Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3137372e3133362e3131322e302f32302d3234203d3e203238313836.roa
File:                     3137372e3133362e3131322e302f32302d3234203d3e203238313836.roa (raw, json)
Hash identifier:          phM3SKvcNiT1bl6YQ96LPItKonIiRCq8vK4LodH/Qjo=
Subject key identifier:   F1:FA:3A:61:7E:EE:E8:67:BF:84:A7:A6:C8:2A:A8:D6:48:88:F3:72
Certificate issuer:       /CN=C42748FC04141E28BA6F90BFB14A645D517FEEFC
Certificate serial:       433AB1DD571E38D6166B199704B4BB5550586117
Authority key identifier: C4:27:48:FC:04:14:1E:28:BA:6F:90:BF:B1:4A:64:5D:51:7F:EE:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C42748FC04141E28BA6F90BFB14A645D517FEEFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3137372e3133362e3131322e302f32302d3234203d3e203238313836.roa
Signing time:             Tue 14 Feb 2023 19:00:00 +0000
ROA not before:           Tue 14 Feb 2023 18:55:00 +0000
ROA not after:            Wed 14 Feb 2024 19:00:00 +0000
asID:                     28186
IP address blocks:        177.136.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3a:b1:dd:57:1e:38:d6:16:6b:19:97:04:b4:bb:55:50:58:61:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C42748FC04141E28BA6F90BFB14A645D517FEEFC
        Validity
            Not Before: Feb 14 18:55:00 2023 GMT
            Not After : Feb 14 19:00:00 2024 GMT
        Subject: CN=3082010A0282010100D08C175DD8BA8B7D52E54C336E34D6BCB2E40BCCFDE075DB53526A9D6CCC3FAD916D4F2A97672CAC459B7767F3D32123ADA488F680C65D553AB91A39BEBE20281566FEACA7AD8F3460AE2A38B12FACDB12069EF93022D04782667A8073EA3DB988D8ADFEAD85EADDE5574E38AC03B49201C3415BB0A18E8DF2917CBB9BB4D9A46AB4F9FAEF9761602F26E6920F83CAA1CF3A604057DA6CCD50EBACA9A75B29D883BA27BBAFC09EE7A641CD61BE92148B5B771F1544E49564A377A53BAC86D643A6BCB10DC1F468A1DA701CE0B74D0C6E3CC0BDDAB1F9AD7B0B083B3EDCB0F8CA5E439560B36F5718A3232400E103D6886BA1B39300ECC0E87E3B722C761715730203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:17:5d:d8:ba:8b:7d:52:e5:4c:33:6e:34:
                    d6:bc:b2:e4:0b:cc:fd:e0:75:db:53:52:6a:9d:6c:
                    cc:3f:ad:91:6d:4f:2a:97:67:2c:ac:45:9b:77:67:
                    f3:d3:21:23:ad:a4:88:f6:80:c6:5d:55:3a:b9:1a:
                    39:be:be:20:28:15:66:fe:ac:a7:ad:8f:34:60:ae:
                    2a:38:b1:2f:ac:db:12:06:9e:f9:30:22:d0:47:82:
                    66:7a:80:73:ea:3d:b9:88:d8:ad:fe:ad:85:ea:dd:
                    e5:57:4e:38:ac:03:b4:92:01:c3:41:5b:b0:a1:8e:
                    8d:f2:91:7c:bb:9b:b4:d9:a4:6a:b4:f9:fa:ef:97:
                    61:60:2f:26:e6:92:0f:83:ca:a1:cf:3a:60:40:57:
                    da:6c:cd:50:eb:ac:a9:a7:5b:29:d8:83:ba:27:bb:
                    af:c0:9e:e7:a6:41:cd:61:be:92:14:8b:5b:77:1f:
                    15:44:e4:95:64:a3:77:a5:3b:ac:86:d6:43:a6:bc:
                    b1:0d:c1:f4:68:a1:da:70:1c:e0:b7:4d:0c:6e:3c:
                    c0:bd:da:b1:f9:ad:7b:0b:08:3b:3e:dc:b0:f8:ca:
                    5e:43:95:60:b3:6f:57:18:a3:23:24:00:e1:03:d6:
                    88:6b:a1:b3:93:00:ec:c0:e8:7e:3b:72:2c:76:17:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FA:3A:61:7E:EE:E8:67:BF:84:A7:A6:C8:2A:A8:D6:48:88:F3:72
            X509v3 Authority Key Identifier:
                keyid:C4:27:48:FC:04:14:1E:28:BA:6F:90:BF:B1:4A:64:5D:51:7F:EE:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/C42748FC04141E28BA6F90BFB14A645D517FEEFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C42748FC04141E28BA6F90BFB14A645D517FEEFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3137372e3133362e3131322e302f32302d3234203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:89:51:7e:de:f3:85:f7:68:3a:a5:e4:69:5c:8b:4d:b9:59:
         89:3c:65:07:c8:d7:88:cd:fa:0c:a0:d5:c7:48:7a:62:25:5c:
         ef:d6:37:89:51:71:5a:1a:1b:cd:4e:b6:4e:2a:e5:96:3c:e1:
         16:a9:4c:16:a2:dd:54:ec:03:31:48:56:68:bc:fe:6e:94:56:
         66:e1:48:b4:2a:23:a0:d7:f6:f4:8b:23:3b:11:37:9a:89:d1:
         00:8e:f8:b3:0b:4b:fd:a6:47:44:e2:14:ac:9f:0f:02:53:e5:
         bb:c3:86:9e:46:16:f0:9a:80:35:4c:10:0c:9c:5e:84:28:6e:
         b3:f1:1d:de:5f:f9:95:58:32:02:e8:54:6e:88:54:bc:6d:53:
         93:37:c0:e3:e6:a8:bc:90:96:f4:19:98:e0:52:3d:a1:a5:56:
         45:72:75:ce:2a:9a:88:2c:3a:85:fc:89:d2:ef:48:79:93:02:
         77:d1:2f:a6:a6:14:60:99:3b:aa:73:ab:54:e6:1b:1e:c6:64:
         7f:6e:61:81:7d:e7:00:a0:ef:d2:b0:52:45:29:c9:19:62:cf:
         f7:e4:84:2d:05:da:a8:66:cb:de:da:40:d5:f7:6f:9f:d6:8b:
         21:50:a9:7e:1f:e7:ad:26:ff:be:47:f2:93:72:da:9f:a7:80:
         b5:0f:75:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 18:12:30 2023 by rpki-client on console-fra.rpki-client.org