Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3137372e31312e39322e302f32322d3234203d3e203532393430.roa
File:                     3137372e31312e39322e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier:          nqzDBFClaw+VcYHwaKgq/nSMacKTqDj6WbAIX+f5wbc=
Subject key identifier:   AA:2E:FF:A8:F3:18:D1:3B:70:44:14:1E:96:87:E6:8E:0D:03:9B:2A
Certificate issuer:       /CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
Certificate serial:       6106DEBB106E59E5ED17A9F5C90BF060A332A979
Authority key identifier: AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3137372e31312e39322e302f32322d3234203d3e203532393430.roa
Signing time:             Tue 23 Jul 2024 12:02:33 +0000
ROA not before:           Tue 23 Jul 2024 11:57:33 +0000
ROA not after:            Tue 22 Jul 2025 12:02:33 +0000
asID:                     52940
IP address blocks:        177.11.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:06:de:bb:10:6e:59:e5:ed:17:a9:f5:c9:0b:f0:60:a3:32:a9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
        Validity
            Not Before: Jul 23 11:57:33 2024 GMT
            Not After : Jul 22 12:02:33 2025 GMT
        Subject: CN=AA2EFFA8F318D13B7044141E9687E68E0D039B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:64:6b:0a:e9:83:57:ef:2e:12:9f:a5:1c:fc:
                    ce:98:0a:32:a8:be:14:41:a8:b3:8c:67:45:22:7c:
                    b2:cd:f0:40:46:99:dc:dc:12:c4:de:92:ba:7c:94:
                    9e:84:72:cf:40:c8:fd:a0:ee:61:d0:15:42:f9:54:
                    f1:67:eb:85:7f:32:48:8f:f3:db:88:e7:45:72:21:
                    d4:f9:c4:11:9b:56:50:46:5a:2c:33:ee:cf:54:50:
                    3f:53:91:f6:ae:6e:ef:aa:86:31:4d:61:d8:09:1e:
                    10:6f:d3:67:a6:52:ce:2b:c5:3b:23:0e:99:2f:53:
                    bf:05:aa:e9:9d:07:0a:0d:ad:5f:6a:6f:89:70:2c:
                    89:9f:2c:0d:eb:2c:05:67:40:4c:fd:ba:65:70:ce:
                    82:a8:30:73:0a:52:b1:e5:bb:b1:81:30:5a:4f:ac:
                    fc:af:8a:90:8d:29:b9:76:08:d1:db:31:23:37:fb:
                    93:ca:df:f5:ae:1b:4e:27:f8:5c:b5:39:a3:c2:81:
                    66:eb:d9:fb:da:f2:20:cc:2a:dd:08:22:61:5e:ac:
                    87:76:da:f9:86:01:fc:64:f5:85:e7:44:97:64:89:
                    7a:a6:19:78:c1:de:f1:75:3d:fa:54:f6:ef:bd:d2:
                    ad:cf:d8:85:7f:39:a4:f8:ed:07:94:af:95:b1:6c:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2E:FF:A8:F3:18:D1:3B:70:44:14:1E:96:87:E6:8E:0D:03:9B:2A
            X509v3 Authority Key Identifier:
                keyid:AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3137372e31312e39322e302f32322d3234203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:2b:b9:5a:a7:4e:f0:38:92:2f:4e:93:cf:20:d5:1c:a4:28:
         52:fa:2e:31:a6:2f:6d:ae:01:3e:c6:e4:96:c0:bc:81:c1:3f:
         35:13:d9:48:20:1f:4b:05:82:8a:a6:88:7c:32:78:f4:63:46:
         03:f5:13:97:03:b1:b8:3f:16:b9:58:0c:d7:ca:5a:44:24:94:
         3c:c9:61:73:07:b2:3b:b3:af:83:f4:80:f6:b4:a0:ed:75:a5:
         19:69:b3:57:42:61:2d:91:6d:bd:69:e1:3e:53:4d:25:7b:25:
         68:cc:f4:6a:b3:a5:14:f1:bc:25:34:b6:39:0b:b9:68:16:0c:
         7c:8c:d1:9a:2f:51:3d:2c:76:45:d0:35:51:c3:6b:39:99:92:
         c0:b1:e6:f5:80:96:1d:0c:21:56:d0:79:86:08:74:cb:b6:13:
         8b:0c:9a:97:d1:4b:73:5e:1a:0f:79:b0:76:c0:02:7a:37:6b:
         fa:48:42:05:61:e5:66:5c:a0:b3:c9:d7:ff:15:39:e2:38:28:
         2e:78:c5:2f:6c:60:a2:29:12:1f:fb:51:ee:a7:44:20:36:7c:
         c7:c2:64:ee:12:7b:2a:51:27:bb:42:25:49:7f:1b:b8:dc:de:
         91:44:15:c4:a9:61:cc:47:d4:33:dc:4d:79:6b:df:5f:4c:c6:
         e4:ca:e2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org