Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32312d3234203d3e203533323039.roa
File:                     3137372e31312e3133362e302f32312d3234203d3e203533323039.roa (raw, json)
Hash identifier:          2EI1A0kwRkNwkNLl4DLu/d/ZHjyQ/nCRfTkNaWTrH4E=
Subject key identifier:   97:ED:46:9E:80:B2:2E:DA:3E:78:4E:97:BA:33:D4:D1:74:9B:FE:C0
Certificate issuer:       /CN=A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9
Certificate serial:       215C7E49CF93C770E30ACD6D3FCC676A94A3E666
Authority key identifier: A0:75:17:34:EC:AA:A4:CA:4F:27:E6:F5:7D:46:AB:3A:41:24:B6:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32312d3234203d3e203533323039.roa
Signing time:             Tue 20 Feb 2024 13:12:28 +0000
ROA not before:           Tue 20 Feb 2024 13:07:28 +0000
ROA not after:            Tue 18 Feb 2025 13:12:28 +0000
asID:                     53209
IP address blocks:        177.11.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5c:7e:49:cf:93:c7:70:e3:0a:cd:6d:3f:cc:67:6a:94:a3:e6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9
        Validity
            Not Before: Feb 20 13:07:28 2024 GMT
            Not After : Feb 18 13:12:28 2025 GMT
        Subject: CN=97ED469E80B22EDA3E784E97BA33D4D1749BFEC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7d:3a:a7:3f:74:9d:5e:3b:23:9f:27:09:82:
                    9b:0d:e3:7f:77:b1:01:d1:ab:26:c6:a4:d3:06:c3:
                    1d:d1:b8:be:51:f1:a4:d2:6e:be:30:d9:40:de:d2:
                    05:3c:66:0e:8e:94:8d:e1:e7:01:3e:e6:1d:e1:9f:
                    35:42:92:ed:41:c2:29:4b:20:10:b3:93:be:da:3c:
                    87:9e:da:e4:b0:ab:11:f8:9e:fb:7a:a2:71:80:bf:
                    8f:12:2a:da:cb:86:de:53:5f:32:28:76:f7:48:93:
                    f1:7e:8a:d1:26:f5:aa:ad:d2:22:5f:7d:39:cc:0e:
                    f6:40:da:33:93:b3:7b:c8:8e:f9:6a:1b:3b:b8:8e:
                    15:5b:d8:4f:fa:40:f9:f9:71:fd:41:9b:c8:6a:37:
                    ba:90:09:f0:41:e9:4f:ee:7b:0a:82:eb:15:2f:1d:
                    3c:37:f7:33:7c:8e:0a:f5:1c:54:ab:dc:f8:7f:fb:
                    72:fc:ef:5d:50:f5:47:6c:af:12:5d:d7:00:79:70:
                    05:18:75:a3:7f:c3:bf:a0:bb:e1:0f:ed:b7:50:77:
                    dd:ec:e5:19:b1:45:19:21:8e:ce:4c:7b:01:eb:7f:
                    bd:25:24:20:cb:7b:ff:29:8e:c3:25:19:1a:e4:89:
                    24:43:61:87:49:e1:9d:57:82:b6:f6:3d:14:dc:b5:
                    07:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:ED:46:9E:80:B2:2E:DA:3E:78:4E:97:BA:33:D4:D1:74:9B:FE:C0
            X509v3 Authority Key Identifier:
                keyid:A0:75:17:34:EC:AA:A4:CA:4F:27:E6:F5:7D:46:AB:3A:41:24:B6:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0751734ECAAA4CA4F27E6F57D46AB3A4124B6F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3133362e302f32312d3234203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:fe:17:40:1a:4a:83:db:4f:2c:e1:f6:aa:a4:de:04:2b:f8:
         ec:0f:f8:04:e7:b2:43:5e:0b:06:06:5b:a0:a9:97:a5:38:e6:
         98:92:27:c7:cc:9c:6e:f2:a2:b8:af:53:07:d9:57:ae:f9:79:
         07:6f:9e:a5:cb:8e:21:7b:cd:99:01:bd:e0:04:ca:65:e3:2f:
         83:50:d0:b2:8a:31:9b:8e:33:fc:59:cf:5b:c5:ee:e7:81:99:
         cf:8d:87:c0:13:d7:56:92:1e:da:74:0f:d0:a3:a6:f2:89:c6:
         6d:5f:65:cc:2b:f8:07:93:93:63:04:7d:c6:37:32:30:e2:87:
         d6:2b:56:50:08:b9:2b:57:d9:98:64:10:34:fd:03:f4:1f:64:
         20:48:8a:3d:3a:61:21:5b:29:4b:b8:86:ed:f5:a3:16:ce:2b:
         91:38:bb:ec:c0:1e:e7:5a:1b:b1:fd:eb:62:27:d7:47:ce:ec:
         e6:1d:ca:d0:db:b7:e3:d6:bd:da:83:ed:91:2d:40:16:ca:29:
         3e:55:fd:40:b4:9e:be:7f:72:d9:d2:70:ff:17:27:83:15:39:
         9e:aa:f6:33:60:c5:e2:25:82:07:af:b8:69:13:eb:c0:a4:2f:
         c9:2f:2a:96:bb:dd:d3:7a:8e:cc:71:e4:20:96:d4:ca:54:bd:
         6f:10:4e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org