Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8yQmMFZaunQDFLUsf5QpSE9Vjn7Y5vedUvWjfnq1mWGm/0/3137372e3139302e3134382e302f32322d3234203d3e20323633343631.roa
File:                     3137372e3139302e3134382e302f32322d3234203d3e20323633343631.roa (raw, json)
Hash identifier:          R3X+bKxjZNrkAr5Qd4mo8o9yG9pEmtq/znENiwxpn3w=
Subject key identifier:   0B:95:9B:E3:AC:F0:F0:3B:AD:62:FD:83:6E:C9:4E:A6:C0:C1:59:68
Certificate issuer:       /CN=4329180F24DF1D33ED89890D8A321F63B1E56783
Certificate serial:       54135E1FE8E3DB1D701D68848B450B98DC2A7618
Authority key identifier: 43:29:18:0F:24:DF:1D:33:ED:89:89:0D:8A:32:1F:63:B1:E5:67:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4329180F24DF1D33ED89890D8A321F63B1E56783.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8yQmMFZaunQDFLUsf5QpSE9Vjn7Y5vedUvWjfnq1mWGm/0/3137372e3139302e3134382e302f32322d3234203d3e20323633343631.roa
Signing time:             Fri 13 Jan 2023 19:00:00 +0000
ROA not before:           Fri 13 Jan 2023 18:55:00 +0000
ROA not after:            Sat 13 Jan 2024 19:00:00 +0000
asID:                     263461
IP address blocks:        177.190.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:13:5e:1f:e8:e3:db:1d:70:1d:68:84:8b:45:0b:98:dc:2a:76:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329180F24DF1D33ED89890D8A321F63B1E56783
        Validity
            Not Before: Jan 13 18:55:00 2023 GMT
            Not After : Jan 13 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:48:96:32:08:e6:77:07:cd:26:20:71:27:
                    bc:68:e6:51:18:35:a3:fc:06:5f:02:66:d3:04:6d:
                    9b:15:c6:66:4d:30:25:b2:b2:c7:a6:41:ff:62:01:
                    67:71:86:9a:67:1b:de:7a:1e:45:c2:91:da:60:35:
                    3d:b6:91:4c:69:41:3a:5a:f6:e6:80:96:b4:3e:b4:
                    97:db:26:3c:be:36:6a:7b:7f:73:f8:7a:f4:c0:09:
                    e2:b2:88:c6:a5:bb:4b:f7:2d:98:5a:f0:25:c1:8c:
                    e3:51:46:2e:73:42:af:e4:e9:77:c9:e4:5d:bc:d2:
                    ff:1c:33:68:c7:b2:39:ac:b0:37:79:c1:d2:3a:e8:
                    6d:af:e1:8d:95:bd:ee:e7:c7:50:c4:8f:a6:fb:13:
                    6a:89:f2:8a:f1:6e:bc:4a:50:67:d1:3a:4c:98:47:
                    5c:df:b6:b1:eb:66:32:51:c0:84:e1:48:a3:aa:bc:
                    4b:0e:79:c9:23:68:ab:74:56:2a:9a:91:53:fc:68:
                    04:e0:ff:5f:b3:12:91:b0:fe:84:73:3f:bf:f2:0a:
                    f3:d8:43:9f:e1:3c:76:07:86:66:52:fe:20:e4:ab:
                    b1:68:03:f2:0f:dd:58:72:4f:ab:3f:a1:0d:95:c2:
                    47:f1:d5:5b:3f:ff:da:30:ce:de:3a:1b:06:57:0a:
                    3b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:95:9B:E3:AC:F0:F0:3B:AD:62:FD:83:6E:C9:4E:A6:C0:C1:59:68
            X509v3 Authority Key Identifier:
                keyid:43:29:18:0F:24:DF:1D:33:ED:89:89:0D:8A:32:1F:63:B1:E5:67:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8yQmMFZaunQDFLUsf5QpSE9Vjn7Y5vedUvWjfnq1mWGm/0/4329180F24DF1D33ED89890D8A321F63B1E56783.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4329180F24DF1D33ED89890D8A321F63B1E56783.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yQmMFZaunQDFLUsf5QpSE9Vjn7Y5vedUvWjfnq1mWGm/0/3137372e3139302e3134382e302f32322d3234203d3e20323633343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:b7:20:85:0e:40:7d:80:13:21:bb:2b:36:fd:aa:c5:81:
         02:7d:4a:e5:03:7d:84:8c:86:eb:44:ba:bf:0d:f3:74:18:bc:
         5f:71:c8:bc:fd:f6:80:1a:91:dd:14:0b:b1:33:00:88:95:1f:
         24:9f:a8:bd:e9:d6:ad:70:f3:0a:a4:bf:0f:cc:f9:9c:ed:d2:
         4e:51:b3:15:e8:51:ae:2c:38:fe:71:83:b3:15:a3:36:59:59:
         c0:a9:7f:f4:fc:0f:0c:04:28:36:ea:09:0d:f3:fa:54:2f:69:
         79:85:68:07:d0:70:95:bf:b9:7e:d6:82:4d:84:c7:9e:c6:b5:
         01:e6:8c:60:d1:8f:91:3d:76:04:6f:70:e1:bf:98:b8:50:64:
         da:ec:fd:b4:ac:c1:89:d4:c4:bb:c9:b0:ae:5e:b3:43:9a:4e:
         32:b1:ff:6b:04:2a:d6:79:82:22:ef:33:19:3d:f0:94:ef:56:
         9a:bb:48:68:c3:04:76:e2:25:59:64:d4:4e:b3:aa:55:c7:91:
         ae:3e:15:18:39:b8:d5:b7:c6:b6:88:32:40:53:fc:08:39:10:
         63:3b:51:57:b3:24:9f:2b:5c:15:25:14:6c:c8:23:e1:7b:2a:
         eb:aa:d2:db:f1:89:cf:76:e5:7e:ca:93:af:df:e9:f0:8d:49:
         bb:b7:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org