Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32312d3231203d3e203532383733.roa
File:                     3137372e3132382e3230382e302f32312d3231203d3e203532383733.roa (raw, json)
Hash identifier:          4AA70QH2JHeMUCBWuw8sEviBlROdOGnBrxrwH0QY/BI=
Subject key identifier:   D0:81:39:AA:9A:DD:E7:04:B3:0C:8B:8F:79:D0:FD:CD:33:80:43:31
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       5D811191192D36F1CB8BAD68111D3AC05EE9D7EE
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32312d3231203d3e203532383733.roa
Signing time:             Sat 27 Jan 2024 23:10:42 +0000
ROA not before:           Sat 27 Jan 2024 23:05:42 +0000
ROA not after:            Sat 25 Jan 2025 23:10:42 +0000
asID:                     52873
IP address blocks:        177.128.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:81:11:91:19:2d:36:f1:cb:8b:ad:68:11:1d:3a:c0:5e:e9:d7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 27 23:05:42 2024 GMT
            Not After : Jan 25 23:10:42 2025 GMT
        Subject: CN=D08139AA9ADDE704B30C8B8F79D0FDCD33804331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:af:2a:1d:62:a9:dd:ac:b3:b3:52:76:39:
                    b7:0a:8d:0b:80:dc:54:a0:40:6f:de:a9:fe:da:18:
                    e9:cf:f2:1a:ba:5b:c5:3d:15:9d:02:84:f3:e6:2c:
                    1b:1a:e1:48:a7:93:bb:40:2e:52:5c:e3:19:c2:fd:
                    52:e8:5d:68:78:ff:1f:c9:51:73:c2:59:12:19:f5:
                    fb:7a:3d:43:9e:99:ab:3c:97:a5:e9:ea:c7:22:9d:
                    a4:26:c1:50:b7:3c:e3:90:e3:51:11:74:67:ab:45:
                    76:12:0a:20:b5:0e:e2:e0:ac:f4:65:e0:f3:c2:a6:
                    58:da:20:f5:cd:64:ee:1b:a3:be:44:17:33:4a:e6:
                    11:40:eb:fd:b3:fc:34:5f:9d:72:28:b1:fc:76:f5:
                    48:22:dc:09:c2:5a:a2:a3:f2:0a:ea:ee:16:75:7e:
                    0e:36:80:25:96:e9:ca:15:e1:ba:db:2f:17:06:a0:
                    fa:57:2f:eb:cc:c5:4f:30:17:dd:f6:f1:6c:b2:16:
                    01:0f:54:39:8f:df:f3:ce:b1:0a:8c:ab:f3:87:29:
                    b9:9f:10:bd:75:63:6b:c2:ec:b6:e1:e7:c7:ac:25:
                    83:73:64:a2:93:17:0e:74:f8:1f:90:a5:76:d8:71:
                    02:60:19:61:c9:17:72:00:19:71:f3:b2:07:7b:a9:
                    38:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:81:39:AA:9A:DD:E7:04:B3:0C:8B:8F:79:D0:FD:CD:33:80:43:31
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32312d3231203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:c7:a4:d4:9b:9b:3f:c8:4c:4e:c4:d3:27:f5:ae:18:6b:21:
         bc:7d:40:4e:64:a1:12:8e:da:05:39:5e:59:47:42:a5:62:df:
         30:77:4b:d0:fc:46:2f:ee:6b:f2:ba:9c:83:de:60:d1:a9:b9:
         03:88:54:eb:76:20:7c:df:9f:e3:e4:82:43:88:19:e9:f5:d9:
         d8:15:82:51:59:51:e7:c1:e6:2a:30:0e:a3:15:20:c4:15:cc:
         8f:09:4f:12:35:af:fd:f9:b7:bf:a0:e5:c6:95:8b:a4:d8:32:
         b8:57:ec:f5:0c:30:6b:09:bd:4f:fd:a5:3c:9c:56:38:ea:f7:
         3b:24:ad:ae:33:c4:56:06:0d:73:41:35:ec:5b:ec:66:be:2f:
         fc:80:e9:57:96:d0:46:ec:fd:b3:32:12:b5:7d:b5:f1:a7:9b:
         44:0c:bc:b5:8f:33:bc:82:c7:59:2d:4d:e5:2f:6a:96:37:45:
         fa:28:3f:d0:ea:1b:1e:af:7d:57:66:89:7e:b5:77:93:76:25:
         cd:da:82:2a:f2:8e:09:9b:f9:4a:25:ea:0b:72:28:9c:20:fc:
         0d:65:e9:1e:0e:8f:5a:6e:90:5c:de:8c:47:45:aa:54:13:bc:
         9f:f8:29:a6:7b:e4:53:ed:67:57:dd:da:3f:7f:51:cc:c3:78:
         c8:0e:8b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org