Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa
File:                     3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa (raw, json)
Hash identifier:          8lA7ZcpImv3Ga8NTw0Mh0tbw+2I+aZAMIi//StvJMpM=
Subject key identifier:   45:7F:95:C7:C6:8C:3E:E3:AA:72:BB:80:56:83:18:CF:A4:2A:7D:48
Certificate issuer:       /CN=D0F5CFED47B5D992A24E45C4DA19047052992A15
Certificate serial:       46D52F9CD0272094046633FC57331FAE58B60A85
Authority key identifier: D0:F5:CF:ED:47:B5:D9:92:A2:4E:45:C4:DA:19:04:70:52:99:2A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0F5CFED47B5D992A24E45C4DA19047052992A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa
Signing time:             Wed 03 Apr 2024 20:20:28 +0000
ROA not before:           Wed 03 Apr 2024 20:15:28 +0000
ROA not after:            Wed 02 Apr 2025 20:20:28 +0000
asID:                     53055
IP address blocks:        177.234.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d5:2f:9c:d0:27:20:94:04:66:33:fc:57:33:1f:ae:58:b6:0a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F5CFED47B5D992A24E45C4DA19047052992A15
        Validity
            Not Before: Apr  3 20:15:28 2024 GMT
            Not After : Apr  2 20:20:28 2025 GMT
        Subject: CN=457F95C7C68C3EE3AA72BB80568318CFA42A7D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0a:e2:5a:67:a3:07:3b:ff:57:70:4a:c9:09:
                    b9:ff:d8:7e:74:30:94:f2:9d:f7:56:74:fb:8d:93:
                    7d:27:6b:44:e8:c8:2e:61:62:35:30:5a:a7:54:45:
                    e8:96:27:35:1f:57:f3:68:2b:ba:61:98:e6:4a:c7:
                    88:87:2e:b6:98:2c:4c:f5:3d:c8:62:f8:00:fb:88:
                    12:0e:fa:f8:23:fb:c4:49:df:fc:91:84:86:38:c3:
                    05:c0:a5:d2:47:42:94:1e:d0:84:80:d0:a9:77:87:
                    9a:24:b8:51:de:06:d8:bf:7e:03:ed:de:38:5f:9a:
                    b0:0c:9b:60:4a:c0:61:02:a7:40:60:99:30:3d:a8:
                    6d:e8:ba:78:f0:a0:f3:5f:5a:61:e5:43:9c:f6:62:
                    31:c0:00:08:96:fa:a3:49:20:45:2d:51:9f:f6:39:
                    e4:65:9d:e2:d7:99:07:95:1a:8d:17:10:51:d0:e4:
                    20:71:4c:44:63:b1:f1:46:bb:a5:3d:ed:41:84:34:
                    9a:68:53:4f:55:f3:6f:05:53:65:33:6a:ef:9c:1b:
                    64:7f:56:cc:61:30:98:3d:8c:db:3a:cb:ce:9d:fe:
                    f8:08:7b:e4:74:1c:98:f3:f8:b4:82:bb:75:8e:59:
                    7b:3c:de:b7:6a:ee:35:a4:a7:a8:fd:f9:c4:81:c7:
                    7e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7F:95:C7:C6:8C:3E:E3:AA:72:BB:80:56:83:18:CF:A4:2A:7D:48
            X509v3 Authority Key Identifier:
                keyid:D0:F5:CF:ED:47:B5:D9:92:A2:4E:45:C4:DA:19:04:70:52:99:2A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/D0F5CFED47B5D992A24E45C4DA19047052992A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0F5CFED47B5D992A24E45C4DA19047052992A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:2c:55:7c:c0:0a:6a:0b:d6:79:9b:50:88:18:1e:90:5b:ef:
         be:a4:f8:48:bb:7e:99:73:79:5b:86:2f:71:5d:68:99:3d:b6:
         37:2e:3a:c8:ec:81:79:49:71:eb:f4:47:ac:e0:78:4c:67:8e:
         f9:c1:46:88:d2:e6:e8:1c:62:9d:72:c0:6a:8c:1f:3d:ae:52:
         80:b3:74:0b:cf:d7:9b:53:d2:0c:5a:ee:0c:44:16:75:c3:d3:
         59:f8:ab:42:70:55:ba:10:b6:cd:fd:f1:04:a9:23:63:ac:60:
         e8:bc:ab:12:1f:19:fc:d8:87:c4:99:aa:d3:80:c6:54:76:f4:
         63:04:b0:01:43:b4:b6:61:7f:b5:51:46:0f:15:22:79:ee:b4:
         20:c8:f1:f7:54:e4:f2:9e:44:87:c1:b2:08:78:4e:66:da:88:
         56:24:20:01:5d:2d:04:41:b3:e8:31:3e:d5:c6:46:2c:83:4d:
         f4:6c:06:a7:57:ae:0c:6b:aa:b7:b3:02:28:16:0e:d0:e1:02:
         2d:90:9a:2e:5d:3e:17:9b:75:1e:33:ce:f3:c5:35:33:7e:3a:
         1c:34:71:54:5d:8b:5c:05:e9:c8:af:f4:ca:ef:ac:24:6f:1d:
         00:c9:7b:e3:60:4f:01:03:e4:b9:72:c0:8e:3e:97:ea:e7:2f:
         6b:3a:29:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org