Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137372e31302e3132302e302f32322d3234203d3e203533323336.roa
File:                     3137372e31302e3132302e302f32322d3234203d3e203533323336.roa (raw, json)
Hash identifier:          m7USZBPNdO8CB1IxDT4pRh4zJgrhTPmYHiQ+SWs+tFg=
Subject key identifier:   85:D4:78:32:18:F9:6A:CC:2A:34:FE:6E:A4:14:70:46:38:90:5C:D8
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       7BDBB8C7047D30827A56085878EDA359863299
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137372e31302e3132302e302f32322d3234203d3e203533323336.roa
Signing time:             Tue 08 Aug 2023 19:00:00 +0000
ROA not before:           Tue 08 Aug 2023 18:55:00 +0000
ROA not after:            Tue 06 Aug 2024 19:00:00 +0000
asID:                     53236
IP address blocks:        177.10.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:db:b8:c7:04:7d:30:82:7a:56:08:58:78:ed:a3:59:86:32:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Aug  8 18:55:00 2023 GMT
            Not After : Aug  6 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:85:12:f4:5a:c1:78:2c:53:23:8d:e4:fc:
                    ce:53:da:b5:b4:c7:3e:43:0e:49:5c:51:a3:f9:bd:
                    3a:25:63:74:db:a6:1e:c4:6f:47:a7:98:62:b8:4e:
                    b3:8f:18:f3:c8:28:37:78:70:d8:0d:3c:e1:17:a7:
                    06:a0:c1:6b:d6:56:87:9c:31:1a:3e:1b:77:da:db:
                    3f:cb:6b:bc:14:b2:5c:ea:ca:49:48:06:62:a5:a2:
                    d1:e7:0b:a9:4e:4f:d3:4e:fa:88:6e:3f:74:19:9b:
                    bc:0b:a3:0d:fc:94:e0:1e:03:66:d8:fe:5a:7c:80:
                    48:59:40:06:e6:36:fa:2f:4b:a9:98:b7:6e:1a:5e:
                    e2:c7:ea:e3:71:cf:42:aa:39:e4:79:40:23:c7:e6:
                    46:0f:30:42:0d:ae:5a:98:01:70:e2:8e:d3:5a:ff:
                    d3:a2:a5:b9:29:26:10:01:f6:ec:06:68:87:69:45:
                    79:40:9b:23:56:fe:ec:b1:c9:72:66:73:25:2b:23:
                    67:35:87:64:47:75:97:5f:ad:19:d1:f4:dd:c7:7e:
                    7b:47:a8:b1:71:6e:4f:96:d7:22:27:c7:8b:5b:77:
                    8d:a2:e0:36:b8:28:78:33:98:26:78:25:e5:8f:c1:
                    a8:90:ca:ba:d8:fe:0a:c6:49:8b:1e:38:c2:db:7e:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D4:78:32:18:F9:6A:CC:2A:34:FE:6E:A4:14:70:46:38:90:5C:D8
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137372e31302e3132302e302f32322d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:c2:f7:b8:35:e9:6f:6f:3d:e3:40:a6:d6:96:28:4e:5e:e5:
         08:1f:3f:30:b1:a0:9a:26:9e:e6:db:2a:cb:bf:56:79:11:aa:
         37:c6:de:2d:b2:cd:64:2f:99:44:33:e7:76:45:e8:58:75:4b:
         9f:d2:0a:7c:73:fa:d5:25:a8:fe:18:d3:63:ba:3a:97:85:3e:
         66:8d:44:4f:27:b0:c6:56:fd:14:54:d4:3c:0d:c6:f6:28:0d:
         96:de:7b:8c:1a:1a:72:1a:ae:d9:43:69:4f:ea:85:f0:e7:61:
         8c:c9:38:5f:b9:dc:d1:b0:6e:80:19:42:95:3c:bd:f7:c7:14:
         c9:a8:02:81:45:a5:8b:28:8c:32:cc:92:ee:10:20:d9:cd:8e:
         83:d8:59:eb:19:d6:4f:af:f1:05:1c:a6:b4:d4:23:eb:74:3d:
         a8:80:84:25:a3:b8:de:bb:17:bf:e7:3f:66:b7:6e:13:d4:21:
         80:34:81:63:31:b6:c7:fc:89:61:24:b3:40:bb:72:ac:f8:87:
         a3:3b:03:76:56:ab:9c:ac:9a:c8:59:58:8b:63:6e:cb:43:c5:
         14:e0:02:7b:b7:5f:56:0f:f7:74:5e:50:b6:78:92:5b:9e:c1:
         b5:fd:91:cc:32:b3:4b:10:b6:3f:e2:b4:6a:e0:7f:45:f8:73:
         85:b5:e8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org