Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e382e39362e302f32302d3231203d3e203533313837.roa
File:                     3137372e382e39362e302f32302d3231203d3e203533313837.roa (raw, json)
Hash identifier:          /jM+7SfktRP52RTwM5tZ/KgxRn6OWUh6o5PyizKnWAk=
Subject key identifier:   26:57:5B:AA:0A:66:C3:B8:6F:2D:F8:C6:21:16:16:27:15:D3:FB:72
Certificate issuer:       /CN=CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349
Certificate serial:       1100B514AA428A747A2EB0D68069E3975B5B8F61
Authority key identifier: CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e382e39362e302f32302d3231203d3e203533313837.roa
Signing time:             Mon 27 Nov 2023 19:45:26 +0000
ROA not before:           Mon 27 Nov 2023 19:40:26 +0000
ROA not after:            Mon 25 Nov 2024 19:45:26 +0000
asID:                     53187
IP address blocks:        177.8.96.0/20 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:00:b5:14:aa:42:8a:74:7a:2e:b0:d6:80:69:e3:97:5b:5b:8f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349
        Validity
            Not Before: Nov 27 19:40:26 2023 GMT
            Not After : Nov 25 19:45:26 2024 GMT
        Subject: CN=26575BAA0A66C3B86F2DF8C62116162715D3FB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:33:5d:ff:63:9a:1b:c8:72:80:3e:f1:81:fa:
                    a2:32:28:53:39:e4:f0:cd:bc:e3:55:d6:8e:04:54:
                    4a:1a:6c:ad:16:35:40:59:eb:5a:8d:1f:06:89:9e:
                    2e:3a:ff:8f:13:c8:a0:50:3c:5c:6a:20:4e:17:6c:
                    57:3e:05:dc:6b:db:63:df:0e:fc:cd:28:25:ca:88:
                    03:74:87:74:d1:fe:ff:6d:88:12:1b:ed:c1:a2:52:
                    81:d5:cf:fb:c5:d7:94:c2:c4:6b:36:af:9c:71:56:
                    f7:c1:35:a8:ba:5e:70:35:d3:f6:75:c8:c7:31:2f:
                    a0:98:ba:1b:ab:4c:32:2f:fe:69:87:80:71:24:12:
                    c8:71:69:83:f1:5c:94:d2:69:be:21:7e:38:6a:ff:
                    8f:e1:65:69:10:d8:3d:f3:ab:72:d1:02:a9:62:b8:
                    d4:d5:45:a0:c2:d2:0a:43:fb:bc:bf:30:32:0c:71:
                    18:40:e5:a6:c9:e1:56:85:f7:4b:1f:3e:db:15:61:
                    52:16:bf:a7:b1:a8:c7:3b:1e:70:28:a7:06:a8:b2:
                    17:ee:f3:d5:dd:68:b1:bc:f5:e9:a6:56:40:a9:8b:
                    a7:e3:65:cb:49:a0:48:b1:06:f6:8a:a3:be:c3:b9:
                    57:36:f2:d7:49:b6:08:f7:5b:44:da:e2:d0:87:e1:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:57:5B:AA:0A:66:C3:B8:6F:2D:F8:C6:21:16:16:27:15:D3:FB:72
            X509v3 Authority Key Identifier:
                keyid:CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e382e39362e302f32302d3231203d3e203533313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:9f:16:30:7e:f7:51:37:a4:ae:6d:9a:8c:2e:86:76:a0:5e:
         77:10:7f:ee:4a:9d:0e:35:d1:ca:5c:76:b5:00:0f:f3:69:cd:
         ab:94:48:64:93:27:79:c1:62:e1:ae:a3:62:9c:a2:5b:69:ad:
         67:e9:eb:73:01:1d:6f:ec:a3:74:68:99:3f:b6:65:eb:16:88:
         a4:31:74:10:a1:4a:97:32:59:80:9b:ff:8e:9c:23:0f:a3:4a:
         28:0f:e7:32:06:fd:f4:61:39:d1:b1:67:80:2e:cd:92:06:33:
         72:66:b0:f7:d0:96:d6:58:77:ea:66:a9:40:15:d7:1e:e7:36:
         ca:43:55:14:50:a6:3a:19:1a:6c:05:81:63:25:f7:4e:da:bd:
         7d:db:3f:be:5d:35:cd:7c:70:45:69:c1:e6:7a:ce:88:c1:89:
         fb:cc:85:71:ac:ee:45:39:e2:15:ff:89:1e:2f:26:78:90:5b:
         26:d7:94:8a:82:6d:23:20:00:63:f1:aa:7d:76:82:9a:0a:c8:
         d1:f4:15:5e:a2:1c:80:a1:e7:a2:21:df:2c:5a:f7:98:02:6b:
         df:e3:53:e5:09:24:24:a2:6c:d8:54:7c:dd:b2:04:40:81:c9:
         08:6a:09:42:d8:e3:01:72:1b:8e:3b:b7:82:93:fd:14:ab:78:
         9f:50:34:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org