Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230322e302f32332d3233203d3e20323632323933.roa
File:                     3137372e3135342e3230322e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          WOZSQQdqmKbFmSfv08go5+IllwH8cBUEFTGOQ/5b+oM=
Subject key identifier:   42:50:7E:5A:33:BA:CE:FF:6A:F4:4B:BE:3B:97:48:1F:9F:02:D6:C1
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       198941AB284AD29149E0B60B4F390B6A4B4F6910
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230322e302f32332d3233203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:36 +0000
ROA not before:           Tue 02 Jan 2024 21:11:36 +0000
ROA not after:            Tue 31 Dec 2024 21:16:36 +0000
asID:                     262293
IP address blocks:        177.154.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:89:41:ab:28:4a:d2:91:49:e0:b6:0b:4f:39:0b:6a:4b:4f:69:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:36 2024 GMT
            Not After : Dec 31 21:16:36 2024 GMT
        Subject: CN=42507E5A33BACEFF6AF44BBE3B97481F9F02D6C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:46:75:54:bc:e8:29:6c:16:af:19:56:b0:
                    76:ba:c3:9c:3d:46:e1:6c:20:c4:eb:5f:c9:da:a9:
                    4e:fc:37:df:76:e4:ec:13:d5:c1:e6:32:38:13:4c:
                    fb:da:39:8c:8d:18:a8:64:45:46:da:9e:4d:d1:17:
                    bc:db:9f:26:82:78:9f:9a:17:e3:02:3b:f2:fb:f9:
                    a1:63:36:db:85:09:ef:28:38:d9:86:63:ad:03:f8:
                    c3:09:a3:f6:d0:66:05:a4:9f:78:6d:ab:c3:a4:cb:
                    85:c2:3f:88:3b:37:21:3c:e8:fb:fe:0c:86:d5:86:
                    75:9e:17:67:c5:9a:08:fb:76:f0:b4:92:00:6a:32:
                    07:e6:27:05:f0:cb:5e:ac:61:61:4a:e2:0a:9b:b6:
                    57:ec:da:a7:e1:18:f7:4d:89:b4:25:91:d1:07:14:
                    79:3c:cb:6f:e8:6e:8c:05:fa:96:ff:ab:5f:8c:e9:
                    51:43:d7:57:3e:80:2c:1f:31:7c:23:90:bc:99:4e:
                    fb:50:73:c6:ae:97:aa:d2:ad:5f:c4:74:d2:17:6b:
                    64:72:49:91:97:c7:8e:32:01:06:eb:67:69:50:69:
                    ff:a1:2f:09:90:2e:0a:b7:3d:a1:cb:9c:0e:8f:da:
                    6b:99:c4:ca:88:39:19:dc:ef:74:f7:17:f7:19:15:
                    6f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:50:7E:5A:33:BA:CE:FF:6A:F4:4B:BE:3B:97:48:1F:9F:02:D6:C1
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230322e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:fa:a1:4f:70:b6:5d:e4:aa:ee:5b:5a:99:0a:d5:70:ba:8a:
         ae:b7:66:e2:98:cb:8b:f0:c0:28:4d:5f:ad:9e:e4:59:0e:15:
         c5:79:4d:8d:49:7f:4c:88:63:70:9a:28:35:4f:4d:f9:cb:90:
         f0:a6:e3:ad:a0:ff:7e:bc:a2:3a:e6:a6:d2:6e:74:93:08:9c:
         25:27:0c:6a:aa:2c:54:09:a5:e4:2b:b6:6e:a0:1c:f9:3e:45:
         ae:0f:22:82:fb:b9:70:69:b8:ef:ee:97:24:fa:ce:d0:3f:b4:
         ec:8d:85:5a:88:ca:96:ea:03:24:9f:f1:39:d9:0e:6d:ce:bb:
         c2:82:4c:89:3c:6c:c1:80:73:1d:1b:61:d4:85:dd:1a:14:f5:
         8b:bd:89:75:9e:ba:ee:22:b3:b9:34:86:3f:0c:0c:28:81:fc:
         fc:4b:b1:7e:56:c3:ec:7f:31:fa:f0:61:89:d4:b0:69:36:96:
         b1:aa:4d:fa:c5:4b:0b:7e:3d:b7:cb:69:9c:b6:60:64:9a:8f:
         69:62:2b:d8:f4:be:68:5e:0b:9e:f4:2a:06:6e:53:69:e0:b5:
         ab:1f:24:88:0c:7a:62:8a:d3:e1:cf:ac:6f:2a:90:18:03:da:
         61:84:36:83:8f:37:1a:da:5b:22:5d:ff:22:db:91:0e:5e:c5:
         1c:bb:06:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org