Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137372e31302e3132302e302f32342d3234203d3e203533323336.roa
File:                     3137372e31302e3132302e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          pvz1I7250t09FzVgBwkIP7ipNTkG/PEIDn/BM//+Bsk=
Subject key identifier:   05:7B:47:5C:9E:6D:33:8B:A7:1C:65:C6:B9:CA:74:4B:96:61:0E:8B
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       0DA51B4E8990D00B2FB6DDDD0A6CA42351E8EB2D
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137372e31302e3132302e302f32342d3234203d3e203533323336.roa
Signing time:             Thu 08 Feb 2024 15:00:00 +0000
ROA not before:           Thu 08 Feb 2024 14:55:00 +0000
ROA not after:            Thu 06 Feb 2025 15:00:00 +0000
asID:                     53236
IP address blocks:        177.10.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a5:1b:4e:89:90:d0:0b:2f:b6:dd:dd:0a:6c:a4:23:51:e8:eb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Feb  8 14:55:00 2024 GMT
            Not After : Feb  6 15:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:fc:21:75:c9:97:f8:d5:d9:72:f0:db:15:
                    9c:d6:c9:58:c6:8e:1f:2b:cb:ff:de:b9:a6:7a:11:
                    d5:ba:26:b3:d1:51:25:6b:e2:69:e5:ff:00:22:47:
                    a9:c0:1b:f1:d2:68:3d:95:7e:cb:0c:bb:0b:92:33:
                    6c:45:09:dd:87:7c:2a:da:06:73:1e:26:7c:bf:1f:
                    68:10:b2:36:ae:b3:c8:02:e7:85:73:c5:f6:88:83:
                    07:70:0b:01:91:da:09:4c:d7:89:2b:d6:c2:a0:3c:
                    5c:a1:fc:47:b2:24:5a:4c:67:1d:00:12:05:ba:63:
                    f5:8e:a6:3d:92:ab:96:77:1a:2e:22:2b:5a:77:f3:
                    59:b7:78:0a:4e:23:3c:52:59:16:a4:dd:bc:5e:6b:
                    87:a8:a0:60:29:ea:20:d9:5b:97:32:08:28:c0:1a:
                    b6:bb:30:f8:ff:1a:b7:59:5a:b7:09:07:b1:0b:f3:
                    a0:fa:10:29:ef:fb:99:ea:f1:53:5a:4e:45:90:4f:
                    c0:2e:22:a2:61:eb:e3:f7:ca:4d:1b:a9:c3:da:94:
                    f2:03:7a:b4:2f:dc:c2:18:bf:e2:15:58:88:ec:d3:
                    36:c9:f7:fe:d2:77:fd:cb:3f:ba:a8:b6:2f:4b:f3:
                    16:a3:33:81:fe:01:1c:dc:1b:55:2a:fa:b9:85:58:
                    1b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7B:47:5C:9E:6D:33:8B:A7:1C:65:C6:B9:CA:74:4B:96:61:0E:8B
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137372e31302e3132302e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:b9:1e:41:ee:1e:42:ac:03:7b:5a:95:46:fd:11:25:2f:6f:
         fb:b1:ff:c1:5b:df:a2:a8:e5:bb:ff:fc:26:9d:8b:db:cb:46:
         49:b5:db:b6:49:24:4c:0e:38:ef:9a:55:f5:35:af:b3:4c:bb:
         b2:9d:29:86:5d:17:71:ad:42:dc:57:ed:93:0b:8d:60:da:71:
         22:d2:7f:0d:4a:4e:1c:9a:0d:9b:2d:31:69:27:3a:37:58:c4:
         56:40:6f:7f:f3:72:60:e5:bf:85:65:52:fb:6a:a8:ec:4d:c6:
         18:63:81:db:59:83:b2:e3:cc:4b:08:1f:e3:b5:1b:80:44:23:
         4b:b1:d3:55:ae:16:2f:b0:2e:d3:ed:45:5c:67:d5:53:4c:5b:
         64:da:78:01:58:90:12:a1:ca:c6:2d:5b:c8:4b:8c:7b:9d:36:
         45:c3:29:a3:83:c7:db:02:9c:45:38:8b:42:e5:7f:0e:e7:df:
         de:66:12:6e:d3:6c:54:d0:a5:d8:5f:3a:c3:16:18:fa:fb:af:
         9e:3c:f0:b6:af:15:11:6a:bd:db:f3:d4:9f:4a:0f:3b:a6:ac:
         bc:7c:29:83:a8:bf:30:8a:9a:bc:37:61:b6:42:7e:09:28:1b:
         e2:c7:16:02:3d:bc:04:f4:df:24:c9:15:c7:c3:b4:f0:13:b8:
         d3:7a:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org