Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/1/3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa
File:                     3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa (raw, json)
Hash identifier:          2iK+KgV02gJ3mzsXE3i3MLon9r4eWsRkl+iqHUOtuBs=
Subject key identifier:   11:4B:FC:65:8D:83:F0:33:CD:13:6B:BB:12:8A:A6:9E:E1:F5:AE:E4
Certificate issuer:       /CN=8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1
Certificate serial:       D1DD4A7DE335908A831B359B3A013A3363A036
Authority key identifier: 8A:C8:15:9F:16:1F:4A:BF:A0:3D:76:B8:A0:41:A3:2A:FC:F2:D5:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/1/3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa
Signing time:             Fri 17 Nov 2023 18:15:00 +0000
ROA not before:           Fri 17 Nov 2023 18:10:00 +0000
ROA not after:            Fri 15 Nov 2024 18:15:00 +0000
asID:                     270692
IP address blocks:        177.128.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d1:dd:4a:7d:e3:35:90:8a:83:1b:35:9b:3a:01:3a:33:63:a0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1
        Validity
            Not Before: Nov 17 18:10:00 2023 GMT
            Not After : Nov 15 18:15:00 2024 GMT
        Subject: CN=114BFC658D83F033CD136BBB128AA69EE1F5AEE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:3d:9d:06:fb:f5:42:d4:44:97:17:a1:cb:
                    5c:13:bf:a9:bf:6c:72:d4:d2:5b:67:eb:7a:5b:db:
                    de:c5:2e:2d:e6:a3:3e:c7:34:ee:9f:fb:22:2d:14:
                    ac:3b:85:ec:a9:b5:ce:a2:bc:5f:3b:9b:a9:19:69:
                    78:35:d0:72:e6:de:cd:12:35:ee:aa:a1:ae:7f:41:
                    eb:42:75:59:36:8d:23:f5:7e:ae:ce:d4:b6:20:d6:
                    43:2d:c4:28:bb:1e:84:e4:5e:6d:2d:b7:f8:7a:25:
                    d5:52:4b:34:64:16:e1:b6:d0:ca:42:ce:ac:61:42:
                    59:c3:b3:9e:39:e2:06:4d:63:91:41:0e:52:ef:4a:
                    87:fd:3d:27:8e:0b:04:a3:b8:31:bc:7e:d4:d1:79:
                    33:f4:1c:00:b8:ae:58:a3:2b:21:af:cc:73:fb:8f:
                    53:38:7d:06:dc:47:cd:e8:ec:16:99:bc:f2:be:07:
                    4c:46:02:86:c0:e2:c5:9c:72:26:4e:26:0a:a4:a7:
                    35:b9:de:df:fc:f0:fe:0e:a5:24:b8:0c:22:55:83:
                    8b:a6:ee:7f:e1:9e:12:a1:84:59:6c:51:36:08:ff:
                    3b:91:f2:66:33:fd:c9:58:bf:cc:1a:86:ad:13:95:
                    e5:e2:66:1e:0b:03:b0:b3:6d:82:1f:7b:fe:e3:9b:
                    6b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4B:FC:65:8D:83:F0:33:CD:13:6B:BB:12:8A:A6:9E:E1:F5:AE:E4
            X509v3 Authority Key Identifier:
                keyid:8A:C8:15:9F:16:1F:4A:BF:A0:3D:76:B8:A0:41:A3:2A:FC:F2:D5:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/1/8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/1/3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:c2:79:eb:c6:9e:82:b7:ec:6e:fa:0c:8c:79:16:06:21:85:
         4a:05:e1:96:86:f9:35:33:0d:c6:59:95:92:8e:f6:00:ea:55:
         d7:25:7a:5b:4b:91:64:f4:a9:c3:7a:6b:0b:b0:5b:1f:6c:75:
         0d:83:7a:96:17:17:e3:76:ef:df:f9:5d:12:fb:1a:6b:9b:76:
         a6:78:89:fe:80:0a:b7:e1:1a:38:e0:c2:ba:d1:9b:e1:15:ed:
         66:12:f6:d5:76:d9:f7:75:95:1e:01:be:73:99:9b:44:f1:75:
         f9:ab:8a:ef:87:06:42:94:56:96:39:40:9c:9c:b6:05:37:41:
         ef:d2:e3:1c:f3:21:c8:e6:bd:a3:2c:92:65:1c:b6:e9:eb:00:
         d8:2b:c6:f4:35:2a:e6:3b:a5:d7:a0:fd:6b:1f:a7:c2:d8:50:
         4d:b9:f5:51:63:6a:d3:be:cc:72:06:2f:18:5c:ff:b8:1b:62:
         a5:76:bc:f9:10:b3:d9:06:71:2f:4b:67:33:97:5f:ea:9d:6b:
         a8:b3:e1:d6:7c:ec:43:d4:63:b8:f2:02:c7:b8:51:d7:68:e7:
         8b:c4:e7:c2:93:d3:d9:11:a3:04:97:d0:9d:12:ae:a8:82:f5:
         6f:0d:47:40:2d:17:87:62:12:cc:6e:58:09:8b:c1:d7:54:6f:
         74:11:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org