Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232312e302f32342d3234203d3e20323632323933.roa
File:                     3137372e3135342e3232312e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          3uDWcOjxM9B+a0dsGgQ/QV3/5HmejL1eXmjxTWgK7AA=
Subject key identifier:   87:CA:D3:9D:74:6B:7A:55:B8:88:0C:88:D6:99:E9:BC:65:C9:F4:39
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       10D99091A032775DE9FF34EE6745DE0DFE82246C
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232312e302f32342d3234203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:32 +0000
ROA not before:           Tue 02 Jan 2024 21:11:32 +0000
ROA not after:            Tue 31 Dec 2024 21:16:32 +0000
asID:                     262293
IP address blocks:        177.154.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d9:90:91:a0:32:77:5d:e9:ff:34:ee:67:45:de:0d:fe:82:24:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:32 2024 GMT
            Not After : Dec 31 21:16:32 2024 GMT
        Subject: CN=87CAD39D746B7A55B8880C88D699E9BC65C9F439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:66:e6:4a:ac:45:71:ee:7a:0b:7d:c2:04:37:
                    cf:14:ef:92:0f:67:48:2d:39:d1:06:52:fa:38:5e:
                    5c:a1:52:3e:bc:31:fd:45:8a:0e:6d:eb:31:34:6b:
                    4a:7b:40:14:5f:33:54:fc:79:93:0b:4c:e3:70:e5:
                    45:72:b9:43:eb:eb:33:bd:49:47:8b:f0:93:5a:41:
                    5f:50:e4:4e:df:8e:24:83:e2:9b:65:4b:b2:94:11:
                    d4:bb:3c:c1:25:88:56:98:90:e9:a0:5c:c3:3d:86:
                    ed:da:00:56:d2:f3:d7:76:21:e1:25:e4:7a:8a:64:
                    69:18:04:33:5e:da:1a:c6:b3:8b:1c:7c:af:c2:8a:
                    58:84:4c:e0:69:f1:8f:ec:18:d6:26:e4:86:1e:18:
                    1d:21:83:88:c5:a8:5f:6f:55:4d:bf:3d:07:2c:40:
                    a1:cb:8f:0f:b6:cc:6d:35:4a:ae:9c:07:b3:91:b3:
                    5a:6e:ba:e4:c3:c5:08:a6:80:95:e2:33:06:53:a7:
                    c9:ea:a1:27:1a:37:7c:9d:99:9e:d3:d2:34:46:f5:
                    db:cd:2e:8d:0e:b8:d6:87:d6:5f:61:09:ab:8f:28:
                    9f:c3:81:a7:26:19:87:da:a0:26:e1:e6:99:2e:28:
                    6d:8f:c8:63:99:4d:25:86:39:95:91:99:d1:cd:47:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CA:D3:9D:74:6B:7A:55:B8:88:0C:88:D6:99:E9:BC:65:C9:F4:39
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232312e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:a3:f2:8e:dd:a7:9f:7e:3c:e3:6c:94:b6:9a:d8:85:68:c8:
         e0:55:4d:22:85:08:64:9e:e6:c7:59:72:25:fa:05:c5:ba:aa:
         04:40:3a:d2:30:77:33:d8:81:e7:a3:ae:68:79:b7:26:8f:57:
         90:0a:e8:0f:7c:5f:92:c6:0e:f3:70:9d:8d:a7:e5:4d:bb:2a:
         1b:61:f6:21:10:1f:02:d9:da:5c:77:5f:1c:3a:b9:93:3e:7d:
         19:4f:1b:35:97:20:bc:9f:bb:cd:c1:54:f2:a0:1b:ea:2f:55:
         c8:f3:09:7f:5a:9d:18:a4:61:ff:be:68:19:af:66:ce:51:01:
         d3:48:06:fc:19:03:3e:c6:9e:d5:d1:fb:ba:73:08:92:e2:be:
         3b:2e:d3:3c:93:db:16:03:57:de:9e:82:9d:ca:4c:9f:b7:3c:
         9e:ff:a3:de:31:76:b6:ab:db:e5:ac:0c:f4:bb:ca:cb:30:5b:
         2b:aa:84:62:bc:a1:1c:1c:dd:6f:c7:96:fb:ca:bd:e3:c9:8b:
         37:c2:49:77:71:30:61:f1:6a:d6:56:c2:70:07:9b:fc:ee:aa:
         0b:98:3f:ac:4a:f6:24:ff:39:00:79:be:71:5a:30:9c:de:46:
         a7:54:19:5e:4e:9b:97:0d:f0:8e:6f:99:d3:1c:d4:90:1c:4c:
         08:eb:e0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org