Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33382e302f32332d3233203d3e203532383631.roa
File:                     3137372e3132342e33382e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          55JB3JBnFyujE98sIk7aTAivrBBqgj7dJ4Zf8txJ89A=
Subject key identifier:   48:D1:21:2C:17:BE:DF:B6:7C:60:64:38:94:D7:7F:25:29:5F:E1:E0
Certificate issuer:       /CN=836BA4893066A2B7B112A0DB316F1611FD005A58
Certificate serial:       1FA49C07547366585BFA17E1251C9F0B972607F8
Authority key identifier: 83:6B:A4:89:30:66:A2:B7:B1:12:A0:DB:31:6F:16:11:FD:00:5A:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/836BA4893066A2B7B112A0DB316F1611FD005A58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33382e302f32332d3233203d3e203532383631.roa
Signing time:             Fri 01 Mar 2024 14:20:32 +0000
ROA not before:           Fri 01 Mar 2024 14:15:32 +0000
ROA not after:            Fri 28 Feb 2025 14:20:32 +0000
asID:                     52861
IP address blocks:        177.124.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a4:9c:07:54:73:66:58:5b:fa:17:e1:25:1c:9f:0b:97:26:07:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836BA4893066A2B7B112A0DB316F1611FD005A58
        Validity
            Not Before: Mar  1 14:15:32 2024 GMT
            Not After : Feb 28 14:20:32 2025 GMT
        Subject: CN=48D1212C17BEDFB67C60643894D77F25295FE1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:0a:73:c5:0d:ae:72:9e:d4:63:c5:6a:5c:
                    7a:e5:d6:08:3b:49:34:c8:64:6d:df:5e:8d:a2:96:
                    f3:24:d0:7b:8f:e8:4a:fb:68:f9:86:fc:71:b4:2c:
                    0c:2e:be:89:c9:eb:c3:49:f1:f4:19:6e:b5:26:6c:
                    ab:46:a5:35:2d:9e:09:07:85:3a:be:d6:bb:df:e8:
                    15:67:35:a1:d0:4e:0b:94:1d:97:ab:17:d3:7d:af:
                    0c:1e:0a:f6:77:5a:41:57:d6:95:2b:52:d8:28:75:
                    9c:91:9b:89:3a:96:fc:f7:9e:7f:95:d1:22:12:44:
                    21:48:e5:ca:11:ab:79:91:1a:44:4c:7c:5e:bc:4f:
                    14:d9:ac:7e:31:f4:8e:c6:17:8c:04:2c:ac:1d:56:
                    16:3f:31:8a:75:29:83:0e:b8:02:fc:64:bb:ce:3d:
                    43:c7:a4:f8:9d:17:69:ea:56:21:cf:03:64:c8:53:
                    ce:ef:64:df:40:54:47:e5:41:50:85:78:49:57:34:
                    89:23:a2:9e:3d:bc:29:f1:af:33:f0:77:bc:84:54:
                    a8:52:7f:25:ef:2c:54:b9:2e:44:5a:20:25:ec:06:
                    e9:17:e0:c4:a5:f4:e2:58:2b:99:31:d1:9f:df:ec:
                    30:dd:8c:be:c2:f8:87:62:ce:52:fe:47:bb:80:33:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D1:21:2C:17:BE:DF:B6:7C:60:64:38:94:D7:7F:25:29:5F:E1:E0
            X509v3 Authority Key Identifier:
                keyid:83:6B:A4:89:30:66:A2:B7:B1:12:A0:DB:31:6F:16:11:FD:00:5A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/836BA4893066A2B7B112A0DB316F1611FD005A58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/836BA4893066A2B7B112A0DB316F1611FD005A58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33382e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:ab:81:dc:aa:17:b0:2f:66:2d:bf:be:e2:61:0d:7f:49:fe:
         67:6b:e5:27:f6:f9:cd:8c:b3:da:d1:08:9d:a1:1f:8a:d9:24:
         b2:10:3c:9f:12:39:6f:b4:58:fe:4b:f9:ba:97:5d:05:75:1a:
         6d:c5:51:fc:a8:69:40:e0:e3:2b:b9:bc:ab:fb:65:fa:67:5f:
         9d:96:46:99:a9:dc:b3:d5:19:fe:20:34:76:9f:e8:f5:e7:7e:
         84:9c:8a:4b:29:3a:ae:92:d3:b0:0b:f1:a4:9c:02:38:91:08:
         9f:2a:0e:8a:5c:0a:2e:2b:0e:7f:89:bb:27:92:3b:61:9d:7d:
         ec:5d:39:46:10:19:62:dc:cf:09:fc:41:4c:2c:0a:4b:fc:2c:
         d7:2a:19:22:64:ea:f3:8c:af:97:d7:9f:ef:9b:c7:0f:09:88:
         e5:a9:ba:28:28:53:e2:c6:6c:73:07:13:65:9d:52:81:a8:33:
         8e:29:74:65:a0:2a:aa:81:5b:e0:48:07:17:00:e8:71:59:fe:
         a9:a8:9a:13:35:8d:7f:e3:a9:76:e2:01:3f:50:7a:1b:65:9b:
         6f:96:fc:ac:7d:0b:47:8e:10:4e:c0:0c:51:52:40:15:48:8a:
         ab:6e:09:74:43:16:64:6b:6b:39:39:d9:54:86:c2:67:3c:fe:
         f5:3e:18:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org