Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234302e302f32312d3234203d3e20323632353335.roa
File:                     3137372e36372e3234302e302f32312d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          sgFhhBH7nwcTjA+FJoTpJJlxV/4bIx74jnqZOxorGWU=
Subject key identifier:   2E:6A:19:5F:E8:EC:B8:D6:1A:83:2E:21:82:FD:60:0E:00:F0:DC:1B
Certificate issuer:       /CN=0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE
Certificate serial:       151B44A23A62C3FFD541FC5F4A4B1972EC874656
Authority key identifier: 0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234302e302f32312d3234203d3e20323632353335.roa
Signing time:             Wed 11 Jan 2023 18:35:14 +0000
ROA not before:           Wed 11 Jan 2023 18:30:14 +0000
ROA not after:            Wed 10 Jan 2024 18:35:14 +0000
asID:                     262535
IP address blocks:        177.67.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1b:44:a2:3a:62:c3:ff:d5:41:fc:5f:4a:4b:19:72:ec:87:46:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE
        Validity
            Not Before: Jan 11 18:30:14 2023 GMT
            Not After : Jan 10 18:35:14 2024 GMT
        Subject: CN=2E6A195FE8ECB8D61A832E2182FD600E00F0DC1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6c:b4:01:00:13:e0:6e:cb:e7:75:03:15:7a:
                    bc:1e:a8:72:12:80:e4:12:5d:08:5d:64:ef:9c:8a:
                    7c:8c:54:fd:19:09:09:b3:5e:81:dc:d1:fb:3e:1b:
                    a4:f0:b9:3d:04:32:71:27:7f:87:69:90:ba:f0:b5:
                    ae:b8:49:79:89:d3:25:d4:6e:4c:4a:f3:b2:5c:d5:
                    c1:b4:9e:9c:f4:52:b9:bc:8e:5f:26:67:ed:6c:f7:
                    f3:b9:07:04:54:a5:0e:4c:e2:15:f9:ce:78:00:30:
                    97:85:88:7e:be:f6:0b:2d:7f:b8:e4:1d:98:6e:3d:
                    c4:98:72:fa:13:7e:8c:a9:be:6d:55:08:b8:73:15:
                    06:1b:2a:4c:8a:8f:b2:d0:00:64:56:6e:7b:53:e3:
                    71:0d:6d:ff:48:ae:c7:06:0e:5b:c1:9f:7d:e1:23:
                    63:cf:ab:c0:51:93:4c:e1:b4:c1:29:1c:7a:57:77:
                    99:67:33:a3:4a:a8:a8:7a:de:88:42:3d:42:64:f1:
                    d5:7d:44:2e:10:90:91:ef:11:47:c6:23:fe:e7:83:
                    4a:69:d7:e5:08:f4:10:22:e0:ea:46:5f:17:a4:af:
                    ee:fa:5c:86:a2:01:56:1b:0c:c0:3b:93:76:99:6f:
                    18:ab:6b:46:25:19:76:ef:74:83:35:bc:ff:e6:8c:
                    61:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6A:19:5F:E8:EC:B8:D6:1A:83:2E:21:82:FD:60:0E:00:F0:DC:1B
            X509v3 Authority Key Identifier:
                keyid:0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234302e302f32312d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:36:7a:f3:4c:e4:72:8d:5e:70:a8:64:12:a7:3f:a8:1b:bf:
         3b:31:94:46:31:68:03:42:0c:a1:4c:e9:ff:8b:95:aa:fb:5e:
         51:77:38:c0:cf:fb:14:3e:19:a2:0c:fc:92:78:dd:95:de:6a:
         5f:24:1a:d4:42:0a:3e:62:6e:5a:56:2a:cf:1d:29:22:92:41:
         07:98:c8:ac:b0:a5:0c:46:46:3d:08:a0:ac:8f:e6:7e:ca:69:
         89:bb:b3:43:ed:63:d6:ca:50:ed:a3:f1:96:29:bd:f8:4f:5e:
         ad:74:ce:c0:b6:70:f2:1c:e1:b3:67:91:25:08:43:93:22:ca:
         fa:98:bd:d3:bd:aa:98:ae:d6:25:53:3d:d5:64:a3:00:91:3c:
         f5:31:0a:9d:a1:fd:a1:c0:da:41:0f:1a:ab:99:9e:c8:31:43:
         34:ea:9a:85:08:5b:a7:de:3c:d3:92:bd:38:ee:75:bc:b9:e6:
         31:cf:42:f1:7e:f8:a0:95:64:15:70:c1:b0:92:6c:ba:eb:43:
         53:dd:b9:8d:5a:e8:1a:cf:b1:3b:24:84:39:f9:97:21:c6:52:
         ad:5c:71:22:21:61:fb:42:28:da:1d:47:53:96:99:29:c3:b3:
         70:68:d0:39:0a:4d:b7:68:59:b9:d4:a7:4e:96:52:ba:49:4a:
         e6:07:b5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org