Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3137372e3130372e3234302e302f32302d3234203d3e203238363538.roa
File:                     3137372e3130372e3234302e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          akCKbDlo4v9ZiW9UF1XpqXVFJppnAIk9q9dCi9o71XE=
Subject key identifier:   B5:35:49:6D:6B:17:85:18:E5:64:97:7A:0F:D4:1B:40:E6:CC:F0:68
Certificate issuer:       /CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
Certificate serial:       39042D6689DAB6A06FE70A653BBEA018A3ECF340
Authority key identifier: E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3137372e3130372e3234302e302f32302d3234203d3e203238363538.roa
Signing time:             Sun 12 Nov 2023 19:40:20 +0000
ROA not before:           Sun 12 Nov 2023 19:35:20 +0000
ROA not after:            Sun 10 Nov 2024 19:40:20 +0000
asID:                     28658
IP address blocks:        177.107.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:04:2d:66:89:da:b6:a0:6f:e7:0a:65:3b:be:a0:18:a3:ec:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
        Validity
            Not Before: Nov 12 19:35:20 2023 GMT
            Not After : Nov 10 19:40:20 2024 GMT
        Subject: CN=B535496D6B178518E564977A0FD41B40E6CCF068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:86:ca:d3:cb:ee:cf:44:d7:10:93:69:ab:02:
                    25:59:09:40:ef:52:59:03:37:bd:27:b6:ec:98:93:
                    70:f0:a7:6d:b3:94:86:0e:6b:97:26:b9:03:ab:99:
                    53:ac:8f:91:6e:ba:3a:04:65:a9:22:d4:cf:90:7b:
                    76:31:71:f1:89:58:b6:e9:e5:af:54:0c:33:14:c3:
                    bd:e2:c4:ab:1d:08:41:e7:11:a6:a1:83:8d:a9:2b:
                    68:a4:f3:2e:37:e5:7d:04:7f:c6:f7:46:96:73:77:
                    14:e7:75:6b:ae:3c:d4:f5:84:ab:70:92:4e:39:0b:
                    39:0b:3b:23:38:22:e4:db:4b:f1:f1:c9:55:1a:fc:
                    3f:b4:58:59:a7:e3:17:e6:bd:fd:d1:5e:ab:51:96:
                    49:33:f1:55:bf:e8:87:18:72:f3:88:7e:69:60:88:
                    00:ba:da:36:b2:a1:cd:82:64:64:34:9a:79:c2:86:
                    28:40:fd:f7:bb:40:3b:a1:01:d4:27:f4:37:b3:70:
                    23:30:5b:bd:7e:66:f2:2d:e4:03:5d:da:57:f6:ba:
                    a0:b7:cd:bc:72:57:9d:1c:96:ad:a3:be:e9:50:17:
                    19:0a:01:63:49:a0:d6:c6:99:b3:cb:62:f0:bb:63:
                    f2:eb:b6:27:dd:b4:d2:12:7c:68:d4:85:bf:b3:c5:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:35:49:6D:6B:17:85:18:E5:64:97:7A:0F:D4:1B:40:E6:CC:F0:68
            X509v3 Authority Key Identifier:
                keyid:E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3137372e3130372e3234302e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:aa:d9:54:0d:1b:c5:00:40:49:3f:94:19:b3:a3:43:b5:d8:
         17:44:10:d5:94:11:15:0b:8d:df:07:52:12:0b:aa:9f:03:ef:
         81:9f:39:32:ea:43:c2:27:4a:30:02:91:fe:e2:79:34:72:bb:
         c2:d6:b4:55:af:8a:15:a2:c0:39:c3:e9:f7:ae:b7:95:47:04:
         ec:98:bb:67:33:e0:dc:a4:13:7f:70:29:9f:9b:86:50:02:cf:
         ab:14:15:ae:8e:8b:ac:75:99:d2:cb:11:43:53:2f:45:63:09:
         db:09:a5:b1:30:b7:11:2a:f1:6c:2b:f3:97:9b:33:81:79:87:
         d5:9f:64:70:e8:a6:37:3e:b2:4e:8d:d1:49:a6:cb:16:61:c2:
         2a:29:37:30:9c:a7:59:37:66:35:c0:a1:2b:77:8b:7d:5a:fc:
         59:10:a6:b2:e1:ec:0c:44:06:a8:ba:1a:49:b2:56:b7:95:23:
         ac:a2:46:8f:dd:01:d9:3c:3d:64:06:c8:2c:4c:9a:1f:ea:2b:
         33:4f:9c:a4:eb:b9:70:3b:df:28:0c:d5:d6:a6:76:c0:4e:15:
         f2:be:75:13:4c:6f:6c:85:e9:8f:7b:10:a1:ad:0d:e7:9e:fe:
         d5:b9:18:e3:ef:ab:ad:5f:99:3f:7a:44:7d:74:3b:3c:c9:89:
         44:29:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org