Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133322e302f32322d3232203d3e20323731303031.roa
File:                     3137372e3232332e3133322e302f32322d3232203d3e20323731303031.roa (raw, json)
Hash identifier:          srqzrQdZ/F9L7rbESJ3XlI5OCC/Wy/EwQV2ETp8rOh8=
Subject key identifier:   E1:D1:C0:DF:C5:F5:0E:C9:4E:7E:8A:DD:A7:08:BF:04:94:D6:89:2A
Certificate issuer:       /CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
Certificate serial:       1F91A02894CB7DE1F3F34CECBDFA32EBE0DEAC23
Authority key identifier: A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133322e302f32322d3232203d3e20323731303031.roa
Signing time:             Thu 16 Nov 2023 17:54:17 +0000
ROA not before:           Thu 16 Nov 2023 17:49:17 +0000
ROA not after:            Thu 14 Nov 2024 17:54:17 +0000
asID:                     271001
IP address blocks:        177.223.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:91:a0:28:94:cb:7d:e1:f3:f3:4c:ec:bd:fa:32:eb:e0:de:ac:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
        Validity
            Not Before: Nov 16 17:49:17 2023 GMT
            Not After : Nov 14 17:54:17 2024 GMT
        Subject: CN=E1D1C0DFC5F50EC94E7E8ADDA708BF0494D6892A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:08:0e:47:3f:b1:8f:10:95:b4:95:3c:69:
                    ee:88:66:c8:ec:77:ae:ca:e6:04:a8:53:2c:65:7c:
                    6c:24:0a:48:8a:1c:c3:7a:82:52:64:4d:be:8f:2a:
                    9c:cc:5b:24:91:4c:b9:e4:cc:af:e3:0f:32:96:c5:
                    cf:bd:fc:41:4e:ee:81:a2:4c:48:7f:4f:3e:68:68:
                    70:0d:f1:9d:39:77:ae:63:07:0c:8a:eb:9e:c3:8f:
                    40:7e:b5:0d:a4:da:86:cf:87:b1:13:82:d2:2e:9b:
                    7c:f1:62:88:da:cd:54:89:03:3a:f4:8a:d5:f9:1b:
                    3a:68:35:ae:d8:33:be:6d:4f:f3:ff:d8:1b:95:b4:
                    d9:58:87:d0:ec:2b:7a:72:40:0a:c9:5f:0b:42:b6:
                    bc:cd:cc:a4:e1:6b:ef:7c:9a:7a:d6:4e:10:f2:c7:
                    b3:70:de:3b:e2:a0:e2:99:f2:c3:f3:1d:45:79:1e:
                    ab:8e:b1:3b:b1:77:ad:86:2d:93:07:e7:ba:80:e3:
                    a1:14:21:e4:d0:c1:31:86:20:15:d2:27:5c:91:11:
                    59:35:23:78:ee:e6:4c:d3:55:de:46:85:71:d2:21:
                    5a:18:76:d8:bd:e5:f1:01:fe:1f:29:2d:b7:34:cc:
                    05:6c:de:c1:3e:b5:8d:1a:ca:bc:88:a3:0e:41:42:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D1:C0:DF:C5:F5:0E:C9:4E:7E:8A:DD:A7:08:BF:04:94:D6:89:2A
            X509v3 Authority Key Identifier:
                keyid:A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133322e302f32322d3232203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:7f:53:70:f7:5e:ba:06:32:aa:26:3f:f0:d3:1e:0c:1a:05:
         bb:ec:f4:61:ef:e8:52:5f:a6:39:7e:ab:15:1e:ce:d5:ac:85:
         03:e6:7a:32:5b:63:81:05:fd:12:f1:79:4a:5d:1b:28:dd:48:
         bc:7d:e6:71:cb:84:0a:05:21:94:48:05:7f:2e:f6:26:ba:db:
         98:4c:74:8f:71:e6:35:0a:95:a3:f7:06:a3:c5:bc:86:1c:bc:
         c7:8c:0e:fa:47:e9:24:5e:69:66:b5:12:41:cf:80:1b:23:d6:
         cf:3c:28:c2:bc:fc:2d:08:c9:05:cc:2e:67:9d:8d:e7:e3:e9:
         ce:4c:52:2b:4d:a1:e2:d0:d4:54:92:f2:33:db:0a:6b:d4:13:
         e7:00:b0:a0:fc:57:1e:aa:b7:70:4d:e2:b8:c8:77:60:16:86:
         a3:61:a5:e0:fc:a4:df:91:f3:21:5a:33:29:e1:30:c0:68:f7:
         ac:f1:f7:f5:9b:9f:2d:2e:7c:7c:f9:79:be:7f:6d:15:7c:34:
         bf:e7:f7:b8:fd:89:89:10:4a:7d:38:e4:4e:be:23:5e:a2:92:
         89:3b:ce:15:50:e3:4c:02:28:0b:cd:eb:4f:8c:99:f6:13:ef:
         f8:ca:29:ab:e6:2f:92:3f:0d:b9:99:e8:39:85:84:55:06:b7:
         4d:92:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org