Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231322e302f32332d3233203d3e20323632323933.roa
File:                     3137372e3135342e3231322e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          gAg/o7enoOaRA5dMv+upXeWD3YEMtyKPrY+spnrhDcY=
Subject key identifier:   38:8B:D0:FE:47:FA:10:6A:8E:7D:78:2D:A3:C3:E3:CE:55:C5:5B:60
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       5585398258A582DBB32CF9472D7EA7BA4DDEAE73
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231322e302f32332d3233203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:39 +0000
ROA not before:           Tue 02 Jan 2024 21:11:39 +0000
ROA not after:            Tue 31 Dec 2024 21:16:39 +0000
asID:                     262293
IP address blocks:        177.154.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:85:39:82:58:a5:82:db:b3:2c:f9:47:2d:7e:a7:ba:4d:de:ae:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:39 2024 GMT
            Not After : Dec 31 21:16:39 2024 GMT
        Subject: CN=388BD0FE47FA106A8E7D782DA3C3E3CE55C55B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:85:cb:6f:f6:0d:86:a6:e1:77:a8:aa:cd:
                    5d:91:8e:55:0a:03:6a:59:62:0a:11:5c:66:b9:37:
                    a4:ca:d6:a8:e3:76:4f:30:49:2c:0d:e1:a2:d5:a6:
                    ef:32:da:f1:56:9c:45:6e:a2:f4:b8:1a:ee:07:fe:
                    59:2d:73:1e:58:71:95:ea:75:cc:b3:fe:4f:42:5f:
                    9b:49:3f:93:f3:66:35:f4:0b:1a:52:2e:1f:a4:dc:
                    bd:bc:fd:ac:d8:7b:4d:15:d7:64:25:cb:2a:73:9c:
                    7e:51:b9:4b:04:94:ad:56:d3:0f:ea:ae:02:3f:24:
                    16:52:04:d1:fe:7a:68:ad:cb:b6:1a:14:fa:3a:4c:
                    1c:65:a5:d1:0d:c9:e8:db:31:d9:9a:4b:3c:76:24:
                    ed:0d:7c:07:da:24:49:0f:4b:19:19:3b:0b:ba:1d:
                    ea:44:36:de:fe:fa:da:a4:2b:eb:8e:ff:bb:54:49:
                    eb:6c:55:9a:3b:aa:4d:8c:ed:13:a1:21:34:1f:5b:
                    e0:83:c2:54:c6:26:2d:30:e4:78:df:3d:73:f5:8d:
                    63:3a:e7:8f:f5:ed:9b:d4:53:43:83:f1:72:6e:8d:
                    87:b2:2d:f3:80:0a:2f:df:5c:96:d7:52:b6:85:ed:
                    fe:e5:ae:56:16:f5:0c:47:40:87:d0:c5:cc:a5:75:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8B:D0:FE:47:FA:10:6A:8E:7D:78:2D:A3:C3:E3:CE:55:C5:5B:60
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231322e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:69:3e:e8:17:7a:a5:dc:42:c1:63:10:00:47:2f:dd:50:ea:
         51:a9:c1:cf:73:2c:dc:5d:af:20:d9:b0:2c:a8:b7:ac:ba:b9:
         6c:fd:83:38:48:0d:6b:be:0b:2e:d8:96:74:25:ed:68:77:66:
         72:b5:9f:7b:f9:05:83:9c:e9:a6:8f:7c:c1:b2:b7:a2:7f:c3:
         70:0a:c0:8c:48:17:57:f9:d9:40:cd:f2:41:20:7e:4f:3f:b1:
         f9:ba:44:c6:bb:df:7f:e9:01:7d:07:3a:bc:6b:bd:cb:93:56:
         4d:0d:43:b7:62:8d:bd:46:e8:80:8d:95:77:31:fc:e6:1c:4d:
         cc:27:56:73:5c:74:28:fe:eb:f1:d6:71:c4:e6:68:9a:f5:f6:
         be:fc:2c:d6:de:4c:33:c6:93:eb:07:11:eb:da:d6:72:01:9e:
         43:34:cb:62:50:75:67:75:be:f0:56:cd:f8:21:fa:4c:24:fd:
         0e:53:03:ed:32:94:bb:41:06:fc:08:eb:49:df:b7:96:cd:89:
         33:8f:14:c5:e8:e9:6b:3f:24:a7:b4:d4:5a:0f:3f:b0:e6:8f:
         52:79:69:c5:49:07:cc:3e:67:79:14:11:dc:81:ba:98:16:43:
         2a:ef:7a:11:c0:61:c5:37:f7:49:f2:03:01:92:ca:05:e2:a8:
         64:61:c2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org