Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234302e302f32312d3332203d3e20323632353335.roa
File:                     3137372e36372e3234302e302f32312d3332203d3e20323632353335.roa (raw, json)
Hash identifier:          rM96ltaPNN5R5eqYZzTI/YjcgjoGqH+HkhBDQrHOQBE=
Subject key identifier:   D2:A1:58:0E:07:51:3A:B5:9F:95:40:4D:76:C2:73:FA:D9:15:83:11
Certificate issuer:       /CN=2AA1791D91BFFF6ECDE295F6F522FB764A332153
Certificate serial:       1B72118927C59B07E4541E67FC82B36749CA4435
Authority key identifier: 2A:A1:79:1D:91:BF:FF:6E:CD:E2:95:F6:F5:22:FB:76:4A:33:21:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AA1791D91BFFF6ECDE295F6F522FB764A332153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234302e302f32312d3332203d3e20323632353335.roa
Signing time:             Mon 13 Mar 2023 15:30:28 +0000
ROA not before:           Mon 13 Mar 2023 15:25:28 +0000
ROA not after:            Mon 11 Mar 2024 15:30:28 +0000
asID:                     262535
IP address blocks:        177.67.240.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:72:11:89:27:c5:9b:07:e4:54:1e:67:fc:82:b3:67:49:ca:44:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA1791D91BFFF6ECDE295F6F522FB764A332153
        Validity
            Not Before: Mar 13 15:25:28 2023 GMT
            Not After : Mar 11 15:30:28 2024 GMT
        Subject: CN=D2A1580E07513AB59F95404D76C273FAD9158311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:11:50:79:81:46:c0:e0:a1:97:0c:90:4f:
                    dd:98:67:6d:5c:49:19:eb:9a:60:c5:b4:c5:09:8c:
                    f1:61:9e:2f:b2:07:57:c2:a6:d1:06:90:be:04:4c:
                    9b:53:08:d3:71:2f:73:c7:fa:21:12:3e:fa:b4:19:
                    a1:ab:4e:a5:05:61:3b:fd:2a:af:11:52:58:5c:f8:
                    b8:41:cf:5a:8e:46:c2:2a:d6:3d:8b:53:8c:cd:4c:
                    a7:68:41:a0:23:e3:b6:c6:3a:8a:1f:c5:66:62:dd:
                    37:1d:d0:c6:15:c8:df:7a:01:22:f8:fc:72:62:c2:
                    ab:b2:73:42:bd:66:51:01:3a:53:fc:ad:4b:95:61:
                    9b:c9:b6:68:a1:05:64:af:13:66:7d:ea:62:ae:2a:
                    58:de:f7:3e:6b:16:6c:8c:2e:2f:ee:f3:02:07:dc:
                    b7:03:1d:1f:72:19:38:11:28:0a:61:0e:24:29:08:
                    74:86:65:1f:bf:12:02:89:aa:ff:44:df:f9:cd:50:
                    e1:15:a5:f3:a4:38:30:c3:e1:48:e4:ef:9c:f7:ed:
                    1c:c3:51:da:61:04:1f:10:4f:fe:ab:1d:62:65:82:
                    7d:af:dc:56:9e:ee:1e:bd:bf:96:4c:c9:60:cf:56:
                    de:a0:ef:c7:1a:cf:4a:58:f0:65:a7:2a:b2:90:bf:
                    f6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A1:58:0E:07:51:3A:B5:9F:95:40:4D:76:C2:73:FA:D9:15:83:11
            X509v3 Authority Key Identifier:
                keyid:2A:A1:79:1D:91:BF:FF:6E:CD:E2:95:F6:F5:22:FB:76:4A:33:21:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/2AA1791D91BFFF6ECDE295F6F522FB764A332153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AA1791D91BFFF6ECDE295F6F522FB764A332153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234302e302f32312d3332203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:71:d6:09:7f:df:6c:09:b5:44:85:13:12:d7:48:6a:73:ff:
         f7:61:c1:a1:35:bd:ff:73:a0:03:0c:06:09:9a:2b:9e:e8:9c:
         2d:93:32:f8:76:1e:bb:31:85:f0:20:ba:b0:3d:36:01:3c:2f:
         dc:fb:ba:1e:f4:9d:ab:a1:b1:02:e6:e8:4d:a7:b9:e2:1b:b1:
         4e:5a:b4:37:0e:eb:67:b2:7b:d3:5b:ad:e1:c3:6e:13:49:22:
         08:fe:eb:8a:f3:36:9a:21:f7:8a:0f:b0:9a:5e:06:9c:39:8a:
         dd:2c:3f:0e:63:19:f4:46:ab:81:fc:a8:0b:ce:98:69:b4:0a:
         4c:d0:f1:53:fe:93:52:4b:4b:0a:0b:cc:03:7a:0c:06:fa:06:
         7c:f5:f9:3d:7b:2d:fb:c4:af:22:01:d5:bc:5e:e2:9e:32:fe:
         da:cf:a4:33:79:12:f6:85:4d:ca:9a:ed:0a:a5:5a:6e:12:1e:
         3d:4c:dd:d0:18:92:64:a0:b6:18:74:54:42:91:86:1d:4c:0a:
         0e:5b:86:b3:35:e3:17:08:ec:7a:92:a7:81:26:c5:c0:bf:19:
         a1:9b:c2:05:96:eb:bc:81:3d:89:46:cf:22:ae:d7:cf:40:85:
         90:9d:21:11:b5:7d:52:f5:e9:e8:83:f6:51:13:ac:3e:06:69:
         3b:56:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org