Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38352e302f32342d3234203d3e20323632393737.roa
File:                     3137372e3139302e38352e302f32342d3234203d3e20323632393737.roa (raw, json)
Hash identifier:          0XULCj2r+M+b4+LyJ9S8z5EyUs4ytvINcZfaLB8hoN4=
Subject key identifier:   33:18:71:C7:DF:A6:79:2E:9F:BB:AA:1B:45:15:1F:31:17:D6:AA:BF
Certificate issuer:       /CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
Certificate serial:       64076D7A97CF7B03563F60AD8B1316B4EEBB402B
Authority key identifier: 11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38352e302f32342d3234203d3e20323632393737.roa
Signing time:             Sun 07 Jan 2024 13:51:48 +0000
ROA not before:           Sun 07 Jan 2024 13:46:48 +0000
ROA not after:            Sun 05 Jan 2025 13:51:48 +0000
asID:                     262977
IP address blocks:        177.190.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:07:6d:7a:97:cf:7b:03:56:3f:60:ad:8b:13:16:b4:ee:bb:40:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
        Validity
            Not Before: Jan  7 13:46:48 2024 GMT
            Not After : Jan  5 13:51:48 2025 GMT
        Subject: CN=331871C7DFA6792E9FBBAA1B45151F3117D6AABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:8d:63:66:73:7b:73:2a:d6:5f:7d:1e:1a:
                    52:31:86:0d:e3:51:f6:6d:a9:9b:18:4a:77:81:31:
                    f3:41:fa:2d:9a:e7:a7:8b:1a:61:cb:75:b4:fa:a4:
                    1d:e2:81:7f:d0:a6:e3:25:48:fd:86:de:0e:21:b5:
                    a9:76:7c:45:e6:e4:b5:89:97:ce:cf:f1:5d:ad:13:
                    35:2e:8d:fd:10:0d:d4:3d:92:48:dd:a2:dd:9f:67:
                    68:51:1f:e1:af:2b:97:1d:c9:9c:e6:7a:83:74:a3:
                    45:da:a9:c7:0a:76:4d:11:bd:20:9e:aa:66:b9:b9:
                    95:48:6c:ee:d6:c1:4a:73:b5:c3:f7:8d:15:cf:ea:
                    05:75:51:4e:90:b2:e7:1e:73:eb:38:cc:51:86:80:
                    e1:a9:98:92:bd:70:1a:8e:35:3e:c6:c7:e4:ed:a0:
                    2d:38:4d:11:15:c6:cf:74:07:e9:16:eb:04:37:50:
                    fa:1e:fd:ab:f0:d7:50:3b:6d:72:5c:a3:54:13:7c:
                    ab:3d:f5:d3:21:0d:46:72:48:84:5d:a7:29:f3:78:
                    0f:18:a9:c3:ee:ad:0b:ae:7e:30:da:b7:da:0b:84:
                    c6:65:a2:21:9f:75:28:47:71:f0:39:8b:d6:51:39:
                    1f:ed:e1:6c:26:74:6f:8b:1e:63:37:c6:25:1b:66:
                    b8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:18:71:C7:DF:A6:79:2E:9F:BB:AA:1B:45:15:1F:31:17:D6:AA:BF
            X509v3 Authority Key Identifier:
                keyid:11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38352e302f32342d3234203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:80:b9:dd:45:4a:3b:93:56:f5:bc:0d:a3:29:ea:6c:a4:1d:
         87:0a:28:c0:65:8a:21:9e:7e:a8:34:ba:b6:0b:67:8d:8d:28:
         fd:7d:3c:01:fc:6e:98:ee:55:66:76:d2:03:14:15:9e:df:c1:
         dc:62:f5:75:0c:19:43:7e:b3:6f:e7:45:3d:a7:42:c5:58:4d:
         86:b9:88:72:1b:3e:0e:de:05:05:89:fd:2e:c6:33:d6:6a:d5:
         39:8d:85:85:15:69:1a:bd:56:20:2b:e5:e1:39:3e:2b:85:cf:
         b0:90:34:a0:78:e8:1a:c6:7e:68:86:41:51:6f:26:26:0d:04:
         17:15:b3:a6:ea:e2:55:08:3a:97:34:83:e8:64:fc:72:6b:bf:
         1f:fe:dc:d2:c3:18:f0:d3:34:19:34:69:69:80:f4:66:d0:04:
         3c:52:62:87:b1:01:7f:c0:05:74:cb:c5:d2:a6:62:63:fb:b1:
         d1:c5:56:a5:c7:55:7f:63:9a:8f:dd:39:5f:a4:e8:d9:b6:cd:
         43:bd:34:c4:d8:cf:b3:55:f1:a9:c7:c9:02:bf:50:74:5d:cf:
         5d:3e:b6:8e:5f:2b:83:11:77:e2:07:63:a7:fa:71:1d:a8:52:
         aa:2c:04:99:55:4b:35:b3:46:5b:68:21:9b:2c:f6:57:da:d6:
         09:f9:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org