Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa
File:                     3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa (raw, json)
Hash identifier:          +5tGp5BwX1EutHx7xS24DPzV82BL7qoF9qhYD54MFp4=
Subject key identifier:   2A:D2:CF:BB:11:FB:39:F4:DA:8D:C8:BB:6F:B1:3E:8E:20:46:43:E4
Certificate issuer:       /CN=324BE2BBC4A567320A1FF9513B2B7BEAD96114C2
Certificate serial:       4900B2015B85436FCCA633CCF3845DC48DAA12AD
Authority key identifier: 32:4B:E2:BB:C4:A5:67:32:0A:1F:F9:51:3B:2B:7B:EA:D9:61:14:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/324BE2BBC4A567320A1FF9513B2B7BEAD96114C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa
Signing time:             Tue 06 Feb 2024 16:32:18 +0000
ROA not before:           Tue 06 Feb 2024 16:27:18 +0000
ROA not after:            Tue 04 Feb 2025 16:32:18 +0000
asID:                     270541
IP address blocks:        177.124.152.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:00:b2:01:5b:85:43:6f:cc:a6:33:cc:f3:84:5d:c4:8d:aa:12:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324BE2BBC4A567320A1FF9513B2B7BEAD96114C2
        Validity
            Not Before: Feb  6 16:27:18 2024 GMT
            Not After : Feb  4 16:32:18 2025 GMT
        Subject: CN=2AD2CFBB11FB39F4DA8DC8BB6FB13E8E204643E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:fc:35:58:59:d2:b0:c6:9c:3d:cb:32:c0:
                    7b:8b:77:ee:10:54:ce:f9:25:df:2c:ef:f8:47:12:
                    50:72:8b:e6:2a:cc:4f:4c:76:5f:39:05:34:87:f5:
                    7f:2c:b2:39:64:47:a1:01:2b:f4:ba:d8:0c:8a:33:
                    18:1e:00:ff:37:3b:bb:9e:d3:1d:e6:f9:eb:85:c6:
                    28:e5:39:28:5d:96:03:0e:46:e6:2f:79:41:f6:11:
                    62:45:09:ae:be:28:c2:31:ec:ac:07:02:4a:85:5c:
                    0b:37:96:dc:29:49:fd:bc:be:69:fd:5e:70:6f:d9:
                    04:f2:10:86:53:8b:0e:2c:60:a9:4b:55:ea:7a:30:
                    cc:47:d0:3e:03:45:fe:61:08:ac:a8:cf:15:27:d9:
                    db:fc:d6:8f:fd:ac:60:5d:81:68:e8:92:38:b2:7c:
                    3b:58:1c:3e:2b:15:13:94:7a:a6:2e:81:f4:78:04:
                    3f:ee:0c:bf:1c:2d:11:ae:0c:9e:eb:7a:f6:54:f8:
                    2e:ef:c5:61:a4:cc:e8:0d:b6:82:d8:16:fd:1e:9d:
                    46:c4:eb:6a:e7:65:04:16:02:08:0a:39:8c:75:b0:
                    36:64:50:ec:83:62:17:27:5e:72:c3:1c:60:5b:af:
                    6d:39:5d:11:3b:5c:25:e3:75:72:d0:8d:9c:f3:57:
                    70:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D2:CF:BB:11:FB:39:F4:DA:8D:C8:BB:6F:B1:3E:8E:20:46:43:E4
            X509v3 Authority Key Identifier:
                keyid:32:4B:E2:BB:C4:A5:67:32:0A:1F:F9:51:3B:2B:7B:EA:D9:61:14:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/324BE2BBC4A567320A1FF9513B2B7BEAD96114C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/324BE2BBC4A567320A1FF9513B2B7BEAD96114C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:db:6e:56:30:54:8c:aa:da:0b:e1:89:e8:5e:03:c3:9e:b0:
         f2:9e:8d:5a:b9:3b:61:86:61:72:0d:49:69:94:0d:ac:13:70:
         af:a7:a8:88:3d:70:b1:e2:c6:28:bf:92:6a:0d:61:16:fe:e4:
         c7:ca:5d:94:0d:24:98:77:a0:67:7d:f0:bb:dd:90:10:b3:b3:
         50:ee:3f:51:25:2b:17:20:a3:a3:1a:ee:cb:a4:30:16:9b:b7:
         43:c8:ae:b7:ca:55:c8:72:8b:c2:51:2f:66:7e:d2:b3:4b:50:
         c8:b8:58:a7:02:43:75:b7:c5:66:6a:25:63:53:e1:bb:43:b8:
         da:75:9b:80:09:f1:32:50:52:88:57:f3:f5:26:bf:33:7a:a4:
         21:19:33:b5:df:6c:2a:2c:58:92:b2:ca:90:ef:2b:16:2d:e8:
         bf:47:1a:bf:b3:41:76:ec:7e:00:e9:15:af:1c:f5:a7:72:68:
         2c:bf:9d:06:1a:3b:93:ea:e2:e8:14:f0:c9:5a:7f:1b:a8:e7:
         63:5a:40:28:a5:85:19:cc:28:73:e4:00:5d:70:e0:85:06:3f:
         47:34:4f:17:af:cf:0a:85:78:ea:03:54:59:63:e1:c0:20:3f:
         f4:26:fa:bb:bf:18:5d:80:a7:e8:d9:2c:4b:1f:8a:44:0a:7a:
         79:1f:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org