Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/3137372e3232312e3232342e302f32302d3234203d3e203533303232.roa
File:                     3137372e3232312e3232342e302f32302d3234203d3e203533303232.roa (raw, json)
Hash identifier:          2QeiSSKoz/4OJShAR2C/ehW9LNLZOqU9hpJEyS+Gmrk=
Subject key identifier:   E5:26:6A:AF:D2:67:37:54:2B:11:AE:E5:2C:AB:C6:E9:7D:DC:FB:47
Certificate issuer:       /CN=AA5F634140D8367E44489AD2BAB915D8FD28B8E0
Certificate serial:       452E339D16E9AC089B2D8DD43B469C313B6CEDCD
Authority key identifier: AA:5F:63:41:40:D8:36:7E:44:48:9A:D2:BA:B9:15:D8:FD:28:B8:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/3137372e3232312e3232342e302f32302d3234203d3e203533303232.roa
Signing time:             Tue 19 Mar 2024 14:10:09 +0000
ROA not before:           Tue 19 Mar 2024 14:05:09 +0000
ROA not after:            Tue 18 Mar 2025 14:10:09 +0000
asID:                     53022
IP address blocks:        177.221.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2e:33:9d:16:e9:ac:08:9b:2d:8d:d4:3b:46:9c:31:3b:6c:ed:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5F634140D8367E44489AD2BAB915D8FD28B8E0
        Validity
            Not Before: Mar 19 14:05:09 2024 GMT
            Not After : Mar 18 14:10:09 2025 GMT
        Subject: CN=E5266AAFD26737542B11AEE52CABC6E97DDCFB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:39:b2:f7:72:0b:51:a0:4e:43:5c:c3:28:
                    8f:01:64:12:27:95:41:40:b6:40:03:fd:a9:74:e6:
                    10:d4:73:61:e7:a0:91:6e:d2:e3:91:35:8c:8c:be:
                    7f:2c:e8:dc:d4:14:56:6a:9f:e2:dd:aa:51:28:d7:
                    e1:cb:66:7e:8b:dd:a4:1a:39:64:03:7f:13:f9:bd:
                    63:b7:13:b0:1f:39:b6:0e:f9:9b:ed:f7:7c:6a:27:
                    f9:18:c4:4c:a0:74:5e:fe:b2:01:74:61:01:2f:08:
                    cb:6e:13:28:11:1f:89:91:3d:08:1d:06:a9:6b:02:
                    50:5d:db:92:05:6d:43:c2:09:ea:dd:39:d8:bf:a4:
                    8a:35:ed:e1:41:40:f6:3b:19:cb:bc:a3:53:d2:97:
                    78:3b:99:92:82:f8:b8:53:94:80:fd:27:71:37:7a:
                    53:0d:b8:d7:9f:9d:f9:24:4d:83:3c:b8:3c:13:0c:
                    10:bd:fd:30:80:b8:72:72:dd:32:a1:6d:73:cf:64:
                    5f:7c:1d:3b:e0:ef:84:80:55:7e:d2:67:77:1c:44:
                    cd:59:c6:88:af:d3:18:9c:f6:f4:27:6e:d7:3e:aa:
                    b3:8f:f2:39:e4:97:2b:0f:60:02:61:75:25:d4:67:
                    fa:34:54:cd:27:9c:ea:cc:1b:a8:3d:fd:d7:aa:64:
                    88:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:26:6A:AF:D2:67:37:54:2B:11:AE:E5:2C:AB:C6:E9:7D:DC:FB:47
            X509v3 Authority Key Identifier:
                keyid:AA:5F:63:41:40:D8:36:7E:44:48:9A:D2:BA:B9:15:D8:FD:28:B8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/3137372e3232312e3232342e302f32302d3234203d3e203533303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:01:ff:1c:95:4a:64:4b:88:3b:a0:83:b5:a1:9d:4f:c4:e5:
         a2:68:7a:ce:ac:07:ef:d7:44:4e:c1:5b:8f:c8:d3:d1:48:8e:
         07:b6:93:7a:ec:37:9e:46:01:c3:60:43:e9:4d:ac:b6:3e:02:
         d7:de:59:3b:e5:e4:12:68:f8:4f:03:3f:50:4c:16:c4:c5:91:
         5c:71:ea:5f:89:06:a0:de:81:4a:13:41:24:0e:f7:18:18:a0:
         8c:95:c4:c6:94:e8:4e:b0:0a:9f:40:52:a9:b3:0f:e4:3c:e3:
         01:df:06:f2:98:bf:87:68:fb:34:34:cb:04:8b:e7:62:d3:7a:
         03:8a:38:36:ba:27:e2:b2:c6:ac:5d:94:fc:25:2d:e0:16:b4:
         c5:d6:ad:88:be:a5:72:29:52:60:64:84:ae:41:8c:e6:5c:9e:
         bc:81:35:f7:7f:4d:cc:99:21:68:94:19:00:7f:0d:65:72:ef:
         69:34:3e:d2:36:a6:35:a1:e4:60:fa:f6:2e:1c:4b:40:d9:14:
         db:9c:50:85:cb:5c:25:ef:be:cd:ea:0e:aa:94:0f:0b:b5:ef:
         db:67:89:e5:50:6c:4b:f8:0f:51:fa:1f:e3:26:62:d7:7c:af:
         6b:47:7a:88:37:c8:3b:47:85:a2:30:35:aa:9d:53:9e:cf:16:
         a2:ed:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org