Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137372e31312e39342e302f32342d3234203d3e203532393430.roa
File:                     3137372e31312e39342e302f32342d3234203d3e203532393430.roa (raw, json)
Hash identifier:          +ZTtZssDcGrcMV1miLuLL2ea7boy6c/QrdtTQOhO7kE=
Subject key identifier:   02:81:D7:69:FD:E8:DB:26:99:6A:09:7F:A3:5E:BB:BA:C7:2F:2E:C2
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       333EF7863C327488ABD75424451E68DC86C33463
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137372e31312e39342e302f32342d3234203d3e203532393430.roa
Signing time:             Tue 22 Aug 2023 18:26:49 +0000
ROA not before:           Tue 22 Aug 2023 18:21:49 +0000
ROA not after:            Tue 20 Aug 2024 18:26:49 +0000
asID:                     52940
IP address blocks:        177.11.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3e:f7:86:3c:32:74:88:ab:d7:54:24:45:1e:68:dc:86:c3:34:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Aug 22 18:21:49 2023 GMT
            Not After : Aug 20 18:26:49 2024 GMT
        Subject: CN=3082010A0282010100E81602A672165EDE47F3398EBBA0F68193C13585578354DEFE4F708471BCE34E0AD67B56AD975DAF737EB795EF9E5DA8A4C09FD59D6C08F15DFF68A1EAD3842F4A76A165451962F2E0820A4685055A9E340B2D903B148F38970BF9CA244AC567943A0B6B6A7A20938FDD33862AB6F250001A30B771590DC256FD980321DA5404356AFB5BA8AC3FA5BB026CF5D3E1E740C3513D0034F384817ACCD49A6B5E54DBC2D54112FF9DC168C81DFA8B3C8CF45EFD495D1B872058928EFCF6B5B4C5F933909345D087B19FA8428D8398F83E09AD3C699373204E56855A6601381274519A8A6BF01C3715B2ECB95C435FC3D4D02D4B0A7652B9872D3A9DCC4A9F0B8511F50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:16:02:a6:72:16:5e:de:47:f3:39:8e:bb:a0:
                    f6:81:93:c1:35:85:57:83:54:de:fe:4f:70:84:71:
                    bc:e3:4e:0a:d6:7b:56:ad:97:5d:af:73:7e:b7:95:
                    ef:9e:5d:a8:a4:c0:9f:d5:9d:6c:08:f1:5d:ff:68:
                    a1:ea:d3:84:2f:4a:76:a1:65:45:19:62:f2:e0:82:
                    0a:46:85:05:5a:9e:34:0b:2d:90:3b:14:8f:38:97:
                    0b:f9:ca:24:4a:c5:67:94:3a:0b:6b:6a:7a:20:93:
                    8f:dd:33:86:2a:b6:f2:50:00:1a:30:b7:71:59:0d:
                    c2:56:fd:98:03:21:da:54:04:35:6a:fb:5b:a8:ac:
                    3f:a5:bb:02:6c:f5:d3:e1:e7:40:c3:51:3d:00:34:
                    f3:84:81:7a:cc:d4:9a:6b:5e:54:db:c2:d5:41:12:
                    ff:9d:c1:68:c8:1d:fa:8b:3c:8c:f4:5e:fd:49:5d:
                    1b:87:20:58:92:8e:fc:f6:b5:b4:c5:f9:33:90:93:
                    45:d0:87:b1:9f:a8:42:8d:83:98:f8:3e:09:ad:3c:
                    69:93:73:20:4e:56:85:5a:66:01:38:12:74:51:9a:
                    8a:6b:f0:1c:37:15:b2:ec:b9:5c:43:5f:c3:d4:d0:
                    2d:4b:0a:76:52:b9:87:2d:3a:9d:cc:4a:9f:0b:85:
                    11:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:81:D7:69:FD:E8:DB:26:99:6A:09:7F:A3:5E:BB:BA:C7:2F:2E:C2
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137372e31312e39342e302f32342d3234203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:1f:9b:2d:52:2f:db:48:34:bf:30:96:3f:75:e7:ae:9b:0b:
         7c:f6:9b:67:1b:2a:94:54:bc:b6:72:75:0b:59:1a:fb:6a:ef:
         75:24:de:d5:88:c8:63:4f:bf:5d:a9:09:3a:65:bc:a9:9a:d2:
         e6:ef:ae:9d:1e:2d:7f:82:37:e3:01:92:11:c2:4b:1d:fb:9d:
         c8:2e:0d:cf:70:87:c7:30:d7:dc:ec:7d:2f:67:77:8b:ce:47:
         d6:04:f4:39:a9:39:d6:db:25:e3:ad:a2:e9:54:5f:c3:10:95:
         d3:17:ba:17:20:a9:9b:ba:d0:d8:c0:76:83:9d:e3:24:39:5e:
         2f:c5:21:72:b2:ac:38:cb:c1:60:30:f3:b7:2b:13:80:76:a8:
         b3:2f:7b:55:aa:75:7d:75:6f:a4:86:55:3a:aa:70:8f:c2:26:
         bf:f2:45:6c:53:45:03:7d:7c:34:b1:51:0d:79:c5:f4:e4:ba:
         6e:36:28:23:b5:3a:9d:38:b1:ae:48:09:93:77:f5:df:36:8e:
         71:d2:e1:16:fd:79:0e:a8:e5:9f:f1:8b:fc:85:46:a6:f5:0b:
         58:3e:d9:89:10:01:99:9b:85:fe:2a:df:90:3f:de:62:ea:5b:
         89:35:bc:32:e5:70:96:af:bb:e6:64:47:5a:e1:1f:8b:70:6c:
         46:ef:e0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org