Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3137372e3138352e3234302e302f32312d3231203d3e20323633363233.roa
File:                     3137372e3138352e3234302e302f32312d3231203d3e20323633363233.roa (raw, json)
Hash identifier:          3xOhNEpKradudh3FnsquxUqMY235AA+fhB10KATej4c=
Subject key identifier:   72:7A:93:3B:06:EA:6A:17:9F:9E:71:6F:0B:D6:44:D9:62:D4:1A:55
Certificate issuer:       /CN=5C908AE2A50DFF743C0A2B041FD20DD3BC047668
Certificate serial:       4F86C7086DE3092E65CFDD7A3FEC7E50E0BE2F45
Authority key identifier: 5C:90:8A:E2:A5:0D:FF:74:3C:0A:2B:04:1F:D2:0D:D3:BC:04:76:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3137372e3138352e3234302e302f32312d3231203d3e20323633363233.roa
Signing time:             Tue 23 Jan 2024 13:19:44 +0000
ROA not before:           Tue 23 Jan 2024 13:14:44 +0000
ROA not after:            Tue 21 Jan 2025 13:19:44 +0000
asID:                     263623
IP address blocks:        177.185.240.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:86:c7:08:6d:e3:09:2e:65:cf:dd:7a:3f:ec:7e:50:e0:be:2f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C908AE2A50DFF743C0A2B041FD20DD3BC047668
        Validity
            Not Before: Jan 23 13:14:44 2024 GMT
            Not After : Jan 21 13:19:44 2025 GMT
        Subject: CN=727A933B06EA6A179F9E716F0BD644D962D41A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:66:a0:2e:78:17:ed:58:29:75:0c:fa:ee:ba:
                    d4:ea:45:de:ef:be:8e:02:c2:50:15:ba:f4:95:ee:
                    7d:bc:1b:38:ca:d6:78:83:11:c5:86:ce:cd:10:29:
                    2c:87:eb:07:7b:d4:8a:94:fc:d0:0b:3b:3c:14:03:
                    bf:e5:cc:3a:db:17:be:f3:68:29:ef:75:79:b2:2e:
                    ae:f8:be:5f:f9:92:38:86:81:6a:f5:e3:3d:85:ba:
                    32:bb:9e:0f:e4:fb:0d:b2:df:45:44:2d:b2:84:80:
                    a7:cf:cf:69:13:f9:bb:82:11:48:cd:0f:7a:9a:a5:
                    76:b0:57:c4:63:88:30:c0:17:0b:62:0b:c5:c8:7f:
                    99:fc:6a:6e:eb:fb:61:59:c1:3c:25:5b:4f:3b:11:
                    d4:46:da:e5:bf:2c:ed:75:9c:13:e7:cf:ca:4e:31:
                    b9:71:c2:f1:aa:13:2b:bf:94:9a:b2:70:6d:ad:cf:
                    64:5f:b8:a1:1d:7c:8c:03:da:a1:a8:b0:a2:55:d2:
                    5a:63:b8:9c:84:68:64:9e:36:83:f1:35:bf:cd:26:
                    de:9c:e8:20:f3:1d:95:8c:2c:3e:03:eb:bf:8a:e9:
                    fd:c4:0f:0c:92:7d:02:d1:bb:36:61:d9:f1:e2:76:
                    8a:1f:e0:04:c2:59:64:40:fc:5b:55:32:c4:60:c8:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7A:93:3B:06:EA:6A:17:9F:9E:71:6F:0B:D6:44:D9:62:D4:1A:55
            X509v3 Authority Key Identifier:
                keyid:5C:90:8A:E2:A5:0D:FF:74:3C:0A:2B:04:1F:D2:0D:D3:BC:04:76:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3137372e3138352e3234302e302f32312d3231203d3e20323633363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:f5:30:bd:ed:c3:35:ae:16:9b:17:32:63:54:5b:b9:39:a1:
         4f:06:b0:76:1a:62:76:45:8a:2c:c7:60:31:de:c5:01:d0:3e:
         1a:21:b5:30:d4:53:a2:aa:11:ef:1c:b8:47:b9:bd:80:57:fa:
         6b:a7:d3:6c:c5:21:05:bb:b2:03:c4:14:94:d3:7e:95:de:c4:
         03:9e:05:13:41:ab:73:1c:0e:ba:05:fa:6a:e8:ae:e7:1a:70:
         2f:90:60:20:40:43:cb:e1:51:f0:6b:0e:8d:20:83:c6:d0:70:
         d5:fb:45:da:14:3e:63:8b:93:d7:30:37:dd:a9:1f:ad:64:8a:
         64:51:03:4d:27:25:4b:63:ea:38:7b:d2:6e:b2:8f:d9:6d:5b:
         fa:f0:35:e6:aa:59:24:8f:2a:a3:33:bb:2b:04:6a:28:a3:ec:
         a6:68:1d:95:75:67:9c:88:dc:55:ce:92:10:98:39:9f:33:6e:
         90:2c:f6:58:48:5a:e9:38:54:c2:4b:b8:9d:6e:b6:33:be:f5:
         10:4b:76:a3:b7:1c:81:57:7c:76:ea:0d:b0:78:e0:ad:fd:81:
         9d:7c:5b:a2:32:df:59:f8:ef:58:5b:80:0f:e3:03:f8:02:12:
         24:68:ae:bd:fc:3a:04:db:4b:a8:cc:6b:33:70:ae:2c:ab:ad:
         31:ea:e1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org