8:7D:D1:70:1F:CF:3C
            X509v3 Authority Key Identifier:
                keyid:C1:B0:03:99:6E:3E:8D:38:EA:E8:A4:E9:43:86:3B:47:77:42:9D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0/C1B003996E3E8D38EAE8A4E943863B4777429D8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B003996E3E8D38EAE8A4E943863B4777429D8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0/3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:2b:e3:4c:64:11:18:59:fc:85:8c:7b:5a:fe:bd:32:b8:f0:
         6d:13:d7:a6:18:16:47:aa:f0:b9:d0:4d:e1:e7:db:67:17:d5:
         47:3a:4e:9c:0a:da:51:84:4c:72:17:b0:7d:c7:93:b8:d7:02:
         65:6f:52:fa:ac:24:45:7f:e5:51:e4:3c:47:b6:81:8e:be:22:
         ae:b6:1c:78:a9:4c:e5:be:cb:5e:87:f5:7e:16:04:e8:8b:a4:
         a3:14:f2:6f:e1:90:5d:96:00:9a:99:2a:70:24:57:72:94:1f:
         fa:a0:2b:f9:f8:a8:1f:4d:7d:f7:94:88:2f:0c:65:d2:dc:aa:
         d1:d4:74:41:e0:71:fa:55:8a:93:e0:4e:0b:b7:a4:bd:3f:1d:
         4b:3f:60:f6:81:73:ca:2e:22:b9:3d:5d:5a:d9:8a:4c:93:e3:
         16:4c:53:83:55:11:35:b7:27:64:48:5e:4c:04:88:0e:68:4c:
         74:a6:08:01:ef:95:a1:d0:6e:45:5e:26:e7:fd:36:54:c1:d2:
         0e:3b:3a:7d:8d:b6:9c:02:6c:db:a8:6e:29:c7:02:be:56:4e:
         c7:e2:11:68:c8:fa:38:42:b1:2c:f8:fc:09:4c:04:e7:45:39:
         d2:4b:0d:1e:0b:5d:58:d1:b4:04:eb:89:50:52:5e:b3:b9:c0:
         ad:fe:e5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org