Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/1/3137372e31312e3133362e302f32312d3234203d3e203533323039.roa
File:                     3137372e31312e3133362e302f32312d3234203d3e203533323039.roa (raw, json)
Hash identifier:          JMMZWnatPZS/yZ4pz83m76kv/dzMEWsTf7KtmlIXfH4=
Subject key identifier:   9D:1E:49:43:7C:9C:F5:62:83:B5:08:66:CD:8E:D7:81:B1:A7:C8:D4
Certificate issuer:       /CN=9E740790E5D90D12C18D50517DA2E557662C31C4
Certificate serial:       1022954CEC7BDEA69EB9F04F211464258139B99A
Authority key identifier: 9E:74:07:90:E5:D9:0D:12:C1:8D:50:51:7D:A2:E5:57:66:2C:31:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E740790E5D90D12C18D50517DA2E557662C31C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/1/3137372e31312e3133362e302f32312d3234203d3e203533323039.roa
Signing time:             Thu 04 Apr 2024 21:10:45 +0000
ROA not before:           Thu 04 Apr 2024 21:05:45 +0000
ROA not after:            Thu 03 Apr 2025 21:10:45 +0000
asID:                     53209
IP address blocks:        177.11.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:22:95:4c:ec:7b:de:a6:9e:b9:f0:4f:21:14:64:25:81:39:b9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E740790E5D90D12C18D50517DA2E557662C31C4
        Validity
            Not Before: Apr  4 21:05:45 2024 GMT
            Not After : Apr  3 21:10:45 2025 GMT
        Subject: CN=9D1E49437C9CF56283B50866CD8ED781B1A7C8D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:09:26:c6:33:3d:75:b4:da:bd:5b:c1:fc:
                    fc:13:cd:79:43:8a:1a:55:e2:59:43:5e:26:00:74:
                    9e:c4:6f:1f:f8:6f:60:5b:f5:9e:ed:d6:64:da:69:
                    c3:35:35:be:fd:73:7e:b9:84:5c:a6:b9:90:9e:e2:
                    b7:5e:97:0c:5a:9e:48:37:35:ae:16:64:3b:65:9e:
                    aa:cd:71:e7:f2:f2:ee:b0:41:4d:8a:be:27:d8:ae:
                    f4:49:f1:00:1f:cc:3d:e6:c5:89:c4:7e:8c:5a:a0:
                    c9:d2:e5:2b:73:85:c2:6b:02:ec:59:43:39:a4:c8:
                    da:dc:3f:bd:46:ba:d0:0b:d4:2e:9b:a6:d5:06:9f:
                    ee:27:f2:4e:b2:69:f4:f6:d9:b1:a2:b8:ea:04:01:
                    99:c2:96:5c:2d:9f:8d:9d:33:ec:3c:22:7a:b6:e7:
                    ff:d2:4a:4d:89:f2:57:23:f5:b2:78:9f:66:69:25:
                    e9:0a:12:cb:bd:08:dc:4b:2a:d7:44:f1:c9:9b:42:
                    9d:59:dc:18:62:7e:aa:cd:38:06:d8:ed:f6:5c:92:
                    1d:0c:b3:d8:bd:98:9d:a0:cd:3a:a6:a6:3e:c6:b0:
                    bf:4b:41:a2:c7:28:2d:2a:4e:54:b5:94:48:4f:b6:
                    3d:e1:ba:4a:c6:ff:8a:21:d9:d3:cf:f7:48:af:5b:
                    5e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1E:49:43:7C:9C:F5:62:83:B5:08:66:CD:8E:D7:81:B1:A7:C8:D4
            X509v3 Authority Key Identifier:
                keyid:9E:74:07:90:E5:D9:0D:12:C1:8D:50:51:7D:A2:E5:57:66:2C:31:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/1/9E740790E5D90D12C18D50517DA2E557662C31C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E740790E5D90D12C18D50517DA2E557662C31C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/1/3137372e31312e3133362e302f32312d3234203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:c0:27:a9:46:4e:0f:77:9d:ad:32:22:b9:03:50:b5:27:aa:
         00:80:93:3f:e2:55:d3:92:28:58:d7:35:c4:c8:5a:e3:ee:72:
         6e:2d:d1:4e:2d:c5:b4:63:5a:18:0e:f6:fc:77:43:12:0b:87:
         fe:28:21:d3:06:0a:74:eb:86:8e:a5:70:d1:05:eb:e1:00:b8:
         97:51:32:f5:f3:72:47:bc:70:fc:44:6d:95:01:7a:6f:aa:15:
         ed:87:d8:ae:ad:c4:ff:44:29:99:87:84:1c:9b:a1:ec:7d:39:
         6a:6e:27:4c:d1:e2:26:9a:ab:32:28:43:87:56:93:5c:71:ce:
         50:0e:55:24:e0:ee:f1:1c:95:6c:13:76:4b:d4:8a:35:59:ab:
         7c:98:c3:0f:98:d4:8f:cc:8c:30:14:d1:f0:80:8c:16:70:e1:
         cb:c1:7f:ac:56:29:3c:50:cc:69:c4:b4:a0:d5:51:27:fa:69:
         4c:57:0c:63:2b:32:4c:33:06:5b:ed:6d:2a:35:20:06:7a:a5:
         34:77:a4:25:27:de:00:8f:7a:d7:85:33:d1:fd:ee:66:56:73:
         0b:ed:ae:48:d0:7e:14:98:9e:7c:10:70:84:da:c1:45:66:0d:
         28:9f:c2:50:05:18:9f:12:0d:ca:76:db:6f:f3:cf:d7:52:56:
         61:78:f3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org