Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/3137372e31322e3232312e302f32342d3234203d3e20323730373531.roa
File:                     3137372e31322e3232312e302f32342d3234203d3e20323730373531.roa (raw, json)
Hash identifier:          ALnId0lWg9oaDMuGUPhoMDFrZJ0yjt/SjAtPVmH7ejw=
Subject key identifier:   7D:80:28:7B:39:B0:73:7D:88:F7:20:5C:55:C2:25:64:7E:9C:95:BC
Certificate issuer:       /CN=98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D
Certificate serial:       07451B8EBFD57AFB8FEF0A7B2D0FA00456E615D4
Authority key identifier: 98:A3:C1:67:BE:65:CE:4B:A1:58:5E:8D:4F:90:A6:AB:24:89:F9:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/3137372e31322e3232312e302f32342d3234203d3e20323730373531.roa
Signing time:             Fri 12 Jan 2024 16:00:25 +0000
ROA not before:           Fri 12 Jan 2024 15:55:25 +0000
ROA not after:            Fri 10 Jan 2025 16:00:25 +0000
asID:                     270751
IP address blocks:        177.12.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:45:1b:8e:bf:d5:7a:fb:8f:ef:0a:7b:2d:0f:a0:04:56:e6:15:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D
        Validity
            Not Before: Jan 12 15:55:25 2024 GMT
            Not After : Jan 10 16:00:25 2025 GMT
        Subject: CN=7D80287B39B0737D88F7205C55C225647E9C95BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:f7:f6:25:bf:c0:9c:82:c5:de:a7:42:94:
                    d1:64:39:4e:28:6b:b8:50:9f:06:e6:dd:13:00:36:
                    74:a4:4d:6c:b3:7a:ff:b2:7f:0b:01:ba:8a:ac:ea:
                    f9:ac:d8:54:44:d8:76:af:40:a7:9d:56:43:a3:10:
                    f9:28:de:03:69:76:06:9a:3b:06:8e:01:9b:8a:bd:
                    5a:3a:9d:c3:6b:b1:04:fb:14:62:41:41:3c:ff:ab:
                    3f:73:dd:4e:6d:14:55:d4:8b:c4:8f:88:12:e6:52:
                    2b:07:77:e1:96:f8:ab:bf:92:c3:c9:d0:a1:8c:65:
                    aa:a5:64:03:9b:30:b2:cd:52:ab:50:7c:58:4c:b1:
                    5d:7d:62:04:0b:24:87:ec:45:56:8c:64:e3:d3:73:
                    b6:c2:05:10:39:9e:4f:5c:ed:0e:a3:bb:ec:95:d5:
                    77:7b:0d:17:d3:83:f8:09:45:49:a5:8c:f8:1d:18:
                    97:52:7e:74:93:f3:43:62:f4:cf:c3:9e:06:8d:a4:
                    a4:bb:2b:f9:b8:e9:c9:d4:35:1a:d9:a1:77:26:c5:
                    7d:15:e2:f1:73:55:13:93:ad:59:df:ca:fc:34:70:
                    60:8c:0f:44:a4:6f:55:98:30:b0:8f:d6:ea:d4:d8:
                    2d:14:be:df:74:a0:d6:81:cd:f9:5f:15:74:8d:4a:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:80:28:7B:39:B0:73:7D:88:F7:20:5C:55:C2:25:64:7E:9C:95:BC
            X509v3 Authority Key Identifier:
                keyid:98:A3:C1:67:BE:65:CE:4B:A1:58:5E:8D:4F:90:A6:AB:24:89:F9:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98A3C167BE65CE4BA1585E8D4F90A6AB2489F92D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRnDYBQ6EpudHLDm1x226uinsT9po54xzHfCyj4G3Ltj/0/3137372e31322e3232312e302f32342d3234203d3e20323730373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6d:a6:41:ae:db:7d:3d:03:ad:24:f5:e2:87:0e:d4:1a:94:
         38:59:67:44:9d:76:b0:b5:27:ed:45:80:eb:7f:65:b6:2c:e0:
         12:d8:4e:55:69:0a:ee:91:a9:71:80:76:f3:71:07:17:16:e1:
         3b:99:6f:d4:05:c2:e3:2e:a3:ab:42:76:0c:ef:8c:e1:06:be:
         22:4c:d5:87:7a:a7:62:a7:44:c4:bd:90:cb:b8:c6:c3:e6:77:
         f1:ec:79:ac:f7:16:66:81:c7:ff:86:9d:49:dc:2a:12:bd:a8:
         4e:ce:4c:c9:e7:e9:d4:97:bf:77:3b:65:fb:91:8a:24:6e:0f:
         55:fc:4e:fe:7b:c1:d6:b6:7e:7a:2e:df:81:be:a3:8c:df:ad:
         d0:f7:f3:56:05:94:6c:43:9a:f6:08:3c:fc:a2:33:15:b0:3b:
         00:71:b7:30:3e:f4:f7:12:28:92:82:8c:c7:a9:dc:ab:8b:71:
         a8:54:70:a4:b0:4f:68:9b:1d:6d:0e:59:e5:9b:ad:e3:96:60:
         70:4c:f7:bb:b9:5f:42:f0:e3:b6:fa:4b:d7:bb:83:1b:bc:7c:
         97:8a:d2:15:13:0c:75:fa:f4:6e:84:ff:dc:60:e2:48:9e:8f:
         29:fa:ca:b5:7c:2d:4f:e2:5b:fd:93:ee:ed:9d:ea:6d:0c:70:
         2e:6c:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org