Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232302e302f32332d3233203d3e20323632323933.roa
File:                     3137372e3135342e3232302e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          5EmrNBDQQYuy6ZdO2GIy4O2/cTi5admIprazP5BfSfU=
Subject key identifier:   E9:D1:74:24:44:92:3B:EF:70:FF:46:BD:D3:98:49:88:E8:A9:6B:12
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       1B4C2170C3662A74A8671A8CC38665B714463F1E
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232302e302f32332d3233203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:33 +0000
ROA not before:           Tue 02 Jan 2024 21:11:33 +0000
ROA not after:            Tue 31 Dec 2024 21:16:33 +0000
asID:                     262293
IP address blocks:        177.154.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4c:21:70:c3:66:2a:74:a8:67:1a:8c:c3:86:65:b7:14:46:3f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:33 2024 GMT
            Not After : Dec 31 21:16:33 2024 GMT
        Subject: CN=E9D1742444923BEF70FF46BDD3984988E8A96B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:08:65:b0:2d:85:9a:b7:09:c2:63:03:21:
                    e6:b0:25:c9:17:17:bd:2a:6c:5d:42:f1:d6:0a:49:
                    2a:6b:50:8f:c2:36:2b:63:7f:02:ff:f3:a5:78:42:
                    d5:e4:77:5b:b7:38:d5:b3:24:6b:8c:9c:46:aa:e4:
                    2d:29:47:ed:c2:23:3a:c5:4e:ce:ff:34:58:8c:67:
                    9b:fe:fb:b8:47:6b:22:5f:e5:ec:17:b5:8d:d3:52:
                    56:14:4e:c3:dd:04:91:76:42:b4:f3:bb:ec:23:29:
                    fd:6d:07:f7:f9:7f:8f:d4:b3:8c:4e:b0:9f:2e:60:
                    ba:26:5d:3e:9b:6c:4e:84:8a:6a:ad:29:cf:0b:59:
                    5b:33:d6:69:ec:9f:6e:c9:04:11:8e:9a:f7:50:43:
                    01:73:4a:99:36:2b:59:f1:6c:ff:ce:ba:be:c5:a1:
                    c3:56:5a:10:09:ad:81:2e:d2:49:41:e1:34:b2:bc:
                    fc:2c:33:9e:df:8d:6d:8b:44:82:50:a7:a9:88:d8:
                    82:b2:0e:af:a5:29:f0:ee:9d:fe:cf:d0:14:ca:92:
                    0b:ad:5b:07:c9:c6:f7:10:a0:6a:03:86:21:4b:0b:
                    2d:59:e4:48:e4:ee:46:da:bc:89:fa:1f:af:5e:3f:
                    19:ca:83:a4:58:2a:d0:d1:a5:49:5d:82:a8:f1:d1:
                    48:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D1:74:24:44:92:3B:EF:70:FF:46:BD:D3:98:49:88:E8:A9:6B:12
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232302e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:26:c6:3e:1b:f8:6a:c7:8b:84:8b:b1:0b:c4:74:74:4e:e0:
         c4:7f:ea:0c:62:0e:42:93:61:5e:ea:2b:b1:55:fb:e3:47:bd:
         4d:fe:da:17:a9:c1:7a:cc:86:fa:cb:40:be:7a:7a:ba:ba:4d:
         17:38:7d:bf:13:b9:b0:97:6f:6e:79:61:a0:ff:9d:74:7a:5d:
         4d:f8:dd:e5:1e:c3:bc:d4:00:25:de:d8:fb:fb:f9:29:e0:e8:
         6c:69:a4:c0:a7:6b:40:4f:a7:61:bc:dc:3e:14:d0:0a:e4:f1:
         21:7f:23:ae:12:e5:0d:de:e8:dd:b3:6a:5f:b7:1f:92:a5:4c:
         b4:5a:20:fa:cd:fe:d4:57:4b:57:c6:47:45:f2:86:70:04:be:
         66:e6:df:ec:ca:d6:10:12:73:1e:2e:4e:4b:e3:19:f4:a1:31:
         de:c1:80:00:14:25:51:e6:db:e0:5a:4a:6e:de:a5:25:b4:d2:
         97:8a:36:dc:57:c2:96:38:5f:9a:d1:f6:7b:8e:e7:19:f9:ef:
         5c:5d:f8:1e:c7:95:59:ef:cd:33:c2:83:78:c7:32:73:38:60:
         e4:50:90:7d:77:68:d4:a4:db:62:5b:57:cc:99:e5:99:4d:ab:
         c8:e8:57:d5:53:c5:b1:b5:bb:5d:d9:13:dd:84:71:a5:4c:e0:
         91:66:34:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org