Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137372e33392e3132302e302f32322d3234203d3e203532373635.roa
File:                     3137372e33392e3132302e302f32322d3234203d3e203532373635.roa (raw, json)
Hash identifier:          c4T4Wv3XD7IChx2GzjNw++VfBo4rqMqw4RM9oRYeAgU=
Subject key identifier:   84:50:63:13:6C:01:A0:F2:B6:A4:5C:91:54:39:89:A9:FB:4B:44:7E
Certificate issuer:       /CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
Certificate serial:       4583D38B7A9E6AEE5881F60A56DE0E3437A219A6
Authority key identifier: 4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137372e33392e3132302e302f32322d3234203d3e203532373635.roa
Signing time:             Tue 05 Dec 2023 14:44:30 +0000
ROA not before:           Tue 05 Dec 2023 14:39:30 +0000
ROA not after:            Tue 03 Dec 2024 14:44:30 +0000
asID:                     52765
IP address blocks:        177.39.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:83:d3:8b:7a:9e:6a:ee:58:81:f6:0a:56:de:0e:34:37:a2:19:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
        Validity
            Not Before: Dec  5 14:39:30 2023 GMT
            Not After : Dec  3 14:44:30 2024 GMT
        Subject: CN=845063136C01A0F2B6A45C91543989A9FB4B447E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:0b:cd:aa:f4:ff:de:c9:e6:b7:d7:12:82:
                    3e:94:f8:85:ec:29:dc:ac:04:01:af:1d:a3:9b:55:
                    fc:cc:02:b1:02:5f:30:77:c0:1f:df:1d:f6:6d:42:
                    ba:8f:88:7e:63:31:81:a1:ee:96:86:b6:00:8c:38:
                    28:a3:7e:b6:07:8b:84:6d:86:32:b1:3c:e5:64:52:
                    57:2e:ec:a8:3d:a4:42:85:f4:cb:4d:24:49:05:14:
                    50:bf:20:23:b7:5f:10:14:cf:72:6b:88:7f:2d:8c:
                    21:d9:c6:32:4f:aa:a5:3b:4e:be:31:78:df:86:a8:
                    d9:34:1d:a4:e8:26:f3:4b:ca:f6:ca:ef:8a:fd:d3:
                    34:5c:50:73:f3:ec:a3:3d:a7:e2:9b:ad:f2:34:94:
                    52:c8:a5:31:ff:78:e6:44:cc:29:e1:01:a9:82:01:
                    e6:9d:3d:3c:1f:64:75:7f:f1:76:bf:8d:c8:45:0e:
                    1e:47:97:23:a3:33:fd:b6:65:f6:26:d7:0e:41:c8:
                    6e:0c:67:31:56:90:1f:a7:e0:16:4d:a4:06:d2:3e:
                    78:d4:e0:97:cd:c6:b6:30:ec:b6:55:eb:1c:b2:e3:
                    61:1d:50:8b:3f:52:0b:10:88:40:55:18:ea:1f:9c:
                    bc:3c:79:fb:b2:c8:ee:35:a9:37:91:bb:c0:a4:77:
                    67:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:50:63:13:6C:01:A0:F2:B6:A4:5C:91:54:39:89:A9:FB:4B:44:7E
            X509v3 Authority Key Identifier:
                keyid:4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137372e33392e3132302e302f32322d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:d8:16:0b:ee:55:f6:1e:ea:ee:a9:fa:f1:c9:6c:46:90:79:
         02:64:6d:17:c5:24:f1:5f:27:4a:96:f3:6a:84:a3:75:4b:59:
         73:73:82:ee:49:b3:fc:8c:60:74:3e:59:9a:9f:14:0d:69:7e:
         8e:94:7e:ae:95:11:e5:ab:e0:e1:02:43:02:e2:6e:87:be:4a:
         16:45:a3:36:90:6d:99:89:27:76:08:8c:0a:2b:7d:a9:a6:10:
         ef:4d:9c:58:0c:f9:4f:25:09:43:74:49:86:0f:dd:10:31:dd:
         12:a3:a7:4d:f2:ab:68:8d:23:38:97:99:ed:b6:b6:09:18:4d:
         e9:f9:5a:e5:8e:55:07:56:b4:3c:54:17:1a:4a:39:dd:35:0f:
         22:88:de:48:30:68:5a:d8:01:83:ef:79:6c:50:58:6c:d9:6b:
         12:a5:ae:35:3b:4d:4c:e1:42:57:53:ca:9f:c6:ec:4f:2e:a5:
         85:5b:b8:44:d9:a8:a8:2e:81:6d:6d:33:d7:e7:0b:db:6a:22:
         cb:96:3d:1c:10:07:e0:4b:69:6e:04:32:1f:03:96:45:d6:b8:
         fd:78:48:38:cb:60:84:f3:de:8a:09:49:7a:4c:c6:eb:70:aa:
         d7:84:ae:fc:f9:0d:3a:4e:8b:b6:97:7d:2f:a6:96:f7:48:18:
         b0:36:2f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org