Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32312d3233203d3e20323632383238.roa
File:                     3137372e3135352e3139322e302f32312d3233203d3e20323632383238.roa (raw, json)
Hash identifier:          68IOrzlD5enfJ5DDh0Zy0vHIw/akFalUugAhBQyp9Z4=
Subject key identifier:   DA:4D:58:A1:85:F7:99:5E:F7:B7:9E:99:75:97:E7:B1:F2:48:98:DD
Certificate issuer:       /CN=D994586BFFE7BF1CF881DC6C506FD7A66CA476FE
Certificate serial:       2ACE305C980AC7498F9C66C790A7537DA5DF7270
Authority key identifier: D9:94:58:6B:FF:E7:BF:1C:F8:81:DC:6C:50:6F:D7:A6:6C:A4:76:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D994586BFFE7BF1CF881DC6C506FD7A66CA476FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32312d3233203d3e20323632383238.roa
Signing time:             Wed 15 Feb 2023 17:34:09 +0000
ROA not before:           Wed 15 Feb 2023 17:29:09 +0000
ROA not after:            Wed 14 Feb 2024 17:34:09 +0000
asID:                     262828
IP address blocks:        177.155.192.0/21 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ce:30:5c:98:0a:c7:49:8f:9c:66:c7:90:a7:53:7d:a5:df:72:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D994586BFFE7BF1CF881DC6C506FD7A66CA476FE
        Validity
            Not Before: Feb 15 17:29:09 2023 GMT
            Not After : Feb 14 17:34:09 2024 GMT
        Subject: CN=DA4D58A185F7995EF7B79E997597E7B1F24898DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:19:46:20:82:89:32:23:05:c0:f5:00:a9:
                    af:e3:a4:2f:5f:95:9f:76:7d:a5:0d:36:a7:c2:e8:
                    20:91:c9:3e:f8:ea:eb:4c:5f:a9:16:51:74:8f:80:
                    3b:89:cc:62:04:0a:94:6a:a5:52:41:c8:dc:71:fb:
                    89:94:a7:e1:dc:33:c7:5a:1a:a8:2d:02:0f:87:56:
                    d4:37:cf:b0:2c:39:5d:53:29:4b:cd:5f:af:5a:7d:
                    52:39:fb:4f:65:13:e4:b2:09:96:e0:a8:1a:f1:0d:
                    89:25:16:74:57:51:4c:36:5a:d0:1f:c6:7f:f2:3c:
                    8e:7c:c7:1e:53:23:a7:bc:de:46:f1:e2:45:41:ef:
                    36:2d:e0:f7:78:6c:a8:96:c0:fd:a8:7c:f1:a8:da:
                    3f:23:d7:56:89:36:a5:9b:d7:74:3b:70:8e:38:f3:
                    62:bb:71:be:ea:f9:05:32:aa:c9:fd:66:2e:3a:d5:
                    62:02:01:e5:1b:29:b4:8a:25:b1:b3:71:6b:70:f1:
                    99:cc:46:81:dc:c2:ca:e9:69:6e:04:67:05:17:ff:
                    bf:ac:9a:49:5f:69:4f:67:2d:67:0b:f6:92:27:78:
                    dd:62:78:d6:7a:91:d0:e4:ad:de:a6:88:41:fa:79:
                    27:57:2f:a3:be:5b:96:e7:d4:97:75:4b:16:66:27:
                    2c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4D:58:A1:85:F7:99:5E:F7:B7:9E:99:75:97:E7:B1:F2:48:98:DD
            X509v3 Authority Key Identifier:
                keyid:D9:94:58:6B:FF:E7:BF:1C:F8:81:DC:6C:50:6F:D7:A6:6C:A4:76:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/D994586BFFE7BF1CF881DC6C506FD7A66CA476FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D994586BFFE7BF1CF881DC6C506FD7A66CA476FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32312d3233203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:e2:a4:f5:cc:19:0d:45:fc:54:28:fb:5f:af:47:df:30:1a:
         c8:00:5b:60:30:09:d9:d3:09:4a:6b:a1:4a:2f:63:88:79:55:
         cc:1f:7e:06:c7:8d:c4:a8:d6:af:78:d1:92:56:46:01:bf:e4:
         88:b3:71:b5:6e:3c:86:f6:c6:c8:5f:17:7a:47:f0:72:de:8b:
         67:89:2a:77:e0:95:3c:6e:6f:4b:19:7f:1a:f7:00:ae:90:1d:
         90:22:85:18:97:9e:1c:3b:9e:43:e4:49:c4:ad:5b:a4:f2:c0:
         43:d3:f3:96:c1:f5:30:39:d5:e4:36:5d:9e:ec:d2:84:aa:49:
         fd:24:b6:a2:f6:88:c4:4e:a8:b3:de:32:c1:1b:3a:df:a9:47:
         b8:06:5e:8e:de:89:b7:1f:bf:6a:8e:3c:1f:f0:08:bf:2d:5d:
         0c:f1:29:b4:9f:44:48:a9:bc:f1:c4:12:c2:4f:49:50:7d:f4:
         a5:74:38:70:e6:14:ce:36:a5:86:89:fc:98:93:49:14:77:8d:
         9f:ab:d6:78:1f:71:e2:83:4e:b3:ff:e5:ce:71:de:4b:0b:ca:
         41:fd:49:22:0e:f7:59:29:a3:58:79:ce:de:1c:63:28:ca:23:
         e8:ff:2f:04:aa:f3:5b:f9:b4:f0:78:cc:2a:42:70:06:c8:47:
         ee:63:71:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org