Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3136302e302f32312d3234203d3e20323632323838.roa
File:                     3137372e3135342e3136302e302f32312d3234203d3e20323632323838.roa (raw, json)
Hash identifier:          XLM7U0FGWclxYk5+SV36jJ8OIjtBwO4vwGfHbULIaU4=
Subject key identifier:   E4:6C:EB:CE:3A:F5:94:A7:18:19:26:2C:72:4E:5E:CE:69:57:B4:DF
Certificate issuer:       /CN=1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5
Certificate serial:       649DD8DF4CF289CA981B4481293270CC9B281158
Authority key identifier: 16:54:C6:91:18:D9:AB:EA:0E:ED:EB:FD:99:B8:4C:5E:C5:08:3F:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3136302e302f32312d3234203d3e20323632323838.roa
Signing time:             Thu 08 Jul 2021 17:40:42 +0000
ROA not before:           Thu 08 Jul 2021 17:35:42 +0000
ROA not after:            Thu 07 Jul 2022 17:40:42 +0000
asID:                     262288
IP address blocks:        177.154.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9d:d8:df:4c:f2:89:ca:98:1b:44:81:29:32:70:cc:9b:28:11:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5
        Validity
            Not Before: Jul  8 17:35:42 2021 GMT
            Not After : Jul  7 17:40:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:5e:f6:61:3c:8e:39:bb:d4:6e:af:90:a9:
                    bb:25:c3:bc:e9:85:9a:21:88:8f:f0:9d:bc:7d:74:
                    ec:4e:88:0d:c2:d1:a6:cd:c0:b9:9d:ab:97:95:8b:
                    59:90:c1:25:96:3d:9a:4f:4e:6e:25:85:05:7e:d7:
                    f9:03:d0:33:80:94:b3:6a:f9:f2:93:cc:89:87:f5:
                    ce:73:ae:47:82:d1:de:17:85:a2:c9:65:52:05:49:
                    dd:c8:35:09:7a:29:12:ea:cc:6e:b9:de:88:fe:53:
                    9e:0e:32:3f:bf:ae:c6:7e:ad:ef:f6:d1:71:15:47:
                    6c:9d:55:74:c2:c5:5b:21:2a:b8:f7:92:da:a7:b9:
                    15:c1:4f:22:03:ad:01:de:2e:03:b5:a4:6a:6c:bb:
                    57:4c:49:18:07:b2:84:5d:45:9a:b1:ff:54:1b:85:
                    57:e9:67:62:33:7e:f6:fa:85:60:3b:cd:7a:9f:a3:
                    0f:2d:10:3b:41:08:ee:d7:f0:d3:65:8f:ca:80:d7:
                    26:82:82:e0:ce:6c:5f:1e:ec:5f:fe:76:44:8a:62:
                    7c:31:91:b3:d9:9e:f5:d9:21:e9:50:04:74:d0:9a:
                    6f:67:b9:1b:d6:8c:2a:f9:dc:74:f5:22:98:98:fd:
                    e6:71:ee:04:1b:66:8b:b6:16:99:0b:15:a6:25:3c:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6C:EB:CE:3A:F5:94:A7:18:19:26:2C:72:4E:5E:CE:69:57:B4:DF
            X509v3 Authority Key Identifier:
                keyid:16:54:C6:91:18:D9:AB:EA:0E:ED:EB:FD:99:B8:4C:5E:C5:08:3F:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/3137372e3135342e3136302e302f32312d3234203d3e20323632323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b2:fb:18:80:aa:af:d5:e6:e6:cd:e6:e1:43:86:4f:41:9e:2d:
         67:c9:78:91:d6:cf:f6:a1:d4:fa:04:61:13:98:1a:a7:95:49:
         b3:4c:cf:12:e9:d9:04:3c:9b:ff:36:f5:c8:7c:28:d0:81:b5:
         48:2a:fd:0a:28:73:e0:a1:58:4d:01:1e:f7:9b:df:71:8b:db:
         5e:9e:4c:0b:dc:1d:d2:63:36:fe:72:64:73:fa:d2:6f:b3:0c:
         f7:90:e3:3f:e1:36:87:ff:61:2d:e6:1d:a7:7d:c3:83:26:13:
         46:e5:02:ee:ff:f9:ea:7f:54:93:4f:a2:75:f9:50:9b:d8:8c:
         c7:ce:1f:37:25:d3:d6:79:9b:01:36:7c:4a:0c:d0:a2:f3:e0:
         b3:68:ca:3d:31:64:fd:27:13:05:33:e4:7a:ac:1f:f5:fa:0a:
         b1:07:cc:68:dc:7b:48:5a:28:e6:b5:89:3e:ca:c4:52:3e:44:
         69:3c:44:b2:7f:23:28:e9:5f:38:6d:4a:22:2c:86:a8:5c:7e:
         32:53:e6:a7:23:ef:38:70:e4:2d:a5:58:8f:5b:21:3f:33:94:
         46:07:dd:98:cc:e9:52:07:7f:e6:a8:fb:a6:25:ac:8a:ed:de:
         f0:d5:94:94:e2:ab:fa:d1:72:59:88:47:63:79:66:4b:d1:b9:
         5c:cd:db:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org