Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e3133312e3136302e302f31392d3234203d3e203238323130.roa
File:                     3137372e3133312e3136302e302f31392d3234203d3e203238323130.roa (raw, json)
Hash identifier:          CccKJ8za/CP3/f1nvDHLjvKOEmayPN33l+manVWRq/s=
Subject key identifier:   4C:28:42:B2:CF:23:88:8C:F9:2B:90:B1:54:3B:60:94:6C:5A:11:3A
Certificate issuer:       /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial:       5CB2BAAB959693FC51F4F42C011F68CF3D17E6AF
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e3133312e3136302e302f31392d3234203d3e203238323130.roa
Signing time:             Sat 04 Mar 2023 16:08:55 +0000
ROA not before:           Sat 04 Mar 2023 16:03:55 +0000
ROA not after:            Sat 02 Mar 2024 16:08:55 +0000
asID:                     28210
IP address blocks:        177.131.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b2:ba:ab:95:96:93:fc:51:f4:f4:2c:01:1f:68:cf:3d:17:e6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
        Validity
            Not Before: Mar  4 16:03:55 2023 GMT
            Not After : Mar  2 16:08:55 2024 GMT
        Subject: CN=4C2842B2CF23888CF92B90B1543B60946C5A113A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:65:42:2d:70:8b:75:8f:1b:c5:9d:df:20:
                    9f:80:b3:4c:da:35:a2:2c:a3:31:cd:4e:c2:56:29:
                    06:c3:69:da:d4:bb:c6:29:06:20:9e:20:46:cf:f5:
                    41:fb:f1:91:bc:57:fa:a2:8b:b1:77:c0:80:3c:9c:
                    b7:1e:88:5d:be:c2:ef:30:e6:ad:ad:ab:3d:6f:4b:
                    16:09:5b:c5:14:1c:d2:20:1d:a6:53:2a:a2:a9:08:
                    08:3c:3c:7c:10:6b:e4:cd:99:ea:57:8f:c9:e1:36:
                    d3:60:03:da:27:21:5f:4a:3d:96:24:a3:b1:35:dc:
                    c7:6c:16:b8:58:c7:c8:c9:f2:a9:fa:4a:35:c2:e7:
                    f4:4c:c7:85:e4:96:29:6a:ff:29:28:9b:38:cc:75:
                    18:f7:25:f4:c0:a4:59:01:72:34:67:18:91:43:7c:
                    b8:10:54:be:b2:be:f6:9e:91:db:00:ec:0e:d1:6c:
                    b2:8f:3b:e2:89:5e:e3:c9:2c:10:93:34:33:f1:30:
                    4d:91:3b:4b:71:14:11:b5:78:c6:8d:c9:ed:3c:f5:
                    44:95:c2:21:30:e9:83:f6:53:a1:48:94:d9:39:4d:
                    30:ad:56:49:d2:3b:38:74:3c:ed:da:89:8d:60:71:
                    dd:bb:9f:ae:da:92:fe:0e:dc:9c:b0:59:e1:4e:10:
                    2e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:28:42:B2:CF:23:88:8C:F9:2B:90:B1:54:3B:60:94:6C:5A:11:3A
            X509v3 Authority Key Identifier:
                keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e3133312e3136302e302f31392d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:c2:2c:40:6f:6e:24:34:51:f8:6e:ed:85:72:ca:40:a5:04:
         ae:08:26:88:57:04:cc:85:2b:c1:24:dc:80:aa:a7:3f:0a:b6:
         17:cc:16:f4:ff:eb:87:8d:56:b3:9b:3d:ae:1b:0f:30:78:06:
         1c:f0:ef:f6:a1:bd:21:7f:b6:85:b5:1f:a6:3e:66:19:fb:e9:
         12:a1:15:e7:10:28:82:e0:ce:f8:44:de:6b:06:6a:24:b8:fd:
         98:6b:e3:68:ba:d4:70:99:38:b6:7e:e0:6b:14:09:90:52:cd:
         a3:ce:71:94:cc:9d:a8:5d:94:7c:47:14:86:83:bb:9f:30:ed:
         e4:b6:18:f4:a3:46:b2:b4:73:58:ba:64:1d:a6:35:3b:6b:7d:
         a8:1b:39:9f:6f:ae:de:a8:2e:66:2b:b1:2e:1e:d0:bf:bd:f6:
         62:cb:98:31:12:bf:66:51:a4:67:90:6a:eb:50:8d:95:20:57:
         30:d8:f3:6d:95:79:56:18:33:8d:db:67:c9:f1:2e:3c:9f:1e:
         6d:14:55:c1:e5:f8:4c:e8:28:1c:13:a7:76:8d:65:0f:b1:b2:
         84:58:c9:da:09:ca:1e:fd:49:32:e9:78:41:c8:22:a7:00:0a:
         4c:1c:86:8d:90:f8:1a:1e:8a:ad:ef:c8:40:5c:b1:06:cb:1c:
         e1:d8:41:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org