Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e37352e33352e302f32342d3234203d3e20323632383038.roa
File:                     3137372e37352e33352e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          tN21LVuzzcmnWsEmred07JSCzjaEgm1rrhQOllNe6So=
Subject key identifier:   D4:FE:02:CF:05:BE:D1:02:26:DE:A8:0E:43:D5:8A:64:89:F8:FA:43
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       32144CB0D4DC4BA3384E6B09CCAC1E7BF932EEFA
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e37352e33352e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:31 +0000
ROA not before:           Tue 10 Oct 2023 13:52:31 +0000
ROA not after:            Tue 08 Oct 2024 13:57:31 +0000
asID:                     262808
IP address blocks:        177.75.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:14:4c:b0:d4:dc:4b:a3:38:4e:6b:09:cc:ac:1e:7b:f9:32:ee:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:31 2023 GMT
            Not After : Oct  8 13:57:31 2024 GMT
        Subject: CN=D4FE02CF05BED10226DEA80E43D58A6489F8FA43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:df:bb:31:5e:80:96:eb:11:18:1f:0b:b6:4c:
                    bb:e3:f8:1e:a7:8c:37:88:76:49:a5:7e:d4:31:40:
                    a0:dd:66:f7:09:ca:bf:e3:6b:dd:07:77:2a:49:48:
                    37:bc:35:5c:c6:5b:28:ce:72:97:9c:8e:0f:40:13:
                    e9:cc:92:21:e8:17:d5:4c:b3:42:51:eb:0e:a4:f2:
                    b5:d3:0c:e1:b0:4b:65:01:98:89:26:47:65:69:31:
                    bf:43:98:23:2e:73:e4:00:ea:27:01:74:63:59:de:
                    7b:fb:d8:51:f7:4e:64:95:a5:88:79:6f:2b:b9:87:
                    80:a5:2e:d4:88:c2:dc:cd:cc:d5:3c:a0:20:ad:67:
                    ca:2d:b5:e7:5e:e8:5e:24:c1:6f:b1:18:dc:aa:a3:
                    7d:03:50:13:7e:cf:0f:fd:58:44:9e:09:a7:73:7a:
                    6c:01:a9:83:f8:b3:7d:d3:d6:b1:6e:62:68:b4:24:
                    3b:42:38:cb:ea:f1:7d:23:c6:71:0d:f4:b0:cd:46:
                    e5:26:87:53:6c:d1:2a:79:1a:2c:f6:56:2f:16:3d:
                    e4:eb:ba:43:d7:97:df:cd:f1:55:f8:5a:e6:9b:e9:
                    92:9e:a9:d4:02:7b:58:bb:ba:49:56:af:91:1d:2a:
                    e1:b4:64:b2:e4:6c:c0:49:1b:f4:2b:08:c4:a6:0a:
                    f2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FE:02:CF:05:BE:D1:02:26:DE:A8:0E:43:D5:8A:64:89:F8:FA:43
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e37352e33352e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:4b:1b:89:38:f3:76:9e:c2:bf:07:2a:05:7a:df:60:ad:f7:
         14:12:0f:23:0c:2e:1c:d7:42:de:8e:11:c5:83:1f:9f:ce:78:
         76:5a:6c:bc:e8:fb:ce:1a:f8:38:e3:51:e8:fe:64:44:4a:d9:
         6d:7d:e7:5a:02:7c:25:c4:39:69:f1:4b:95:e7:57:47:2b:75:
         25:55:bf:02:35:3b:d3:b6:15:eb:93:00:de:11:64:d9:88:cd:
         1a:d9:f0:13:1e:a4:29:34:39:a9:1e:67:3f:5c:61:19:65:4a:
         2e:b4:f1:3d:81:df:9e:d9:57:c6:3b:e9:ba:d7:6e:b6:c3:1f:
         17:5a:d6:32:24:1f:04:f6:f5:b7:77:d8:fc:fd:aa:7d:61:e9:
         08:32:a3:16:9d:6f:04:2a:aa:b8:14:c8:bc:ee:bd:d3:30:77:
         98:d1:7b:19:db:f8:14:3c:c8:55:82:a7:d1:79:1b:c6:ed:02:
         ce:23:29:66:0c:67:8c:52:1e:30:53:3d:2d:88:6e:db:ea:db:
         08:4a:fe:52:42:ac:14:c8:42:e3:06:b0:a8:d5:54:bc:33:0b:
         c5:08:74:ef:5d:38:a8:75:41:bc:7f:2e:71:50:95:62:73:01:
         2f:42:66:38:af:eb:2d:5a:3b:87:98:7a:a0:fe:76:a5:df:3b:
         a5:02:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org