Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230342e302f32322d3232203d3e20323632323933.roa
File:                     3137372e3135342e3230342e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          x3B5dJ0xOSk8+pzPpbeseKoIu7Ddx/OCHdZm0j6dmlQ=
Subject key identifier:   74:0B:63:9D:B9:0D:12:F2:B3:89:06:68:DB:9E:F3:9F:35:B5:84:F9
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       6436187D1B4CF6251AF3CB3D04D1D0A1E8F14F46
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230342e302f32322d3232203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:40 +0000
ROA not before:           Tue 02 Jan 2024 21:11:40 +0000
ROA not after:            Tue 31 Dec 2024 21:16:40 +0000
asID:                     262293
IP address blocks:        177.154.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:36:18:7d:1b:4c:f6:25:1a:f3:cb:3d:04:d1:d0:a1:e8:f1:4f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:40 2024 GMT
            Not After : Dec 31 21:16:40 2024 GMT
        Subject: CN=740B639DB90D12F2B3890668DB9EF39F35B584F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:0f:da:48:d4:0b:94:57:ab:11:f5:ca:e2:
                    8c:09:2e:50:01:6f:5f:ed:d8:03:9d:8c:16:99:07:
                    96:64:2e:2a:0a:f3:c6:4b:7a:b3:7d:1b:3f:09:16:
                    10:f5:3c:d0:c8:32:ee:8a:74:d1:60:a0:ba:80:33:
                    3f:46:bb:19:ab:f3:94:f4:23:dc:81:39:83:3d:c9:
                    46:22:7b:d8:a0:f6:e6:d0:1c:12:01:a1:a7:c5:69:
                    12:55:c2:9f:44:88:ca:61:ec:19:75:d6:3f:57:9d:
                    3b:6e:ac:d1:93:1a:60:f3:b4:cf:6a:bf:24:46:b2:
                    28:2b:34:21:a9:3b:8b:3f:df:d2:ef:92:0b:cc:11:
                    bd:eb:48:14:89:8e:3a:ef:aa:36:18:5c:c6:f0:07:
                    19:62:14:cb:ad:b9:5c:54:b1:f5:d4:02:b2:d7:29:
                    7e:2a:9e:72:ee:be:b6:e3:c8:18:06:4a:10:28:53:
                    87:32:ff:8d:a9:77:53:96:13:b7:b5:b7:5c:83:2a:
                    26:4a:e5:b8:79:b3:9a:94:0a:07:63:06:58:26:84:
                    e3:a1:b9:b4:be:c8:30:5c:1f:fc:08:07:cd:ee:95:
                    c8:f1:a6:da:f6:4c:4d:be:ae:2a:ca:20:b3:63:41:
                    3a:fa:e1:29:74:55:28:fb:39:f5:f0:54:3b:0b:9b:
                    a9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0B:63:9D:B9:0D:12:F2:B3:89:06:68:DB:9E:F3:9F:35:B5:84:F9
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230342e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:98:42:94:d0:37:33:b5:d8:14:7a:06:a0:52:68:88:06:12:
         b6:70:5b:83:c8:db:fb:f7:90:19:42:5c:fe:50:6e:72:6c:e4:
         ec:3c:87:50:9a:d5:61:1d:c4:55:26:40:77:a9:a3:98:b9:c9:
         2a:c4:36:30:99:7b:5d:b8:97:3e:5b:4d:a6:86:8f:9c:a8:16:
         26:40:4f:d3:72:3a:9d:f1:8d:8e:73:0d:58:bf:77:d6:2f:34:
         38:b8:c0:12:eb:8b:52:d7:35:7d:df:92:56:dd:20:e1:56:6c:
         3a:9e:ba:34:f8:35:29:a9:5c:41:f3:05:68:80:f9:96:17:b8:
         35:51:7e:1d:6c:f8:05:fb:4e:4a:92:05:e6:f0:6f:14:0a:f0:
         20:90:db:85:53:26:71:89:86:fb:4c:cd:62:76:ff:f4:24:47:
         97:02:73:f5:2d:b2:2e:6f:c5:db:2c:c7:1a:9c:89:88:35:02:
         80:62:d7:b3:87:d5:2d:d4:1e:1a:b8:8a:4c:70:59:19:09:43:
         fc:86:4a:b1:cb:3c:e3:3d:33:8a:20:c8:a0:eb:58:51:ee:c8:
         54:05:2f:b2:64:71:5d:51:2e:a3:6b:1b:95:51:9e:6b:3d:6d:
         d8:b8:0d:58:b5:d0:42:49:83:a4:ac:27:7e:ba:03:ca:38:ef:
         25:cc:12:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org