Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/1/3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa
File:                     3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa (raw, json)
Hash identifier:          7nLwuyWiv8uc9+0H/uGbsN7wYe+n61FOIxllZHmEPWQ=
Subject key identifier:   8A:5C:AA:44:20:97:D8:3A:09:32:D6:C7:50:87:2E:44:9A:B5:C9:D6
Certificate issuer:       /CN=BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615
Certificate serial:       4AB8E4A4963F8102D3442E2627D43675B797642B
Authority key identifier: BD:2C:AC:A4:44:36:57:3E:8C:2E:F9:5C:18:E1:CB:5F:E2:F0:F6:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/1/3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa
Signing time:             Wed 03 Apr 2024 21:24:09 +0000
ROA not before:           Wed 03 Apr 2024 21:19:09 +0000
ROA not after:            Wed 02 Apr 2025 21:24:09 +0000
asID:                     262355
IP address blocks:        177.91.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b8:e4:a4:96:3f:81:02:d3:44:2e:26:27:d4:36:75:b7:97:64:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615
        Validity
            Not Before: Apr  3 21:19:09 2024 GMT
            Not After : Apr  2 21:24:09 2025 GMT
        Subject: CN=8A5CAA442097D83A0932D6C750872E449AB5C9D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6c:0e:7d:6a:43:3f:ad:a9:79:ce:72:8e:20:
                    e2:36:bd:39:4a:32:df:1b:ba:08:43:11:d4:0a:25:
                    6c:70:76:6a:5c:cf:a4:20:5e:31:7b:13:37:11:f8:
                    38:e5:99:4f:5a:1e:af:75:c5:98:fb:8f:15:a9:5c:
                    ef:f9:d0:2f:e1:95:23:97:27:ae:0b:3e:9b:92:7f:
                    6f:08:41:69:ab:c5:a3:e2:9f:33:94:e4:cc:ce:d3:
                    36:5b:c5:75:74:fa:c9:39:4b:b7:cb:a6:05:2e:d1:
                    c7:a0:17:e4:5a:71:f4:22:9f:46:61:b0:af:5b:62:
                    f7:78:d2:d9:f6:83:15:a0:62:fd:4f:84:5a:fe:10:
                    0a:34:3a:a6:81:8c:f4:6c:94:f7:e3:3e:b4:31:52:
                    c2:33:c4:e3:4c:81:d5:fe:7e:27:76:39:c3:e3:ef:
                    7b:12:30:7d:de:e7:a4:9f:d0:b8:c3:ea:72:24:0d:
                    7f:18:0b:d6:9f:aa:5f:17:e0:38:82:52:bd:14:f7:
                    95:25:30:83:85:e3:9e:e1:9b:66:44:d0:45:ad:a0:
                    55:25:05:98:30:be:1a:88:89:dd:55:bf:25:54:b8:
                    b0:30:84:8c:22:d5:0b:55:36:d5:d6:44:da:8a:be:
                    91:7e:15:11:d3:e0:b6:a0:67:c2:35:5c:3b:fa:0a:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5C:AA:44:20:97:D8:3A:09:32:D6:C7:50:87:2E:44:9A:B5:C9:D6
            X509v3 Authority Key Identifier:
                keyid:BD:2C:AC:A4:44:36:57:3E:8C:2E:F9:5C:18:E1:CB:5F:E2:F0:F6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/1/BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD2CACA44436573E8C2EF95C18E1CB5FE2F0F615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/1/3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:94:a0:a1:98:95:1f:b1:db:21:41:2c:1d:f4:18:15:9a:ca:
         25:49:94:f6:ae:f9:1f:7c:b7:45:51:90:3c:30:be:4f:b1:00:
         f4:d3:b1:66:69:e4:4a:eb:65:3e:4f:72:b1:19:2b:c0:d4:76:
         32:7f:28:e0:82:ff:65:5f:e0:da:e3:0f:6f:05:cc:b6:a1:d9:
         93:02:6d:f8:7b:a1:43:a1:31:40:60:21:34:33:cb:d9:27:72:
         ed:b7:ce:a2:60:88:21:49:c8:7a:b4:26:92:d7:5b:7c:26:a9:
         7f:e2:e8:00:a1:0d:3a:ca:61:fe:49:02:5c:c5:51:ec:af:90:
         f4:2d:6e:22:95:47:23:6c:5d:98:f5:eb:be:c8:63:6a:d3:b7:
         87:6e:8d:5a:65:e1:53:11:60:23:81:b3:be:7c:a7:f0:e1:81:
         be:07:40:8a:d5:d9:e1:c5:af:c4:1a:56:8f:f2:ed:73:5c:3f:
         f1:0f:b9:61:35:9d:0e:c8:9f:75:93:04:94:59:9d:81:14:d3:
         8f:33:ab:b9:59:f1:bd:43:e5:43:af:d9:38:87:3e:ed:d4:06:
         c3:f9:5d:75:c7:53:cf:a2:2a:3d:52:26:94:63:8a:a5:03:97:
         45:b7:7b:58:44:75:c7:c1:00:d2:8b:68:3d:e5:87:f5:26:ef:
         e1:54:0d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org