Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137372e35332e3134372e302f32342d3234203d3e20323632343638.roa
File:                     3137372e35332e3134372e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          vFn5zSdo0kKSa4XfbxS48RmIbRxoPgJlPZd/agzWtVk=
Subject key identifier:   8B:1D:8D:9F:CA:EA:2D:3F:56:7F:69:B4:71:F2:67:DA:1A:0D:23:9E
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       3FB2521BF684932D3D04914F81D270C5921939C3
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137372e35332e3134372e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:55 +0000
ROA not before:           Tue 20 Dec 2022 15:04:55 +0000
ROA not after:            Tue 19 Dec 2023 15:09:55 +0000
asID:                     262468
IP address blocks:        177.53.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b2:52:1b:f6:84:93:2d:3d:04:91:4f:81:d2:70:c5:92:19:39:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:55 2022 GMT
            Not After : Dec 19 15:09:55 2023 GMT
        Subject: CN=8B1D8D9FCAEA2D3F567F69B471F267DA1A0D239E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c3:32:31:93:c2:fd:4c:6e:0b:cd:61:99:e0:
                    79:5b:61:39:10:3a:8d:00:81:94:1d:56:2e:2c:4e:
                    48:6a:98:32:5c:5b:93:77:2b:8b:f9:90:95:a0:df:
                    96:dd:80:f8:66:e4:4c:10:03:6e:76:c8:ce:b1:08:
                    67:8b:9f:4b:62:09:0d:24:b3:64:29:c3:24:97:eb:
                    47:50:56:c5:bd:93:b3:ab:46:fc:98:cd:f0:78:08:
                    9b:a7:2b:0b:62:b8:29:19:71:ee:08:50:5e:77:fa:
                    89:29:4e:75:19:d3:df:25:96:64:a1:ce:6c:96:99:
                    f7:67:5e:b5:2c:14:22:93:8d:82:c7:f2:08:82:ac:
                    70:9f:4b:b4:f6:36:ae:35:47:d2:3b:35:78:30:ca:
                    78:89:11:48:00:c9:78:00:3a:90:b8:cb:09:39:fa:
                    62:7b:4d:e0:51:02:c9:f6:43:0a:2a:e5:bf:7d:2d:
                    e7:a0:ab:72:94:62:fd:61:2a:2c:4a:1e:22:fd:71:
                    23:67:4d:9b:b8:f4:b9:e9:4f:ce:11:10:ed:46:f8:
                    06:68:6f:08:80:a7:92:32:42:a3:60:87:78:2f:24:
                    e2:3b:e8:e0:36:4c:74:53:77:82:ff:99:25:83:01:
                    76:25:fd:5a:40:40:74:79:1f:02:d6:22:75:9e:c2:
                    96:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1D:8D:9F:CA:EA:2D:3F:56:7F:69:B4:71:F2:67:DA:1A:0D:23:9E
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137372e35332e3134372e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:4f:ce:dd:bb:87:1c:a3:38:d2:c9:16:dd:9c:b0:1a:eb:f4:
         cc:c5:fe:2c:95:da:90:31:a0:3f:d0:13:86:78:0f:9c:a6:55:
         4f:dc:c2:ac:d1:9a:09:e7:b4:c7:be:26:d7:6f:15:b3:55:e3:
         81:71:bd:2b:f1:0b:1a:ca:9c:aa:77:2b:ee:d9:4f:f5:cd:55:
         a3:12:00:f2:e1:d1:0f:8c:a2:ea:cd:6b:5b:63:10:c9:1f:0e:
         44:ca:44:ac:25:4a:91:06:eb:81:6a:93:4f:23:b0:e8:69:a0:
         22:af:18:64:46:03:74:b7:78:e6:2e:79:8e:63:f2:86:b7:40:
         2f:a9:b7:8d:68:04:49:e3:da:e6:a6:8b:d5:fc:58:c7:bf:c5:
         4f:08:98:07:3c:d5:de:36:2f:c1:c1:56:f4:71:9a:29:94:22:
         69:9a:53:f7:b1:8b:8d:fa:65:b3:40:ba:d4:50:2c:ae:05:ad:
         1a:1d:88:ff:6a:41:4c:82:ec:e2:53:63:24:49:bb:e2:b6:8f:
         a3:29:15:e6:3d:df:d0:a2:e3:4c:97:70:08:62:43:aa:d9:7b:
         30:13:2e:4d:6c:c8:f7:b2:eb:ad:98:c4:16:65:57:84:48:c7:
         8f:e2:4a:be:4c:a8:22:60:8d:d9:d5:11:70:fe:ab:2d:d2:a6:
         c3:bd:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org