Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32332d3234203d3e20323632393737.roa
File:                     3137372e3139302e39342e302f32332d3234203d3e20323632393737.roa (raw, json)
Hash identifier:          YzF3PadpwWgMX+L6H7886BNANBPkT6LKAF5EhKvnnlQ=
Subject key identifier:   64:63:02:E5:59:C3:FF:1D:74:B9:6E:9F:7F:92:B2:1D:9F:30:D1:7B
Certificate issuer:       /CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
Certificate serial:       1B353504EB10C06728C3633979F21581E531F48E
Authority key identifier: 11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32332d3234203d3e20323632393737.roa
Signing time:             Thu 28 Dec 2023 00:27:45 +0000
ROA not before:           Thu 28 Dec 2023 00:22:45 +0000
ROA not after:            Thu 26 Dec 2024 00:27:45 +0000
asID:                     262977
IP address blocks:        177.190.94.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:35:35:04:eb:10:c0:67:28:c3:63:39:79:f2:15:81:e5:31:f4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
        Validity
            Not Before: Dec 28 00:22:45 2023 GMT
            Not After : Dec 26 00:27:45 2024 GMT
        Subject: CN=646302E559C3FF1D74B96E9F7F92B21D9F30D17B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:c0:8b:a1:d3:06:e2:cf:26:2c:e1:a4:4c:
                    25:a0:cb:57:09:4e:80:8c:a6:8f:ac:ee:bf:6e:7e:
                    6a:5e:37:87:bc:49:d4:04:bf:6f:54:87:30:b5:a6:
                    2d:3b:f8:2f:18:cd:70:10:d2:e8:25:3c:9e:2d:13:
                    8b:44:ca:7f:e7:79:95:14:c7:6f:42:7f:8c:df:98:
                    6b:bd:1d:21:74:20:8a:c3:d7:bb:ee:af:3c:24:aa:
                    36:b8:d7:7c:63:48:d7:24:9e:c5:b5:ee:53:ce:92:
                    01:c8:f9:71:c8:22:74:26:65:00:c1:bd:c4:66:88:
                    83:79:7a:5c:03:5a:e2:f8:30:25:13:91:96:14:fd:
                    5b:88:3f:59:54:b8:a9:e6:64:11:87:8b:2e:6d:55:
                    54:6b:06:9c:12:b5:26:5f:4c:4b:79:b1:e9:6e:0f:
                    c7:8d:6f:b9:02:b4:25:d4:dc:63:3d:7c:68:cc:e9:
                    f3:29:43:3f:04:b4:21:8e:06:fa:78:36:a1:61:e4:
                    81:6f:f2:d4:22:d2:d8:da:88:c3:52:69:d8:69:f7:
                    c7:13:9c:0c:cd:91:6b:d0:b5:94:8c:7f:45:db:bd:
                    3a:55:87:d2:a7:e9:72:0d:bd:e6:5a:c7:f4:fd:ec:
                    43:d5:50:60:70:43:02:21:8c:dc:f4:17:ea:01:9b:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:63:02:E5:59:C3:FF:1D:74:B9:6E:9F:7F:92:B2:1D:9F:30:D1:7B
            X509v3 Authority Key Identifier:
                keyid:11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32332d3234203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:31:4b:34:e9:41:a8:0b:8d:75:7a:76:da:93:60:c3:c8:2e:
         02:03:b7:0c:f5:1a:24:33:62:0e:8a:29:f8:78:95:4b:6d:ea:
         35:c7:59:af:19:bc:50:a2:81:97:e7:c4:e3:d2:a8:64:27:01:
         30:45:06:3b:d4:62:f1:48:8c:d3:92:9e:3a:75:52:b8:a0:4d:
         b8:a6:e1:92:c7:f5:59:e5:a0:7c:ab:dd:d8:18:85:4b:a2:f3:
         fe:7e:45:dc:75:10:f1:05:b9:1b:f2:af:e3:ef:61:07:3d:d0:
         ff:74:c1:1b:17:74:57:8e:9a:b4:34:c3:1a:c3:31:17:38:16:
         13:e6:ba:28:0e:cd:41:a5:e4:23:cd:d6:ea:ea:f4:e0:03:48:
         e4:5f:2f:ea:57:fd:20:d8:84:56:fc:1b:76:9e:e3:14:30:fd:
         1c:e5:37:00:3e:96:cf:4a:46:23:13:64:d3:e0:eb:c4:ec:4f:
         21:02:ac:ce:60:be:dc:f2:a1:f4:e6:41:34:6d:be:e8:d0:45:
         a9:2c:5f:9f:3d:f8:36:96:e9:0f:73:1b:9c:e8:35:ba:9c:8e:
         dc:72:55:32:10:0c:61:64:ca:78:36:f9:27:e0:22:dd:71:95:
         48:b7:de:6b:0a:26:00:84:eb:f5:72:5e:78:0a:36:fa:78:e6:
         02:c5:7f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org