Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/3137372e35342e39322e302f32322d3234203d3e20323632323932.roa
File:                     3137372e35342e39322e302f32322d3234203d3e20323632323932.roa (raw, json)
Hash identifier:          JBen431WECzFex+SbDAkPGvsuqxRDI21lxbq9vp+OX4=
Subject key identifier:   34:E9:EF:22:64:07:57:F9:44:DD:43:95:A2:1C:10:5D:83:5A:49:EB
Certificate issuer:       /CN=122A0906A85BBC298F8098D0F553D11D5DA374D5
Certificate serial:       6ED19E13431DA11564B21A8D312379E063F98AFF
Authority key identifier: 12:2A:09:06:A8:5B:BC:29:8F:80:98:D0:F5:53:D1:1D:5D:A3:74:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/3137372e35342e39322e302f32322d3234203d3e20323632323932.roa
Signing time:             Wed 03 Apr 2024 19:51:45 +0000
ROA not before:           Wed 03 Apr 2024 19:46:45 +0000
ROA not after:            Wed 02 Apr 2025 19:51:45 +0000
asID:                     262292
IP address blocks:        177.54.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d1:9e:13:43:1d:a1:15:64:b2:1a:8d:31:23:79:e0:63:f9:8a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122A0906A85BBC298F8098D0F553D11D5DA374D5
        Validity
            Not Before: Apr  3 19:46:45 2024 GMT
            Not After : Apr  2 19:51:45 2025 GMT
        Subject: CN=34E9EF22640757F944DD4395A21C105D835A49EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9b:b9:96:0d:c2:65:88:bc:01:00:49:e5:4e:
                    a5:3d:57:af:fb:95:ee:8e:b9:ea:ba:4f:37:75:bc:
                    07:6f:9a:1b:68:1b:e6:d8:ce:23:3d:1f:8d:f3:60:
                    d6:3b:b9:3f:6b:68:a0:2e:6c:53:a4:14:fd:0a:6c:
                    b4:d2:96:43:47:6c:d1:10:e4:f3:42:6a:57:0c:e7:
                    05:09:23:e5:ba:83:65:7c:d4:19:77:e6:4f:28:ab:
                    fa:c2:b8:18:95:7f:ff:8c:b1:ac:fa:40:02:4b:be:
                    5e:e1:3d:8a:a1:bd:bf:56:a1:c8:7c:e1:35:8f:14:
                    2b:5e:d1:3c:3a:b0:ff:66:0a:55:fa:00:ce:78:27:
                    21:b5:df:b2:9c:c4:de:de:9a:17:75:6e:95:29:93:
                    63:f8:81:40:26:ac:a4:6a:b5:4d:96:b1:d8:49:d7:
                    4c:6f:be:3e:fa:87:43:a1:20:67:d6:9f:36:fc:a1:
                    ba:88:b2:e6:ed:88:6e:23:54:fe:3a:1a:6e:ea:30:
                    84:5f:18:dc:e3:ef:aa:0b:b5:3d:b4:0d:13:c2:34:
                    2c:b4:15:19:c9:5b:64:ea:f7:3a:2d:ff:73:43:15:
                    de:98:b8:3d:78:7e:3d:89:e8:82:1d:b7:03:f8:00:
                    0f:98:1c:c8:b1:0d:fa:5f:06:2f:51:b2:77:99:b2:
                    16:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E9:EF:22:64:07:57:F9:44:DD:43:95:A2:1C:10:5D:83:5A:49:EB
            X509v3 Authority Key Identifier:
                keyid:12:2A:09:06:A8:5B:BC:29:8F:80:98:D0:F5:53:D1:1D:5D:A3:74:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/3137372e35342e39322e302f32322d3234203d3e20323632323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:b4:c4:89:a0:3d:65:03:b3:a1:e4:af:18:bb:f9:9c:62:73:
         bf:35:ec:df:ad:ac:80:eb:11:4d:c7:1a:72:3f:24:1f:b1:ca:
         33:19:98:72:65:44:f9:5f:cc:63:16:e8:de:74:ef:fd:95:69:
         13:d3:f3:6f:00:22:04:de:4f:e2:8d:d4:37:cd:70:d4:b6:54:
         01:ea:4f:91:e4:75:30:0b:e7:8d:1b:42:7b:7f:17:d6:54:ab:
         65:db:a0:34:d8:3d:68:1a:02:84:fa:2a:68:03:2b:0c:cb:5e:
         6f:31:9e:37:62:fa:39:3f:4d:8a:d9:e5:a8:71:b7:94:c1:df:
         07:98:78:32:bf:12:37:49:0b:84:fc:a2:12:7b:15:cb:87:08:
         43:86:04:3b:18:8d:04:b8:a4:b4:20:b5:84:a4:ce:c1:17:51:
         1d:4c:20:cc:18:5e:5f:f5:58:6e:14:62:e8:a5:40:5c:15:54:
         27:03:d7:1b:57:de:ca:7d:bc:9e:21:30:25:ef:a5:5f:52:75:
         97:35:c3:31:55:5c:2a:16:f8:ed:cf:b4:63:6b:6c:47:0a:8f:
         82:78:e4:ee:04:a1:76:9b:26:10:7c:64:06:13:bc:01:bc:e2:
         e1:29:3a:53:c7:94:16:d4:b1:e1:7e:57:a0:e0:09:34:aa:db:
         1e:77:c0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org