Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38362e302f32342d3234203d3e20323632393737.roa
File:                     3137372e3139302e38362e302f32342d3234203d3e20323632393737.roa (raw, json)
Hash identifier:          Wbw5j50t7j+vB7vrkr0ROug/DSD7G2K1aYbwowZvOzo=
Subject key identifier:   36:6E:79:9D:A7:65:E9:B6:00:0E:93:BB:40:2D:94:24:C8:4E:63:4D
Certificate issuer:       /CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
Certificate serial:       0969014B8C89749AA041A4440B800D8003A37FDF
Authority key identifier: 11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38362e302f32342d3234203d3e20323632393737.roa
Signing time:             Sun 07 Jan 2024 13:53:29 +0000
ROA not before:           Sun 07 Jan 2024 13:48:29 +0000
ROA not after:            Sun 05 Jan 2025 13:53:29 +0000
asID:                     262977
IP address blocks:        177.190.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:69:01:4b:8c:89:74:9a:a0:41:a4:44:0b:80:0d:80:03:a3:7f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
        Validity
            Not Before: Jan  7 13:48:29 2024 GMT
            Not After : Jan  5 13:53:29 2025 GMT
        Subject: CN=366E799DA765E9B6000E93BB402D9424C84E634D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:33:88:86:c2:bc:53:b9:e5:8c:f2:53:01:
                    cc:27:0b:59:4d:55:a0:1f:04:82:3f:e5:fb:28:35:
                    c3:cf:9b:57:97:12:f2:b9:21:f8:af:2a:aa:33:de:
                    25:04:74:c3:fb:48:e4:53:1c:8d:2b:29:13:70:18:
                    b9:74:b2:9e:29:c8:f8:35:0e:a4:99:a0:22:ed:53:
                    09:8b:b3:91:1b:25:70:6c:9f:80:3d:c6:6a:c9:8e:
                    76:ef:e8:3d:3a:d1:26:aa:5e:87:47:49:7d:92:6c:
                    6d:6d:36:13:ad:22:2a:60:8c:59:55:9d:69:68:35:
                    9b:63:e7:9b:e1:64:18:49:c1:58:1c:db:84:ff:e7:
                    70:9f:23:0a:9e:e5:be:f8:88:8a:7e:58:53:04:89:
                    1d:9f:51:b1:4a:f1:13:56:f7:57:ed:ad:bc:9f:35:
                    f0:cf:f6:ca:6d:4c:45:32:df:8e:0b:fc:12:c4:8b:
                    5c:7d:7c:d4:f2:80:b4:f2:a3:1d:3b:83:2c:de:99:
                    6e:ba:31:5e:45:57:e9:ca:4e:e0:a3:69:6e:5b:28:
                    2b:fb:02:1d:30:4c:8c:de:3c:13:45:7a:f9:3d:8a:
                    cd:ca:3a:16:e7:99:3b:37:8c:51:b1:7b:e1:d9:ee:
                    1f:ea:6d:0a:5a:a9:61:ff:ba:13:83:26:67:cd:46:
                    d4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6E:79:9D:A7:65:E9:B6:00:0E:93:BB:40:2D:94:24:C8:4E:63:4D
            X509v3 Authority Key Identifier:
                keyid:11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38362e302f32342d3234203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:fe:b4:49:14:80:ee:4e:1d:74:8a:39:cb:19:17:3f:15:1a:
         49:a1:2e:79:71:97:9d:d9:35:f2:18:ca:3b:85:d7:10:7c:8f:
         49:a0:97:25:57:37:f6:d9:ed:2a:50:25:5f:20:5b:a7:d4:31:
         26:bc:31:86:d9:d8:73:1c:01:0a:60:eb:38:c6:fd:74:ba:f7:
         a3:3c:b8:b3:d9:5e:bc:41:b1:a2:d5:ee:5c:49:6d:ae:37:29:
         e1:09:33:ae:b3:14:0c:14:76:02:8a:99:2e:19:5e:eb:e6:05:
         65:49:d7:ca:06:26:92:3c:b5:d9:84:89:8e:1c:9a:8f:ba:0d:
         fc:c9:72:c0:b8:15:fb:f2:4a:bc:36:00:a4:45:d9:1d:f7:77:
         6e:c1:82:d4:1d:68:d9:d8:d9:3f:04:bf:8f:66:65:ca:89:a8:
         56:f3:3f:92:fe:76:ec:c4:10:54:8d:3f:91:b5:35:4b:98:cc:
         0b:33:02:4f:93:1c:7f:db:c2:e0:96:4c:6d:f2:49:45:94:5f:
         ca:73:07:bd:84:a5:a0:0d:5d:22:e3:d1:a8:88:7f:09:8a:fd:
         84:2a:c4:c6:13:68:6a:0b:a9:34:ac:51:bf:ba:55:7d:e5:6d:
         15:b4:9a:ac:c5:ba:7d:bb:06:48:21:9e:ba:b3:39:5f:e6:83:
         35:59:c4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org