Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231322e302f32322d3232203d3e203532383733.roa
File:                     3137372e3132382e3231322e302f32322d3232203d3e203532383733.roa (raw, json)
Hash identifier:          rx4p07rAnodCX+F/mmlAmDF8cjF8vZ/Trv6pel6AZ/g=
Subject key identifier:   E2:97:EE:57:67:D9:47:57:6B:1E:9D:A6:77:54:B8:E1:C4:D3:AB:00
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       0B98F1DFC4F64A8769890C2DD893D4101A90EAA5
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231322e302f32322d3232203d3e203532383733.roa
Signing time:             Sat 27 Jan 2024 23:10:42 +0000
ROA not before:           Sat 27 Jan 2024 23:05:42 +0000
ROA not after:            Sat 25 Jan 2025 23:10:42 +0000
asID:                     52873
IP address blocks:        177.128.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:98:f1:df:c4:f6:4a:87:69:89:0c:2d:d8:93:d4:10:1a:90:ea:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 27 23:05:42 2024 GMT
            Not After : Jan 25 23:10:42 2025 GMT
        Subject: CN=E297EE5767D947576B1E9DA67754B8E1C4D3AB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:98:76:bf:79:f3:df:11:82:5b:aa:e3:41:56:
                    5b:9f:2f:2c:c0:40:e8:ed:a7:5d:80:40:a2:10:0d:
                    9f:1a:82:a4:8e:b6:40:46:88:89:0a:e5:c9:d3:3b:
                    d0:0a:d6:85:24:79:ea:ee:4b:bc:f7:93:53:0a:1b:
                    ab:e9:ef:dc:9b:b8:84:1c:65:bb:0c:e1:fa:1a:54:
                    2b:c0:44:cb:9d:5b:2a:33:54:81:cf:74:3f:ba:ea:
                    6e:36:03:5a:86:27:e6:f2:b9:6a:55:ff:9a:e8:1b:
                    07:f8:5b:27:65:41:74:44:8a:96:cd:d3:53:51:a3:
                    5f:db:58:ed:2e:d4:b1:44:02:4b:b9:e7:0d:68:aa:
                    f0:6c:8e:23:08:7d:48:f6:fe:8f:52:12:29:f2:a9:
                    6b:64:31:b4:f4:2f:60:d0:ec:b0:eb:04:15:45:1d:
                    72:63:9b:2a:5f:40:63:4f:17:16:17:02:55:c4:c0:
                    33:e0:d9:16:d3:98:9e:5d:31:47:62:82:56:1c:be:
                    51:d3:82:ad:70:e8:d7:77:68:05:34:68:df:df:65:
                    05:71:dd:2e:1e:57:e8:69:d6:21:d5:25:c2:91:58:
                    4a:06:a5:53:7a:c3:d9:53:e4:42:f1:3c:25:ee:75:
                    8e:0f:a9:ad:46:c5:27:b8:04:81:de:78:28:8c:e9:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:97:EE:57:67:D9:47:57:6B:1E:9D:A6:77:54:B8:E1:C4:D3:AB:00
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231322e302f32322d3232203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:e6:e6:2a:6a:91:bd:1f:39:34:06:0e:9c:9f:04:46:3a:65:
         dc:7d:16:19:99:d8:c7:0a:ef:a9:cd:10:45:25:c4:fd:bf:b0:
         99:3b:5f:38:3a:1d:87:71:72:b1:d3:20:c9:21:e3:71:db:6d:
         40:f4:53:7e:6d:53:53:9f:82:d2:0e:d2:e3:16:55:66:9b:e5:
         aa:74:b3:00:e3:63:dc:a3:18:5a:6c:b4:60:aa:4c:d3:33:45:
         82:b3:89:08:31:22:57:5e:0a:da:59:e2:5e:94:f5:16:78:37:
         93:fe:86:12:75:c3:e1:85:35:3e:47:d3:3f:d9:9f:e1:57:a0:
         e7:ea:f1:de:3b:9d:b1:54:38:bf:c8:b9:5c:fb:b4:fe:e2:4a:
         44:01:59:8c:5c:8d:0a:71:4b:db:4e:3d:bf:f3:b8:3d:90:10:
         6c:87:85:13:ac:c2:b4:87:7a:5d:8c:68:17:8d:42:fb:f7:54:
         e7:30:74:95:da:a8:2b:2b:3f:70:d9:3d:3e:8c:8f:71:36:34:
         88:bc:4f:97:7c:01:c5:3f:78:28:36:a9:fd:22:ca:2a:8d:a2:
         30:79:47:bc:59:71:7e:4c:18:ce:9a:a5:a2:c7:d9:d1:b1:3f:
         eb:2c:05:14:89:a3:45:3c:fa:d9:c4:6f:ab:23:88:c6:4e:61:
         cd:b7:08:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org