Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/0/3137372e3130372e3231362e302f32312d3234203d3e20323633353036.roa
File:                     3137372e3130372e3231362e302f32312d3234203d3e20323633353036.roa (raw, json)
Hash identifier:          ov+yAgKv5z399ITtQ7xybfw/3OmTVnWBQQdnBgtBtOo=
Subject key identifier:   BC:1B:F0:8D:41:36:35:30:C9:A6:07:CA:A3:9D:84:CD:3A:BD:E9:31
Certificate issuer:       /CN=AE32506C8CADC17BF0B2D1C971A2E32C8DE8C58B
Certificate serial:       063BA6EB9C56768B5D8AA5FE83F5120FF6CEF66A
Authority key identifier: AE:32:50:6C:8C:AD:C1:7B:F0:B2:D1:C9:71:A2:E3:2C:8D:E8:C5:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE32506C8CADC17BF0B2D1C971A2E32C8DE8C58B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/0/3137372e3130372e3231362e302f32312d3234203d3e20323633353036.roa
Signing time:             Tue 20 Feb 2024 19:07:50 +0000
ROA not before:           Tue 20 Feb 2024 19:02:50 +0000
ROA not after:            Tue 18 Feb 2025 19:07:50 +0000
asID:                     263506
IP address blocks:        177.107.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3b:a6:eb:9c:56:76:8b:5d:8a:a5:fe:83:f5:12:0f:f6:ce:f6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE32506C8CADC17BF0B2D1C971A2E32C8DE8C58B
        Validity
            Not Before: Feb 20 19:02:50 2024 GMT
            Not After : Feb 18 19:07:50 2025 GMT
        Subject: CN=BC1BF08D41363530C9A607CAA39D84CD3ABDE931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:21:b1:22:76:2b:09:31:d0:b3:d9:c0:1c:35:
                    dd:e8:58:f3:d4:15:4d:bb:e5:6a:0b:1f:3a:cc:71:
                    c1:42:e4:4f:aa:41:f4:5e:41:74:1d:d9:5e:f4:9f:
                    9e:fd:e7:b2:40:d5:f5:25:9c:37:ed:98:12:f5:1d:
                    8a:21:f0:de:38:5b:b6:be:0c:a1:1f:16:14:80:8e:
                    51:6c:12:76:be:c2:f3:3b:af:c6:bc:76:ba:ec:12:
                    0c:2c:bb:ed:10:52:cb:f4:f8:65:42:07:08:71:fd:
                    f2:80:90:c0:dd:de:80:61:6e:2d:e5:e4:d1:c4:a5:
                    6b:5a:85:6c:47:7a:69:64:8b:78:81:45:55:6a:e9:
                    05:be:5b:8e:80:98:96:5b:2d:95:a6:85:2e:4a:72:
                    fd:64:4a:e5:8f:7d:28:4c:02:b5:a9:eb:31:74:de:
                    73:b7:e0:02:83:e7:e2:a9:0b:63:3d:25:25:84:27:
                    e7:31:a3:c5:5a:7f:03:2f:dc:dd:ef:87:13:02:77:
                    7e:dc:ea:4d:71:47:56:3e:0e:21:33:53:23:6a:ee:
                    d4:4c:2a:e1:47:06:75:33:cf:12:1b:0a:00:52:65:
                    76:97:b0:f2:3b:b3:a8:f9:51:f6:7c:46:58:94:38:
                    d8:49:30:4a:43:38:55:24:f0:c5:58:19:57:65:c5:
                    33:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1B:F0:8D:41:36:35:30:C9:A6:07:CA:A3:9D:84:CD:3A:BD:E9:31
            X509v3 Authority Key Identifier:
                keyid:AE:32:50:6C:8C:AD:C1:7B:F0:B2:D1:C9:71:A2:E3:2C:8D:E8:C5:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/0/AE32506C8CADC17BF0B2D1C971A2E32C8DE8C58B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE32506C8CADC17BF0B2D1C971A2E32C8DE8C58B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/0/3137372e3130372e3231362e302f32312d3234203d3e20323633353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cf:f7:bb:0e:e3:3b:dd:e1:af:f6:7b:51:1e:15:5b:a0:58:b9:
         53:a1:0d:ca:46:ca:0d:55:61:48:71:67:de:86:2e:42:2e:ae:
         89:fc:1d:8b:78:9a:77:ec:bd:07:4b:1d:95:c9:4d:4a:fa:4a:
         00:b1:63:a7:bb:f5:62:c4:c0:3d:dd:89:2d:04:19:58:f4:7f:
         6e:ed:70:b6:fc:4e:5d:15:4b:bc:28:e7:3a:15:38:94:eb:ff:
         c9:6b:6d:61:9a:14:85:00:09:fa:d8:7a:6f:eb:b0:17:7d:1f:
         e9:d0:0f:4d:df:8f:82:6c:ae:b7:5d:91:2d:85:44:08:4e:21:
         32:e4:95:ff:2c:29:57:75:4b:b0:0a:5e:24:3a:ee:4d:c0:89:
         a0:65:dc:26:e5:77:ff:8d:a5:57:ac:53:67:43:c1:92:9f:e2:
         a3:64:97:77:32:61:c8:7d:65:cc:64:78:6a:c6:cc:80:da:da:
         8d:5d:b4:be:80:32:eb:94:cb:55:5e:97:19:18:74:86:a4:47:
         38:55:4a:bf:f4:12:e8:43:45:10:98:a3:ab:58:3e:d2:f1:16:
         a7:38:dd:a4:d0:e3:ce:39:dd:37:96:22:ba:dd:5c:c8:01:b0:
         b9:68:04:6d:54:0d:23:ed:90:84:aa:bf:0e:1e:75:6f:ce:ad:
         35:03:b5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org