Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/3137372e37332e34382e302f32312d3234203d3e20323632353635.roa
File:                     3137372e37332e34382e302f32312d3234203d3e20323632353635.roa (raw, json)
Hash identifier:          kW2Sb/3dSLlF/uZlrfqOkX4lU80yRMpwgwRc9yMjpTk=
Subject key identifier:   4B:1D:87:B9:DA:42:E2:53:BA:4C:E3:24:7A:B3:21:4B:8A:FB:C2:9D
Certificate issuer:       /CN=C98C64D9AE2B76AE930D9CD40C87D80301EED54C
Certificate serial:       4E19E02B84156B97F22EBAD658FCD6DEA7725B82
Authority key identifier: C9:8C:64:D9:AE:2B:76:AE:93:0D:9C:D4:0C:87:D8:03:01:EE:D5:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C98C64D9AE2B76AE930D9CD40C87D80301EED54C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/3137372e37332e34382e302f32312d3234203d3e20323632353635.roa
Signing time:             Tue 19 Mar 2024 18:04:23 +0000
ROA not before:           Tue 19 Mar 2024 17:59:23 +0000
ROA not after:            Tue 18 Mar 2025 18:04:23 +0000
asID:                     262565
IP address blocks:        177.73.48.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:19:e0:2b:84:15:6b:97:f2:2e:ba:d6:58:fc:d6:de:a7:72:5b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98C64D9AE2B76AE930D9CD40C87D80301EED54C
        Validity
            Not Before: Mar 19 17:59:23 2024 GMT
            Not After : Mar 18 18:04:23 2025 GMT
        Subject: CN=4B1D87B9DA42E253BA4CE3247AB3214B8AFBC29D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:66:0f:01:cf:75:08:94:9c:fe:98:75:5b:e6:
                    24:7e:54:c9:eb:7e:31:97:e3:99:df:b0:1a:d1:de:
                    99:5e:ed:1e:3a:d3:a1:98:2d:84:67:a6:d3:6e:27:
                    9b:1c:0b:0f:6b:84:6c:db:ed:c7:b8:7e:ed:bd:bc:
                    12:4f:8b:5f:52:b4:17:79:3e:bb:92:21:9f:68:76:
                    d3:7f:57:03:54:3b:bb:03:f9:d1:64:10:cb:c4:11:
                    08:8a:93:86:cd:10:cc:1e:46:14:d6:ca:d2:0a:96:
                    ed:77:ec:fd:e3:cf:f0:6e:a3:76:49:b3:46:56:83:
                    c1:81:24:6b:a6:cf:07:4b:8e:ec:9d:d3:67:7f:8c:
                    38:d7:3c:5b:90:61:27:ba:01:e8:2c:3f:d4:36:e4:
                    24:c7:0f:6f:9d:5a:19:2d:70:af:44:6e:7f:fe:cc:
                    b6:7d:34:f6:d9:73:5a:c5:37:b5:72:54:63:8e:ef:
                    cd:43:ba:87:a2:a5:65:f2:2c:48:c9:11:97:23:8c:
                    cb:eb:1d:dc:14:06:5f:d8:af:19:78:fc:24:9d:37:
                    4b:fc:a9:10:00:dd:01:5b:dc:86:84:a5:47:85:9c:
                    5a:34:ad:31:a3:a8:34:ff:63:d2:ca:98:54:d5:81:
                    f2:63:47:d7:83:11:cb:56:38:73:6e:6f:2a:59:be:
                    ed:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1D:87:B9:DA:42:E2:53:BA:4C:E3:24:7A:B3:21:4B:8A:FB:C2:9D
            X509v3 Authority Key Identifier:
                keyid:C9:8C:64:D9:AE:2B:76:AE:93:0D:9C:D4:0C:87:D8:03:01:EE:D5:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/C98C64D9AE2B76AE930D9CD40C87D80301EED54C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C98C64D9AE2B76AE930D9CD40C87D80301EED54C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/0/3137372e37332e34382e302f32312d3234203d3e20323632353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:49:da:27:59:9e:18:c5:3d:ef:0f:cb:21:2f:3d:4b:86:37:
         db:29:c4:a1:3d:c0:3b:be:9b:13:a3:96:60:99:46:9e:7c:f4:
         c6:ca:1d:73:d3:b0:db:78:63:c1:a9:e0:da:b9:0f:72:e7:10:
         d9:b2:0e:17:20:59:6d:fb:f6:45:27:49:ed:ee:f9:1c:39:58:
         48:6b:e1:c8:e9:e4:e0:ae:11:62:0f:b6:75:eb:fb:bd:63:59:
         86:ad:56:df:fc:15:f9:88:a5:eb:b9:83:25:f2:64:9b:0d:f4:
         5b:6a:16:77:df:6e:73:43:b1:56:d0:e0:73:18:72:d2:2e:93:
         15:c7:75:8b:4c:ba:77:01:dc:0c:e9:d0:01:95:8c:27:21:ca:
         c3:95:fb:16:32:92:25:7b:fc:11:a3:05:6d:e1:e3:73:8b:a1:
         7c:73:61:86:d5:6b:b9:35:f7:55:d0:f4:b6:b3:0e:f3:d7:e0:
         46:76:ff:76:f7:6d:40:35:14:37:f9:ea:a7:89:69:50:5a:ab:
         85:ef:63:14:10:c2:1c:c4:b3:ff:12:3f:fb:b1:90:93:3e:ad:
         ca:17:8d:cb:00:4d:6c:e5:46:b2:12:e8:ef:55:c4:a1:61:11:
         be:52:0b:8a:a7:6d:fc:17:93:2f:1d:6f:42:23:3d:cc:9a:a7:
         e2:12:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org