Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137372e33392e3132342e302f32322d3234203d3e203532373635.roa
File:                     3137372e33392e3132342e302f32322d3234203d3e203532373635.roa (raw, json)
Hash identifier:          Ar2fxbS/+J2w1UiYiP2rIuYZ8+qjjDuyo2CgNIw0BRY=
Subject key identifier:   99:2A:E3:51:B3:FD:72:B6:18:07:22:80:A5:53:FB:C9:6C:DC:38:E1
Certificate issuer:       /CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
Certificate serial:       5444EC5A172846305A77700252A59DEC4970B9F4
Authority key identifier: 4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137372e33392e3132342e302f32322d3234203d3e203532373635.roa
Signing time:             Tue 05 Dec 2023 14:44:30 +0000
ROA not before:           Tue 05 Dec 2023 14:39:30 +0000
ROA not after:            Tue 03 Dec 2024 14:44:30 +0000
asID:                     52765
IP address blocks:        177.39.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:44:ec:5a:17:28:46:30:5a:77:70:02:52:a5:9d:ec:49:70:b9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B
        Validity
            Not Before: Dec  5 14:39:30 2023 GMT
            Not After : Dec  3 14:44:30 2024 GMT
        Subject: CN=992AE351B3FD72B618072280A553FBC96CDC38E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:87:b2:e4:59:09:6a:7c:e3:a6:d1:62:f2:
                    c4:c1:58:07:56:c6:c1:ba:38:a9:5d:9d:0b:67:90:
                    f4:02:84:99:04:dd:4b:3f:e4:95:30:af:21:40:81:
                    38:6b:d7:8c:3f:6c:66:05:32:0e:6f:b1:57:83:0b:
                    f1:44:96:c7:3b:c4:4c:5f:58:fb:5d:41:17:62:18:
                    c6:35:2a:56:8f:cb:ee:09:db:0b:22:b8:60:26:a1:
                    7c:f1:70:fa:28:4a:d8:87:ac:f4:d2:ab:1a:6b:cb:
                    be:95:de:3c:7e:95:ae:c4:d7:18:92:e3:e6:52:9d:
                    7b:4d:d5:9e:29:dd:bf:a1:4b:1a:53:04:a1:fa:8a:
                    0a:24:3d:37:ab:e3:91:9f:04:ad:37:94:ab:d5:d8:
                    4f:a1:d1:e9:73:0f:a7:56:8d:da:98:37:02:dd:68:
                    e0:1d:91:6f:b3:19:42:68:7b:5d:76:bb:e9:0f:5b:
                    62:d1:a6:33:26:0f:29:5e:6b:d7:0e:9d:60:c0:12:
                    43:d4:18:7e:62:3e:32:aa:a5:04:76:1e:18:15:f8:
                    15:d4:7f:9b:c6:d0:88:5e:88:dc:b3:9d:97:1b:b6:
                    e4:f1:62:61:77:f0:b2:ea:30:4d:d7:c5:08:05:6f:
                    6a:f6:fe:4a:a5:03:56:a0:1a:56:53:16:d7:32:63:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2A:E3:51:B3:FD:72:B6:18:07:22:80:A5:53:FB:C9:6C:DC:38:E1
            X509v3 Authority Key Identifier:
                keyid:4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137372e33392e3132342e302f32322d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:13:6d:81:a2:0f:72:fa:ef:b5:10:b7:70:b3:a4:08:4d:da:
         14:cb:04:93:70:14:ce:40:eb:69:90:b4:d1:90:b3:86:15:e5:
         9e:55:af:72:e6:f9:bd:5e:5d:a2:51:19:4b:88:42:97:b2:a6:
         b0:98:af:e8:3f:09:4a:d5:c4:cf:da:5b:5e:e2:ad:c4:01:b4:
         34:20:17:ca:ec:72:88:ae:17:15:71:db:56:6e:40:c1:5b:a0:
         75:89:c8:72:5e:39:a7:79:dc:65:6f:44:a7:d5:81:75:41:dd:
         5d:64:7d:6f:90:61:86:f0:23:ed:24:7e:4d:8a:d1:05:a6:aa:
         a6:24:cc:3b:74:89:a4:54:6c:c0:ab:eb:2d:8d:c7:76:d7:00:
         9f:a2:1a:82:46:51:ad:d3:16:64:0e:1b:b4:eb:7e:b9:2b:35:
         8b:72:76:1b:85:c2:b8:e5:22:a4:74:fa:21:3b:e0:2a:5e:36:
         9f:cf:67:04:b2:06:0e:1e:1d:f8:18:e5:09:21:50:cc:d7:41:
         78:16:9c:ef:a2:a3:4d:4f:00:b1:41:f1:33:ee:c0:30:4b:0d:
         7f:ca:ad:c8:ed:5c:b2:69:f1:d6:bb:a8:6b:50:1b:48:95:ed:
         06:d4:37:8c:b3:a2:47:a1:b5:1e:17:f3:5f:b3:34:e2:6f:a1:
         83:d4:cf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org