Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32332d3233203d3e203532383733.roa
File:                     3137372e3132382e3230382e302f32332d3233203d3e203532383733.roa (raw, json)
Hash identifier:          0oRXdfkSpbpxABWIsv0FrpsQHyfnEjiTOupUrvjqDgs=
Subject key identifier:   0C:5B:41:73:14:49:7F:2B:95:D2:D9:64:AC:41:CB:12:D2:AC:89:67
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       73A53F2A8C014281601DBCB7A8BB21E55157DEF5
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32332d3233203d3e203532383733.roa
Signing time:             Sat 27 Jan 2024 23:10:41 +0000
ROA not before:           Sat 27 Jan 2024 23:05:41 +0000
ROA not after:            Sat 25 Jan 2025 23:10:41 +0000
asID:                     52873
IP address blocks:        177.128.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a5:3f:2a:8c:01:42:81:60:1d:bc:b7:a8:bb:21:e5:51:57:de:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 27 23:05:41 2024 GMT
            Not After : Jan 25 23:10:41 2025 GMT
        Subject: CN=0C5B417314497F2B95D2D964AC41CB12D2AC8967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6a:6a:c0:f8:d4:7e:af:12:f1:ba:15:9f:54:
                    79:65:6d:34:f0:7c:62:db:44:71:a1:b1:c7:1f:de:
                    5e:05:71:14:b5:f8:81:1c:cc:1d:26:04:b9:c9:1f:
                    2d:36:0a:4f:28:3d:8c:af:33:a3:4d:51:55:fb:a1:
                    5b:54:da:18:50:3d:ee:d7:96:16:c0:06:c3:85:b1:
                    6f:46:b7:2b:2f:5d:6c:65:15:52:8e:93:53:ba:f9:
                    fa:3c:6d:f1:fe:03:73:b3:6e:89:3e:91:7c:bf:69:
                    3e:d4:e9:be:3a:a3:5e:bf:21:59:ca:73:0d:af:94:
                    f7:ac:e7:1c:da:0b:25:5d:e2:52:9b:87:98:42:e9:
                    e8:6e:2a:f8:1d:2a:5a:12:b2:0d:05:9a:86:f9:7d:
                    6b:fe:41:eb:d5:02:5d:db:4c:8f:e0:fc:c5:4d:58:
                    71:f9:ea:f6:64:aa:ca:15:80:82:29:a8:4a:bc:b1:
                    a3:55:27:1b:81:54:b7:53:82:a3:11:e0:fc:9c:00:
                    6c:cf:e3:3d:9f:17:0b:57:01:f9:17:5d:f4:4c:7f:
                    e9:d1:29:e8:1c:63:ba:3c:3e:68:fa:43:90:6e:40:
                    40:da:d0:9d:62:aa:1d:42:4c:31:ab:7e:a4:6f:1b:
                    ec:64:78:5b:56:55:d4:99:41:53:a7:8d:7e:9d:6b:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5B:41:73:14:49:7F:2B:95:D2:D9:64:AC:41:CB:12:D2:AC:89:67
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32332d3233203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:57:87:e8:8e:e0:a3:86:e3:49:7c:03:f7:37:42:8d:97:54:
         bd:b9:f7:c2:dd:06:f3:79:e5:6a:4a:a0:0d:fb:45:10:a8:c2:
         9f:48:df:76:c8:39:91:15:e6:32:cb:64:f0:df:6b:f2:d3:eb:
         c2:be:19:cd:7b:b3:bb:7e:eb:79:78:63:3b:30:93:9d:91:38:
         53:3f:1f:45:2c:57:d3:8d:31:0f:c0:96:00:2f:35:b7:0e:f6:
         0a:31:26:73:98:4a:49:b0:0e:19:0e:ba:6c:e4:93:09:9d:75:
         18:ab:21:6b:14:16:b5:d7:c2:a0:5a:bf:41:a4:64:4b:d8:ce:
         dc:5b:cf:11:5c:01:72:8d:16:51:88:4e:93:31:f4:80:c0:20:
         d4:fd:7e:7f:13:06:8a:33:43:d3:db:d8:2d:e3:55:a4:cc:26:
         1a:be:c0:25:69:9f:03:fd:2f:8f:ac:8a:15:10:aa:26:1f:dc:
         6c:f6:d3:ea:85:55:62:d9:d8:73:1c:16:08:29:d2:a1:97:00:
         e9:a5:f3:8e:c9:45:ed:5f:6c:7d:cd:e6:90:7a:e5:a6:bd:da:
         7b:eb:e5:5a:aa:36:37:41:ea:4d:58:13:50:61:46:a3:f5:71:
         9d:9d:32:d3:fd:db:62:a0:3b:8d:75:03:a6:6e:5a:b8:c4:30:
         60:e5:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org