Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/3137372e3139302e39362e302f32302d3234203d3e203232333536.roa
File:                     3137372e3139302e39362e302f32302d3234203d3e203232333536.roa (raw, json)
Hash identifier:          qkEcR10Nc9rarPp14G2EZ1H39aywKUK++xmDNI3nMaw=
Subject key identifier:   4D:4E:91:06:9B:07:5C:4C:D3:BA:35:DC:26:27:95:21:DC:22:30:9D
Certificate issuer:       /CN=CF5DDC6846F108B3778C38774DB09DDC03C92903
Certificate serial:       216D6DE18E145A169B3854BD8139BC9FB589ECA7
Authority key identifier: CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/3137372e3139302e39362e302f32302d3234203d3e203232333536.roa
Signing time:             Wed 03 Apr 2024 18:31:40 +0000
ROA not before:           Wed 03 Apr 2024 18:26:40 +0000
ROA not after:            Wed 02 Apr 2025 18:31:40 +0000
asID:                     22356
IP address blocks:        177.190.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6d:6d:e1:8e:14:5a:16:9b:38:54:bd:81:39:bc:9f:b5:89:ec:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5DDC6846F108B3778C38774DB09DDC03C92903
        Validity
            Not Before: Apr  3 18:26:40 2024 GMT
            Not After : Apr  2 18:31:40 2025 GMT
        Subject: CN=4D4E91069B075C4CD3BA35DC26279521DC22309D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:d8:52:15:36:2b:ee:7b:c0:12:7e:d6:68:
                    bd:99:7b:c5:b8:f0:4c:28:01:6d:ba:0c:39:4f:24:
                    ad:9b:20:7e:12:1f:6b:bd:59:39:13:31:92:de:f3:
                    22:30:b2:98:93:2d:04:2b:8b:89:aa:e8:f2:9d:8e:
                    a2:91:b8:5d:89:57:68:52:14:58:1b:09:e8:cd:f1:
                    1f:71:af:4d:4b:29:08:7d:52:81:de:0c:1c:ff:b5:
                    9b:ab:b7:1b:25:63:a1:c2:77:0f:c0:89:26:36:31:
                    11:76:58:85:87:b0:13:67:08:20:1b:2d:40:04:09:
                    57:03:27:00:40:33:a3:7f:a7:37:cd:d7:50:91:8d:
                    07:b6:e9:00:e1:95:52:c5:d7:05:6d:72:4a:45:a5:
                    d0:56:36:65:9c:e7:aa:ad:00:32:f1:d8:21:3f:35:
                    aa:26:d2:4e:8e:6f:9b:61:64:f2:9d:5c:e7:55:99:
                    03:8d:82:8c:0b:e1:84:6a:67:c7:7e:f4:f9:40:bd:
                    24:8c:ce:0d:f8:ee:25:44:8e:b3:ad:cb:e6:b2:72:
                    40:98:f9:23:72:bf:a4:84:b2:6b:b2:80:35:42:ea:
                    9e:25:37:91:de:52:17:1b:f0:07:d4:0d:52:10:ba:
                    c6:da:2b:57:28:e1:d1:15:97:71:3c:63:67:a4:e2:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4E:91:06:9B:07:5C:4C:D3:BA:35:DC:26:27:95:21:DC:22:30:9D
            X509v3 Authority Key Identifier:
                keyid:CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/3137372e3139302e39362e302f32302d3234203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:18:14:1d:08:12:ec:6f:d8:bb:ae:64:91:4f:9e:a0:64:84:
         9a:3e:ab:ea:ce:a1:8b:12:f2:99:ab:00:de:15:a0:b6:03:77:
         b0:20:0b:4c:60:71:73:2e:e5:80:e1:a2:0b:1a:04:69:02:ae:
         d2:24:f4:60:c6:32:4a:21:b1:76:98:49:4f:63:69:cf:b2:84:
         b5:04:46:8a:70:66:61:ef:a1:e3:00:af:6c:00:7e:42:dd:ed:
         36:bc:56:b2:a9:b9:bf:2e:87:18:8f:57:ad:cf:f6:5c:95:9b:
         88:75:cc:e3:e8:ec:a9:ae:c1:18:ff:f5:68:3a:5d:36:aa:ce:
         49:07:20:4c:c5:96:30:b6:bc:8f:c3:02:7f:59:56:0f:35:ae:
         3e:81:74:e1:d8:9f:35:ee:3c:44:e9:89:bb:8c:a6:98:1d:5a:
         1c:39:7f:02:0e:7e:23:48:63:6b:ce:3e:2c:95:e3:c9:ea:d9:
         07:4a:cc:34:f4:fd:71:4a:c3:47:29:eb:68:11:4d:89:60:9d:
         68:33:dc:a5:eb:78:48:79:58:bb:cd:27:49:37:b9:61:2b:a4:
         1d:a9:1e:ce:df:ae:c4:c2:cb:92:44:0c:be:e3:31:5c:9a:b7:
         7d:b6:02:0e:d2:5c:18:5b:bb:1f:06:73:3a:20:04:df:ca:a3:
         ce:98:b5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:58:23 2024 by rpki-client on console-ams.rpki-client.org