Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/3137372e36362e3133362e302f32312d3234203d3e20323632343936.roa
File:                     3137372e36362e3133362e302f32312d3234203d3e20323632343936.roa (raw, json)
Hash identifier:          HxiqeULzafhaSxI8FAH+xUTBUe4LaDCaYJMYN8VpZBw=
Subject key identifier:   35:DD:E4:72:0A:18:CA:11:BE:AD:85:8E:EF:59:65:1D:09:87:BE:B2
Certificate issuer:       /CN=8F4A398C9662CBF5257471CEB03BBF2C61BC55E0
Certificate serial:       5E5B70C687BF71573A57FBB778AEC627A5F04068
Authority key identifier: 8F:4A:39:8C:96:62:CB:F5:25:74:71:CE:B0:3B:BF:2C:61:BC:55:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F4A398C9662CBF5257471CEB03BBF2C61BC55E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/3137372e36362e3133362e302f32312d3234203d3e20323632343936.roa
Signing time:             Mon 26 Feb 2024 13:30:44 +0000
ROA not before:           Mon 26 Feb 2024 13:25:44 +0000
ROA not after:            Mon 24 Feb 2025 13:30:44 +0000
asID:                     262496
IP address blocks:        177.66.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5b:70:c6:87:bf:71:57:3a:57:fb:b7:78:ae:c6:27:a5:f0:40:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F4A398C9662CBF5257471CEB03BBF2C61BC55E0
        Validity
            Not Before: Feb 26 13:25:44 2024 GMT
            Not After : Feb 24 13:30:44 2025 GMT
        Subject: CN=35DDE4720A18CA11BEAD858EEF59651D0987BEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ae:05:1a:6d:b4:1f:e6:2e:15:00:97:63:c9:
                    a7:36:fa:fb:9b:e4:92:df:12:17:64:65:c4:7f:a2:
                    01:92:2f:57:ff:da:39:32:f4:40:f5:a6:ae:93:62:
                    ce:d7:6d:1a:57:2f:7a:f8:b0:4b:79:44:b6:42:b3:
                    8c:fc:03:e7:bd:12:07:af:4e:12:cd:cd:11:93:28:
                    74:d5:80:1f:b3:ea:e6:31:35:23:01:75:55:31:23:
                    cb:bb:11:4b:77:49:6d:1e:bb:99:06:fe:e8:a8:05:
                    c9:f4:fd:f6:b5:25:bf:b9:18:61:ce:3c:f0:0c:8a:
                    d1:ad:1a:53:cc:85:4e:3c:a1:7b:f0:eb:bf:bb:1b:
                    ab:7d:e5:76:ef:d5:60:57:f6:08:63:51:32:c0:20:
                    18:50:d7:0a:00:f5:09:20:9d:68:30:2c:3a:57:d4:
                    02:d8:0b:60:23:c1:63:7f:53:88:ec:28:6d:82:d5:
                    6b:5c:c0:c1:74:50:e7:22:63:98:88:5b:17:e0:db:
                    d6:0d:c5:15:71:56:02:5e:0d:39:64:6c:24:3d:7e:
                    f2:7c:f1:4b:ed:10:43:3b:52:bb:6a:67:e2:92:c5:
                    22:6f:87:3d:4c:66:5c:64:64:98:f2:d8:36:bd:89:
                    4e:90:f2:08:30:df:76:6a:d9:9b:33:02:8b:4e:6d:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DD:E4:72:0A:18:CA:11:BE:AD:85:8E:EF:59:65:1D:09:87:BE:B2
            X509v3 Authority Key Identifier:
                keyid:8F:4A:39:8C:96:62:CB:F5:25:74:71:CE:B0:3B:BF:2C:61:BC:55:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/8F4A398C9662CBF5257471CEB03BBF2C61BC55E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F4A398C9662CBF5257471CEB03BBF2C61BC55E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/3137372e36362e3133362e302f32312d3234203d3e20323632343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cc:69:fe:d1:a2:92:59:63:39:c5:0b:65:e9:c0:ba:4e:4f:a1:
         b4:75:08:de:93:e1:09:bc:84:6d:7f:5d:4f:4c:6a:64:d5:17:
         15:ec:d6:f3:72:8f:6e:22:54:04:97:f5:55:dc:15:22:e1:cd:
         fb:c0:b2:11:b3:32:83:27:28:40:9f:69:e8:6a:03:50:1b:11:
         cc:4f:b3:9e:ed:e9:a7:23:a7:6f:41:2c:93:e0:60:ca:3c:f7:
         c3:db:16:61:b3:b0:eb:f1:83:d4:cd:1d:f6:13:b6:48:0a:32:
         f0:eb:cf:b2:66:db:ac:ca:f4:e9:64:1e:32:17:4b:19:d8:e9:
         4e:71:cb:bd:5c:a7:7e:1a:87:26:01:ba:17:bb:ac:fe:28:a6:
         7e:a9:9f:0a:62:88:06:ca:fe:ba:95:83:de:9a:5b:ab:0a:30:
         d4:56:6d:59:b5:bb:91:52:3a:46:25:23:8e:37:40:56:05:50:
         a3:92:45:55:81:d9:34:f1:2c:b3:4f:e1:d5:5f:89:d7:df:1f:
         3a:97:d0:b6:36:93:71:eb:8b:b7:16:fa:63:b0:53:5e:28:f3:
         00:c0:93:ef:73:74:44:42:b0:7c:a2:06:07:7f:8b:a7:60:43:
         4a:ba:da:f9:45:52:72:25:89:8f:a0:dc:d6:55:bf:da:1e:a6:
         65:c7:21:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org