Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3137372e3132352e3138382e302f32322d3234203d3e20323638333233.roa
File:                     3137372e3132352e3138382e302f32322d3234203d3e20323638333233.roa (raw, json)
Hash identifier:          4XixcNFlD4WTHrgLeW+4NoOnDRkOc/lEYYDg0hSI1L8=
Subject key identifier:   CA:EA:1F:B7:34:CF:15:F7:F5:C8:ED:69:2D:8C:00:AF:B1:00:3C:EA
Certificate issuer:       /CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
Certificate serial:       219C91C24F5F4E52AAFE8A8EB930CF2E1DE842D6
Authority key identifier: 4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3137372e3132352e3138382e302f32322d3234203d3e20323638333233.roa
Signing time:             Tue 19 Mar 2024 13:01:15 +0000
ROA not before:           Tue 19 Mar 2024 12:56:15 +0000
ROA not after:            Tue 18 Mar 2025 13:01:15 +0000
asID:                     268323
IP address blocks:        177.125.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9c:91:c2:4f:5f:4e:52:aa:fe:8a:8e:b9:30:cf:2e:1d:e8:42:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
        Validity
            Not Before: Mar 19 12:56:15 2024 GMT
            Not After : Mar 18 13:01:15 2025 GMT
        Subject: CN=CAEA1FB734CF15F7F5C8ED692D8C00AFB1003CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:46:46:9b:e7:2a:75:b4:fa:98:a0:1f:8f:
                    30:3e:29:7b:5a:96:25:e9:e0:c7:0b:ae:8d:1c:bf:
                    0e:27:20:38:ef:d6:8f:8c:38:d7:0b:7b:40:76:ca:
                    13:9e:3a:61:76:58:d3:1c:a1:8d:56:0c:d8:73:e2:
                    83:cb:63:9b:84:43:e0:58:37:2d:67:06:d3:23:37:
                    2e:5c:ad:72:23:2b:f8:94:46:88:21:93:56:10:42:
                    4f:4f:f6:40:85:d9:cc:54:7a:d1:08:6f:9c:f5:9e:
                    65:89:f1:c1:90:a8:29:48:72:81:ca:26:e2:27:2f:
                    20:6a:85:db:e8:2d:28:2a:27:88:b9:44:71:bc:fa:
                    a9:16:6d:d0:ec:66:91:54:10:9c:98:ce:b2:41:7a:
                    c7:ac:a3:a8:f0:d5:c6:b0:af:22:06:9d:f4:e5:f4:
                    b2:0e:5f:1b:c7:be:86:1b:a0:b7:ee:c2:37:3d:e0:
                    51:c9:ee:a0:f1:4b:d0:2e:e4:02:c4:a0:c8:4b:94:
                    11:41:d2:a9:01:f1:30:3b:47:6e:d7:bf:90:14:6c:
                    ca:79:04:70:ac:28:4e:65:62:a0:f2:1b:98:ce:ca:
                    60:35:68:c6:e7:84:7b:19:64:fa:2c:8f:97:dd:b0:
                    31:7c:f8:48:a8:d1:0f:5d:38:35:0b:f6:46:21:82:
                    bd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EA:1F:B7:34:CF:15:F7:F5:C8:ED:69:2D:8C:00:AF:B1:00:3C:EA
            X509v3 Authority Key Identifier:
                keyid:4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3137372e3132352e3138382e302f32322d3234203d3e20323638333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:16:11:8f:48:b5:5c:be:d0:0f:be:82:28:57:e9:20:da:32:
         33:74:d5:fc:b4:ac:59:31:d0:a2:62:45:50:09:5b:1d:12:5d:
         65:d0:af:2a:74:d6:1d:cf:82:92:b2:34:3d:58:73:55:ae:7c:
         59:06:e2:2a:64:c8:6a:fa:72:c3:e9:5d:57:cf:e6:72:3b:44:
         b9:29:4c:cb:60:96:2a:ea:e0:fc:10:36:b5:49:ea:bf:47:e0:
         66:ff:76:a6:90:3b:02:6f:d3:35:be:54:22:35:5f:da:63:95:
         c2:79:c1:18:64:32:1c:05:e7:28:08:53:13:9f:38:2e:54:fc:
         da:7b:ff:d5:c9:51:82:75:2f:80:19:29:00:7b:d4:1e:c5:6c:
         b9:a0:46:7d:37:f3:65:b8:2b:f0:9d:c4:af:0d:74:bf:b1:59:
         3c:df:ce:4e:6f:e8:7c:a8:58:53:53:59:41:62:13:74:e4:70:
         32:3b:37:c8:01:35:7f:fe:d9:95:97:8e:ce:75:2a:94:4e:e7:
         fa:4a:b9:d9:92:0b:d0:8c:a8:36:d9:1d:67:bc:fc:06:f0:77:
         da:e7:7e:b7:f9:3a:49:22:53:ff:6c:4c:3e:7a:89:c5:1a:e0:
         2c:5f:6e:1f:8d:1a:ac:d7:e5:ff:63:2e:1a:53:0e:78:79:8a:
         93:c8:0e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org