Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/3137372e3132342e3135372e302f32342d3234203d3e203631363032.roa
File:                     3137372e3132342e3135372e302f32342d3234203d3e203631363032.roa (raw, json)
Hash identifier:          itRC36ii2G+FiESOeM+5/sVLZexgD+3zBjxPt616Dyo=
Subject key identifier:   39:52:A1:19:5F:D5:7A:98:7D:7D:9C:12:48:3C:D6:E7:1A:9C:44:C3
Certificate issuer:       /CN=81162F75A7037BA4B812202269BFCFBA63E840FE
Certificate serial:       38D503B1BF181E9F661CE539BDDDB0B49E280D3B
Authority key identifier: 81:16:2F:75:A7:03:7B:A4:B8:12:20:22:69:BF:CF:BA:63:E8:40:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81162F75A7037BA4B812202269BFCFBA63E840FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/3137372e3132342e3135372e302f32342d3234203d3e203631363032.roa
Signing time:             Wed 17 Jan 2024 09:05:05 +0000
ROA not before:           Wed 17 Jan 2024 09:00:05 +0000
ROA not after:            Wed 15 Jan 2025 09:05:05 +0000
asID:                     61602
IP address blocks:        177.124.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d5:03:b1:bf:18:1e:9f:66:1c:e5:39:bd:dd:b0:b4:9e:28:0d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81162F75A7037BA4B812202269BFCFBA63E840FE
        Validity
            Not Before: Jan 17 09:00:05 2024 GMT
            Not After : Jan 15 09:05:05 2025 GMT
        Subject: CN=3952A1195FD57A987D7D9C12483CD6E71A9C44C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:9e:ac:d7:04:0b:e8:c3:1f:ac:21:25:35:
                    25:5d:ba:fa:37:b5:b4:98:1e:34:02:20:68:d1:95:
                    f5:13:96:57:93:86:75:ec:40:25:e5:f9:c1:c6:e0:
                    15:6a:03:74:4b:3b:fe:1d:4f:3a:a0:d2:aa:30:00:
                    aa:4c:c0:b5:b2:4e:a0:65:ed:a2:0f:64:64:24:3d:
                    55:65:cd:b2:b8:4d:82:ca:2f:67:62:56:b9:d4:4e:
                    2a:5d:10:dd:1d:4e:3e:93:5f:10:37:33:3a:15:e1:
                    74:7f:75:1a:53:13:66:93:ef:49:cb:82:f7:17:0b:
                    f4:76:6c:65:c4:e5:b4:a4:a1:2e:db:0c:3d:d6:e2:
                    a5:f6:83:84:2b:d1:95:b8:ce:bf:04:04:5c:ec:9b:
                    c0:d5:24:9e:b7:c5:7c:a8:bd:e3:32:b7:9f:a1:50:
                    49:4a:e2:a0:42:4e:2f:b2:6b:d7:6e:f4:66:3d:f5:
                    8a:5e:77:06:e3:ef:13:99:60:ce:3b:a1:7f:fe:b6:
                    fe:3d:16:4d:ea:b0:4e:70:67:8b:dc:d5:69:63:1b:
                    97:96:de:9b:2b:44:b4:95:72:70:f9:b7:68:e2:61:
                    46:77:e6:f3:6f:70:09:6a:c9:6e:36:d5:d3:ac:09:
                    ff:80:ad:19:07:39:12:5d:e5:65:2f:a8:2a:dd:c7:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:52:A1:19:5F:D5:7A:98:7D:7D:9C:12:48:3C:D6:E7:1A:9C:44:C3
            X509v3 Authority Key Identifier:
                keyid:81:16:2F:75:A7:03:7B:A4:B8:12:20:22:69:BF:CF:BA:63:E8:40:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/81162F75A7037BA4B812202269BFCFBA63E840FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81162F75A7037BA4B812202269BFCFBA63E840FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/3137372e3132342e3135372e302f32342d3234203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:7c:42:04:6f:18:dc:8c:02:94:20:8d:b0:f5:d7:31:46:b3:
         67:22:7a:63:6d:ac:8d:50:ff:b8:7d:cf:0a:c2:1a:c2:6d:ff:
         14:db:84:39:a2:55:2f:69:2d:1a:8d:f3:37:77:cc:7f:e5:ef:
         bd:1e:89:28:87:94:e1:c8:33:6a:a4:15:6e:5e:c4:99:3f:af:
         66:73:d8:77:95:81:8f:09:62:cb:c5:de:a2:74:82:ce:74:6e:
         e0:cf:07:f8:a6:95:2c:3d:ca:55:e5:37:f9:e6:83:fe:4b:8d:
         58:28:76:56:10:42:37:59:57:9c:64:d8:05:7d:3f:67:ef:e7:
         37:fa:d1:6f:0e:be:28:6f:44:c8:8c:55:03:fe:f2:cb:e7:39:
         ca:37:f1:e4:40:69:23:f7:3b:e4:e6:e6:e9:6e:14:6d:e5:c6:
         28:a8:1e:89:ef:48:ff:01:d0:d8:f2:58:72:a6:af:7d:2e:71:
         8c:98:16:7a:d8:cf:9f:85:63:8b:f9:7e:6f:69:83:45:d6:20:
         10:53:aa:02:6d:38:b6:88:7c:83:cc:1c:27:80:7a:d1:aa:48:
         e7:7a:d0:3f:91:2b:69:80:19:46:e5:58:c3:f6:da:cf:a2:05:
         55:cc:f7:53:a8:40:1a:4d:46:43:cf:be:76:e3:49:22:96:f0:
         b6:86:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org