Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3131312e302f32342d3234203d3e20323633363134.roa
File:                     3137372e32332e3131312e302f32342d3234203d3e20323633363134.roa (raw, json)
Hash identifier:          VTTTLZNt/TluB1AG22OEHdeZFzmp2fDqWIadk2xF/sA=
Subject key identifier:   D7:A1:71:D8:7C:54:95:E1:C8:D0:90:98:A4:26:11:BE:B9:40:AD:A7
Certificate issuer:       /CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
Certificate serial:       4B9D37B1A32FE9D913410D616E337487F2885EE5
Authority key identifier: 0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3131312e302f32342d3234203d3e20323633363134.roa
Signing time:             Fri 09 Feb 2024 17:18:59 +0000
ROA not before:           Fri 09 Feb 2024 17:13:59 +0000
ROA not after:            Fri 07 Feb 2025 17:18:59 +0000
asID:                     263614
IP address blocks:        177.23.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9d:37:b1:a3:2f:e9:d9:13:41:0d:61:6e:33:74:87:f2:88:5e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
        Validity
            Not Before: Feb  9 17:13:59 2024 GMT
            Not After : Feb  7 17:18:59 2025 GMT
        Subject: CN=D7A171D87C5495E1C8D09098A42611BEB940ADA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:ba:bf:cc:c1:de:c6:4d:06:83:aa:03:ec:
                    6d:5b:a7:51:76:d1:3e:53:28:39:dc:2d:72:83:8e:
                    12:50:e5:40:52:09:8b:e7:ad:e3:57:8d:c2:4e:c9:
                    07:35:bc:39:cf:a7:da:ba:dd:fa:32:8f:c5:d7:9b:
                    9e:ac:22:cf:00:5e:b2:01:87:14:44:ab:63:f7:04:
                    ed:e0:b7:76:1e:3a:27:fa:b4:3e:d6:3d:cc:0c:70:
                    2b:fa:a4:a9:15:ce:ed:67:ce:56:12:6a:03:1f:96:
                    98:f8:ed:67:c3:cf:ea:60:5f:65:a6:1b:db:79:6d:
                    77:cc:bd:f1:f3:69:c3:8f:5b:a2:ff:84:cf:93:94:
                    90:d3:95:c9:e0:5f:af:38:0c:bb:62:bd:69:31:c9:
                    27:f0:36:23:59:58:eb:a9:bb:ef:eb:a2:f6:0c:a6:
                    f2:de:ad:2c:a7:62:a6:a3:fa:70:4a:b0:e1:ae:98:
                    df:49:3a:a4:80:98:3d:ea:6b:46:86:00:4c:97:f3:
                    87:f7:16:1b:27:62:91:b7:4d:6a:66:6d:f2:9f:54:
                    20:13:d2:06:00:95:82:dd:6f:9d:36:a1:08:68:ec:
                    b2:38:4e:26:90:3b:93:3c:51:5b:db:c7:6c:bc:24:
                    c0:4d:49:10:5d:1f:e4:01:b5:60:4d:fb:66:85:0c:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A1:71:D8:7C:54:95:E1:C8:D0:90:98:A4:26:11:BE:B9:40:AD:A7
            X509v3 Authority Key Identifier:
                keyid:0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3131312e302f32342d3234203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:44:0d:29:e8:b7:e2:d3:55:1e:9c:05:94:29:22:57:0d:76:
         fa:29:22:d4:ef:09:45:e8:c6:a8:ed:54:66:7e:aa:bd:69:2a:
         69:22:6e:02:d9:59:43:25:d7:66:2b:40:13:b9:1b:b5:72:af:
         1e:28:a3:28:4a:dc:37:80:d7:d4:8f:3a:2a:cf:f7:8d:a0:13:
         80:bd:02:ff:c9:70:a8:f3:e5:50:15:06:82:09:96:55:0a:10:
         4f:91:45:4e:24:c8:06:41:61:bc:a0:a2:42:f2:c4:8b:f8:83:
         47:54:67:67:87:01:cc:17:ae:16:bf:fb:61:33:c2:86:df:3d:
         90:c7:19:c1:e6:03:f2:7a:67:b4:62:2f:ab:e1:f6:a7:0d:ed:
         1f:3e:cb:9a:64:12:7f:04:12:78:fe:48:c6:3c:20:1e:70:82:
         f4:48:0e:b8:94:b6:b3:5a:50:55:78:5f:ae:8b:2c:56:54:78:
         aa:c9:33:60:88:ba:8c:d8:a3:80:ca:2c:bb:c7:37:fd:fa:bd:
         ed:db:0f:ab:72:3d:a6:d7:1b:8c:d5:45:d5:ea:74:3e:93:4b:
         09:20:fa:f0:61:fa:2e:89:6f:ac:88:7a:a2:02:37:70:3c:1a:
         2c:71:fb:ca:91:08:05:f1:a2:89:79:3d:b5:7a:ec:19:3e:d6:
         64:87:db:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org