Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/3137372e3232332e3134302e302f32322d3234203d3e20323731323039.roa
File:                     3137372e3232332e3134302e302f32322d3234203d3e20323731323039.roa (raw, json)
Hash identifier:          M0mdaZbNRJk+NRGNwZH2Om3xq18hpGv4gi3jUrcnmu8=
Subject key identifier:   35:ED:81:CF:78:5A:1E:70:3E:99:53:FA:01:46:E6:14:29:21:08:00
Certificate issuer:       /CN=4C98902FA2B24DD2F608B64BDECA68742431E9C5
Certificate serial:       74D2083E69E2BBE206BF4E271F7113F51724DB0A
Authority key identifier: 4C:98:90:2F:A2:B2:4D:D2:F6:08:B6:4B:DE:CA:68:74:24:31:E9:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C98902FA2B24DD2F608B64BDECA68742431E9C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/3137372e3232332e3134302e302f32322d3234203d3e20323731323039.roa
Signing time:             Wed 14 Feb 2024 16:56:38 +0000
ROA not before:           Wed 14 Feb 2024 16:51:38 +0000
ROA not after:            Wed 12 Feb 2025 16:56:38 +0000
asID:                     271209
IP address blocks:        177.223.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d2:08:3e:69:e2:bb:e2:06:bf:4e:27:1f:71:13:f5:17:24:db:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C98902FA2B24DD2F608B64BDECA68742431E9C5
        Validity
            Not Before: Feb 14 16:51:38 2024 GMT
            Not After : Feb 12 16:56:38 2025 GMT
        Subject: CN=35ED81CF785A1E703E9953FA0146E61429210800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:46:44:d5:2a:4f:aa:22:92:ed:39:2c:14:
                    3c:a6:b2:9a:53:f6:ee:83:56:9c:69:29:61:00:4f:
                    a0:c7:d3:4a:14:9a:79:47:07:26:76:ec:47:39:79:
                    8a:93:2b:84:26:67:e4:25:84:4d:77:7f:49:b0:ec:
                    ef:6d:2b:0a:57:1d:1c:dc:ae:18:b2:ef:09:a6:7f:
                    43:14:4a:a7:05:ff:8b:c9:8e:c9:b8:ba:1c:b2:9a:
                    56:99:ff:b0:aa:9a:a8:d5:f8:af:ad:3c:61:ee:4b:
                    56:b0:45:e0:08:57:1a:c6:6c:f8:72:a3:2b:ce:48:
                    b6:f8:c4:b7:9e:1d:06:63:9f:72:ee:24:b6:ca:56:
                    56:17:1d:44:e0:e0:e0:35:ad:64:e3:bc:ce:0d:c2:
                    d7:f1:7e:69:e3:35:df:d0:20:c2:fd:06:4f:01:87:
                    44:eb:da:83:c6:f2:cf:17:50:0e:dd:f4:78:72:a6:
                    e9:4d:10:38:52:f6:fe:fc:0a:41:3d:29:a6:26:b9:
                    f3:af:96:28:23:7c:ae:6e:63:cb:6c:4f:11:22:95:
                    24:9f:d6:ec:58:9e:6d:4f:ce:f9:22:e5:61:4b:7d:
                    cf:44:43:ed:b3:27:70:88:b8:66:5b:f4:72:c7:84:
                    c5:bf:f4:49:a1:b3:78:9a:e9:6f:51:d8:ce:80:4a:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:ED:81:CF:78:5A:1E:70:3E:99:53:FA:01:46:E6:14:29:21:08:00
            X509v3 Authority Key Identifier:
                keyid:4C:98:90:2F:A2:B2:4D:D2:F6:08:B6:4B:DE:CA:68:74:24:31:E9:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/4C98902FA2B24DD2F608B64BDECA68742431E9C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C98902FA2B24DD2F608B64BDECA68742431E9C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/3137372e3232332e3134302e302f32322d3234203d3e20323731323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:95:40:4a:b2:2b:71:7d:f3:c4:51:c0:55:a6:3e:de:45:9c:
         dd:17:b5:2e:61:ba:b6:88:58:f4:d5:b8:e0:35:c7:1a:ee:8d:
         de:c9:a0:01:71:b2:b2:33:09:4e:a1:98:b7:97:fe:20:53:c6:
         21:f4:19:9a:08:78:1c:13:a2:82:b4:40:a7:87:a8:1d:b5:b9:
         8b:e4:e3:23:24:ec:4f:e6:bf:a8:d0:b0:37:d2:cf:f8:11:f3:
         30:59:b5:39:69:3b:90:70:f3:09:dc:92:a9:88:cd:ad:f4:bb:
         7c:45:d0:58:16:c1:87:44:ad:83:ed:4b:99:09:71:0d:3d:a9:
         87:3a:2f:e6:79:b7:6c:03:77:34:12:c7:c3:69:93:13:22:ff:
         dd:49:a0:8c:56:22:de:31:39:b6:25:08:a2:4f:f1:ac:e9:8c:
         6e:1a:d7:e6:76:5a:f0:c7:7e:97:23:23:49:aa:6a:7a:92:d1:
         99:7e:fe:68:22:27:72:23:79:77:35:74:0a:e9:7a:9a:9e:60:
         1e:cc:8d:7b:9f:36:46:44:dc:27:71:02:5e:99:79:30:6b:18:
         39:5e:dc:16:9a:d4:b9:06:1e:a3:d2:34:a9:df:73:2d:e7:5b:
         9b:cd:3a:22:d9:42:c8:9f:a7:21:81:10:90:d7:b8:25:61:8b:
         d2:d8:ae:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org