Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32342d3234203d3e20323632393737.roa
File:                     3137372e3139302e39342e302f32342d3234203d3e20323632393737.roa (raw, json)
Hash identifier:          2h4t3oTgzHCOtC0MrZxYH8ohfAEAtbjHQVYcew16c8Q=
Subject key identifier:   7D:68:B5:6F:1F:05:45:E0:5B:1B:F0:60:44:BA:3F:42:AA:05:BF:3E
Certificate issuer:       /CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
Certificate serial:       1D890E8F0890B4B26B1DB204E95524C908FD26F5
Authority key identifier: 11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32342d3234203d3e20323632393737.roa
Signing time:             Sun 07 Jan 2024 13:59:37 +0000
ROA not before:           Sun 07 Jan 2024 13:54:37 +0000
ROA not after:            Sun 05 Jan 2025 13:59:37 +0000
asID:                     262977
IP address blocks:        177.190.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:89:0e:8f:08:90:b4:b2:6b:1d:b2:04:e9:55:24:c9:08:fd:26:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
        Validity
            Not Before: Jan  7 13:54:37 2024 GMT
            Not After : Jan  5 13:59:37 2025 GMT
        Subject: CN=7D68B56F1F0545E05B1BF06044BA3F42AA05BF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:c6:5a:47:e0:36:cb:ed:89:7e:6b:4c:56:
                    8b:67:b8:23:0a:ec:b5:e9:25:c1:cc:31:76:f3:29:
                    db:22:41:57:55:9d:7e:9a:7b:8b:52:42:0f:2f:b4:
                    8a:7a:19:37:0f:0e:a4:74:9c:8f:24:f6:43:11:5a:
                    5f:b3:69:20:47:ea:ce:f2:e9:88:92:9f:3c:dd:50:
                    b9:29:58:48:b9:24:6a:cb:bd:c3:ac:57:d6:c5:e3:
                    84:18:b5:09:9f:7d:0c:18:6e:99:68:9c:ef:d6:10:
                    42:31:93:f1:6c:3f:61:68:d4:cf:34:7c:5b:85:22:
                    ff:4e:79:66:a7:f4:57:db:5f:54:d9:52:88:22:64:
                    cb:1f:ec:26:34:db:98:25:f8:b1:ed:c3:f9:8a:d7:
                    08:45:88:8b:8e:bf:fa:45:08:3a:a0:ce:2c:54:de:
                    a8:11:95:94:06:9f:b4:c1:1e:58:9b:4b:d2:8c:a6:
                    fb:9c:28:5a:cb:f0:29:45:6a:d7:90:5f:47:9d:56:
                    07:64:5f:81:4f:5b:01:7b:ea:5e:03:c7:e7:cb:c9:
                    c6:55:58:77:69:03:88:ac:22:c4:c8:92:b1:69:af:
                    0c:c7:cc:d8:40:21:2e:d6:31:93:42:1e:f4:2f:46:
                    86:50:97:1a:30:13:69:64:0c:3e:92:15:5c:06:4c:
                    8e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:68:B5:6F:1F:05:45:E0:5B:1B:F0:60:44:BA:3F:42:AA:05:BF:3E
            X509v3 Authority Key Identifier:
                keyid:11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32342d3234203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:a0:3b:d5:3b:6b:08:5a:c8:af:8f:b1:63:35:b2:ae:a5:bb:
         e9:ef:a7:0f:c4:01:8d:7a:4f:8e:df:ff:b7:67:82:cc:96:85:
         cf:e9:cf:33:bc:f3:22:38:64:c3:ba:78:e3:d7:4f:f0:95:5a:
         5c:a2:ab:00:4c:5e:7f:aa:21:53:1c:4c:fd:73:f5:97:78:3f:
         c4:fa:15:0c:2b:34:91:33:3d:11:40:bc:f7:55:db:2d:54:3f:
         bb:98:e7:49:b9:c7:98:9b:11:c6:20:74:9e:dd:66:b7:01:06:
         56:14:17:ae:77:da:1d:f7:70:ba:73:e0:43:9d:5e:5b:52:88:
         8c:3c:c2:7d:a5:88:c1:63:a7:ff:8b:ea:c5:c5:eb:1f:54:1c:
         15:b3:cc:04:6b:5a:81:92:eb:4a:6f:98:39:af:42:6f:47:1c:
         bf:fc:58:8a:bd:d7:fa:a8:97:27:d6:f8:02:e7:23:12:ba:c7:
         dc:bf:42:a5:28:37:78:89:d0:81:95:2c:43:96:44:4d:61:64:
         6c:32:1d:36:7a:a7:a5:51:9d:bd:1c:ac:fe:dc:a7:50:f4:46:
         58:e0:f3:e5:92:27:0c:60:b3:f6:20:44:2c:76:0c:8b:af:d0:
         20:ad:89:bb:84:95:cf:e3:95:84:61:c1:4c:91:57:96:fc:9a:
         42:14:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:26 2024 by rpki-client on console-ams.rpki-client.org