Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139362e302f32322d3232203d3e20323632323933.roa
File:                     3137372e3135342e3139362e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          pOcuzGgC0nM3ii30FQwQK5CmezmvwsLN3RA9LIYPinA=
Subject key identifier:   63:26:4C:4E:FE:0A:BE:33:33:E3:C7:35:0A:84:FD:0D:2D:61:6B:51
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       3F01FC791DF0934515EE8E5F8A3F47B28E820E47
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139362e302f32322d3232203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:37 +0000
ROA not before:           Tue 02 Jan 2024 21:11:37 +0000
ROA not after:            Tue 31 Dec 2024 21:16:37 +0000
asID:                     262293
IP address blocks:        177.154.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:01:fc:79:1d:f0:93:45:15:ee:8e:5f:8a:3f:47:b2:8e:82:0e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:37 2024 GMT
            Not After : Dec 31 21:16:37 2024 GMT
        Subject: CN=63264C4EFE0ABE3333E3C7350A84FD0D2D616B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:e8:22:f5:88:eb:97:f7:8b:29:a4:ba:0e:
                    90:ac:22:cb:40:35:19:a3:63:c5:a9:33:c4:b0:7c:
                    c1:b9:c0:31:82:9f:9e:2e:71:37:ce:20:e7:4b:38:
                    d4:86:c0:59:98:a4:3b:00:bf:80:ce:d1:27:54:73:
                    e7:b7:22:fe:b4:a8:3a:9e:92:e4:7d:39:7b:0d:41:
                    1c:2e:07:d1:6e:dd:25:7b:a2:7a:6b:3f:8c:33:51:
                    ef:b8:53:56:66:01:0b:10:a7:f3:e4:7f:9f:a5:e3:
                    e1:b8:49:72:e7:c1:c9:94:4c:48:3f:a4:69:09:39:
                    18:e5:94:6f:9e:5a:90:6a:6d:30:c9:34:7d:6c:f1:
                    20:e9:a5:64:5e:91:ee:ad:06:a1:5b:10:21:1a:7b:
                    16:0a:ab:8a:9b:23:91:77:64:52:40:90:96:80:4d:
                    5b:ba:f3:ac:b3:d3:90:5b:04:aa:ec:48:6c:f3:79:
                    d0:c3:b5:09:4e:88:fc:ed:ef:4b:95:90:d8:c8:1c:
                    8e:b3:f8:9f:79:ae:1b:4d:b4:cb:3c:a0:2e:00:ad:
                    37:e5:e1:fc:62:91:a2:02:f1:78:0b:42:36:fc:62:
                    44:f9:f2:0d:c3:e8:34:93:56:0b:ee:38:e9:02:cd:
                    a7:35:a8:fc:b3:b0:9f:dc:c0:53:73:42:4e:97:09:
                    0e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:26:4C:4E:FE:0A:BE:33:33:E3:C7:35:0A:84:FD:0D:2D:61:6B:51
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139362e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:6b:6f:05:f6:36:7b:39:23:b1:cb:7c:86:04:4e:59:8b:85:
         02:c7:f3:d8:0f:95:6b:52:69:a2:e9:95:4e:2f:ec:d3:e8:c4:
         f7:b8:0f:ae:b6:d5:48:59:15:d8:47:0c:84:ee:94:f3:22:97:
         79:77:b3:b4:83:41:1f:13:0a:65:25:8e:a8:5b:5d:92:80:0e:
         5d:51:25:8d:90:58:dd:50:89:21:43:46:a4:3d:84:23:26:14:
         71:38:a1:08:59:7f:99:55:f0:bd:97:2b:80:ba:22:d2:f5:27:
         2f:74:d5:a3:87:38:44:cd:02:88:e2:7b:45:f8:44:6d:4d:d4:
         2b:24:50:e2:d0:d3:00:26:81:8b:a3:95:60:a5:f0:76:99:37:
         05:34:02:06:b4:0a:2b:64:78:d5:bd:ba:f0:23:16:0f:ad:71:
         a6:d9:ea:30:d5:97:4b:c9:cc:08:57:ab:3b:34:e8:f2:d6:3e:
         14:80:d7:dc:0f:2d:e6:a7:cc:73:9f:45:a6:8a:0a:e7:17:0a:
         54:8a:1a:6d:0a:ce:bc:26:60:f9:2f:51:d7:01:0c:b9:a7:20:
         ce:bc:3c:34:7b:07:80:56:dd:93:b1:f3:1a:6a:c3:a5:a0:00:
         78:d3:e4:0f:d1:2e:3f:cc:d8:ba:47:7d:b4:d3:a8:b8:12:5e:
         b7:ad:73:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org