Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          fLkTzX6LPp/a/Cp7cOU635Ykj02ThVMS24AQpCCOaOA=
Subject key identifier:   D8:9A:E5:18:8A:3C:74:17:96:1B:F5:7C:83:91:A9:1C:92:43:B9:35
Certificate issuer:       /CN=E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9
Certificate serial:       4A21274CD71CF0C66D28E178CC0A42B778733602
Authority key identifier: E8:D0:AB:35:90:AF:D5:70:B1:D7:BE:8C:A6:1A:93:9D:37:E0:06:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
Signing time:             Sun 19 Nov 2023 06:40:10 +0000
ROA not before:           Sun 19 Nov 2023 06:35:10 +0000
ROA not after:            Sun 17 Nov 2024 06:40:10 +0000
asID:                     263584
IP address blocks:        177.129.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:21:27:4c:d7:1c:f0:c6:6d:28:e1:78:cc:0a:42:b7:78:73:36:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9
        Validity
            Not Before: Nov 19 06:35:10 2023 GMT
            Not After : Nov 17 06:40:10 2024 GMT
        Subject: CN=D89AE5188A3C7417961BF57C8391A91C9243B935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:88:02:65:47:d3:1f:2a:07:96:f4:9a:a6:
                    6c:0d:70:5d:19:ee:10:49:7c:f9:67:61:33:d2:82:
                    77:73:fe:57:43:ef:c1:21:41:6e:06:b9:b7:2b:3c:
                    1b:28:76:5e:4a:ec:e1:cb:ec:95:5f:a2:a7:a9:20:
                    e2:97:5c:e1:04:5e:57:b4:4d:da:ad:73:e1:76:45:
                    ef:51:73:41:50:30:c5:bc:44:ea:c5:43:7f:0b:54:
                    bc:47:68:df:96:df:68:32:ea:8d:3f:f2:bd:af:d5:
                    e9:eb:90:74:59:dc:52:ce:c4:56:43:d5:12:c8:5a:
                    0f:d6:32:fc:fb:ea:9c:e9:8f:0f:b8:fe:27:8c:d1:
                    34:97:09:ae:af:ba:d4:1c:03:2f:d4:69:72:32:96:
                    e8:17:dd:ae:c3:dc:69:36:d6:bc:ea:a8:49:01:dd:
                    81:ed:78:fb:93:4f:a2:55:9b:19:28:63:86:22:ec:
                    c0:a9:1b:12:3e:a1:16:55:12:7c:87:4c:8c:d5:2c:
                    96:6a:1c:e7:6d:b1:bc:a4:69:29:64:e4:fb:e9:b4:
                    19:08:24:72:2b:ea:40:ed:09:2c:fe:1b:3f:c9:af:
                    cd:04:ea:72:24:fe:b1:a3:12:ce:22:65:de:9e:90:
                    20:01:84:28:1e:fe:10:c2:0a:de:8d:78:81:b8:4f:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9A:E5:18:8A:3C:74:17:96:1B:F5:7C:83:91:A9:1C:92:43:B9:35
            X509v3 Authority Key Identifier:
                keyid:E8:D0:AB:35:90:AF:D5:70:B1:D7:BE:8C:A6:1A:93:9D:37:E0:06:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:b8:d3:ea:72:56:1c:f1:a1:d8:98:2a:f7:51:c5:10:de:f0:
         99:b6:a1:3a:00:9c:6a:8f:5d:36:04:63:72:37:47:18:4b:ff:
         e1:d9:d5:5f:a7:a5:a0:db:c7:55:1a:29:8b:45:f4:60:52:81:
         74:34:4a:41:2f:9a:f3:dc:4e:05:d0:ac:34:ab:c3:5c:27:76:
         1a:67:f2:71:10:8c:1e:c4:eb:cd:64:2c:ac:4a:5c:ce:f1:53:
         44:d7:c7:78:f6:9c:de:43:85:3e:f1:9e:c0:d9:29:11:a2:8b:
         e3:ef:19:75:9d:22:43:e1:30:3d:62:90:bb:bb:60:2e:93:34:
         a6:26:d4:7b:b4:8d:e1:76:d1:63:0c:84:b4:d3:b0:f8:c7:bb:
         8f:b2:1b:59:3c:0f:1f:79:20:85:fa:f5:b2:53:42:9f:91:e1:
         08:c8:39:4b:9b:c2:46:b5:20:de:2c:ac:b5:ce:2f:9f:ea:12:
         11:ca:22:5e:ee:a8:f3:5b:7d:c8:78:fe:ef:1e:c7:9d:cc:95:
         ca:b7:a5:07:a0:c9:e3:83:c5:17:7c:a1:f8:0f:e9:4b:45:7c:
         f0:ee:e4:d3:f0:45:40:a4:30:04:1f:78:7d:4e:63:a8:0f:37:
         27:9f:bb:3d:b1:52:d1:f8:60:2c:47:f2:bc:6a:8e:0e:3c:eb:
         6a:f6:5e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org