Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f32322d3232203d3e20323632323933.roa
File:                     3137372e3135342e3139322e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          WjkuAzI6T4GCysVn4aqFR9Aw1mouU3Dch5jVCXBTEZ8=
Subject key identifier:   93:84:11:3C:07:82:F9:EA:D8:AB:79:0F:EF:11:39:89:A2:CC:C1:87
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       232C7508EF22926CE1C03A305A016BDDC63CD842
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f32322d3232203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:39 +0000
ROA not before:           Tue 02 Jan 2024 21:11:39 +0000
ROA not after:            Tue 31 Dec 2024 21:16:39 +0000
asID:                     262293
IP address blocks:        177.154.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2c:75:08:ef:22:92:6c:e1:c0:3a:30:5a:01:6b:dd:c6:3c:d8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:39 2024 GMT
            Not After : Dec 31 21:16:39 2024 GMT
        Subject: CN=9384113C0782F9EAD8AB790FEF113989A2CCC187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b0:d4:f9:97:6f:a5:d6:c6:83:b0:0e:95:35:
                    7c:01:84:86:94:92:71:8b:a9:b8:6b:58:63:57:03:
                    b3:8d:68:8b:d9:ac:7e:7e:59:e4:26:a9:19:95:b9:
                    73:cc:c4:a1:41:be:77:b1:e7:40:e3:38:0e:60:2e:
                    46:da:7c:2b:11:d1:e1:15:4c:7f:50:81:b1:32:a5:
                    91:3c:da:fe:0a:8d:cf:e5:d4:8d:86:20:e1:56:f5:
                    ac:ad:bf:47:ea:43:31:26:49:e0:7d:9a:b0:66:8e:
                    bc:44:f7:f3:4c:1b:c1:d0:70:5c:bd:90:3f:f3:bb:
                    a7:88:46:4b:66:dc:aa:16:2b:cc:ed:17:ab:ee:a1:
                    4e:91:11:7e:66:a7:87:90:f3:bb:d0:d8:44:c4:76:
                    4a:1e:bf:f7:1b:a0:7e:33:5e:f6:ee:3e:65:5f:ce:
                    ba:de:09:61:e8:ff:a5:de:c9:c0:b0:fc:6c:80:5c:
                    70:df:6c:de:96:2e:0d:d5:c5:a1:26:c8:6f:88:96:
                    6b:71:ac:7c:f3:53:97:17:6e:e2:5d:8e:cd:fd:e7:
                    49:89:25:71:e3:f1:92:f7:6f:5c:4d:01:87:a9:d4:
                    a1:b4:3c:67:e9:20:72:21:50:96:91:5a:08:fc:59:
                    47:c4:9c:51:27:e4:60:5e:4f:71:af:93:da:6b:58:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:84:11:3C:07:82:F9:EA:D8:AB:79:0F:EF:11:39:89:A2:CC:C1:87
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:99:cb:6d:63:73:21:bc:a5:5f:eb:65:85:e1:4c:3e:a3:f1:
         a2:ca:dc:10:e3:1e:05:70:11:b8:9f:34:f9:c5:8e:21:8d:9d:
         47:b7:f8:f5:a4:e2:e2:33:01:1b:43:81:bc:7e:60:69:c8:43:
         6a:96:66:ea:fd:52:46:b3:4f:20:d0:e6:e3:46:f7:83:d1:3b:
         34:d6:c6:4e:cf:dd:0e:aa:dc:1c:e9:16:f1:10:83:76:ff:35:
         23:8f:5e:d0:7b:4c:9e:cb:02:ef:ac:02:6f:30:80:8a:05:c7:
         4b:91:75:68:7d:35:e7:88:53:f1:0b:d8:b8:57:b4:e5:3b:97:
         4d:0c:3a:ce:33:c1:64:be:b2:79:83:de:c1:b0:a7:4a:dc:e9:
         46:e3:2a:70:d5:7c:59:7e:79:36:14:71:71:6c:ff:ba:47:96:
         0c:83:82:01:e3:63:02:e7:d6:39:23:04:f1:8d:6a:b7:0e:1c:
         91:cc:e0:95:bd:3e:48:4e:ce:a8:17:d5:ab:bb:b2:46:79:ea:
         99:15:f8:6b:39:a0:58:3b:5f:a3:b7:54:c5:29:ae:e5:31:24:
         9b:cf:9c:60:6c:5c:02:6c:49:11:d4:f8:fc:92:2f:4d:ab:fa:
         cc:58:4a:18:af:94:fd:8f:4a:b9:d9:2d:f7:8b:1f:47:ac:4b:
         b4:57:c9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org