Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa
File:                     3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          Q0qbIcbWv3BMtgkE6JPekjZiFBhMk6onReqmOVzWCaA=
Subject key identifier:   C2:DF:8A:4E:6F:C0:0D:70:84:69:86:EA:A4:F8:79:67:E2:11:D6:F2
Certificate issuer:       /CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
Certificate serial:       010A8DD6CBFFC6B862EF53C4E1C73370892CDAB7
Authority key identifier: 1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa
Signing time:             Mon 20 May 2024 13:12:11 +0000
ROA not before:           Mon 20 May 2024 13:07:11 +0000
ROA not after:            Mon 19 May 2025 13:12:11 +0000
asID:                     262272
IP address blocks:        177.21.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0a:8d:d6:cb:ff:c6:b8:62:ef:53:c4:e1:c7:33:70:89:2c:da:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
        Validity
            Not Before: May 20 13:07:11 2024 GMT
            Not After : May 19 13:12:11 2025 GMT
        Subject: CN=C2DF8A4E6FC00D70846986EAA4F87967E211D6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:59:91:d4:91:3e:97:4b:1d:1d:9f:3b:dd:24:
                    b1:78:0f:db:c1:b4:a7:df:a5:2b:b7:67:f6:cf:81:
                    7e:97:2f:41:85:8a:c6:2d:ac:bc:e6:50:cb:31:64:
                    9f:ad:36:c7:b9:c6:2a:ff:45:16:da:6d:8b:21:00:
                    3e:28:ad:e3:8a:ae:d2:3e:fc:e7:12:26:43:f8:f9:
                    1b:b4:a1:1c:05:a7:41:2d:bc:31:df:e9:7f:c7:76:
                    f9:7d:d3:2e:8f:c3:36:91:16:43:e7:7f:68:ac:34:
                    10:2d:d7:bf:77:14:ae:04:d2:4c:56:69:26:8d:3b:
                    da:ee:49:3e:ee:fa:6a:58:e6:da:1c:97:19:bf:3e:
                    80:3a:bc:85:4e:e4:e0:0d:09:95:3d:80:36:2e:ab:
                    2b:3e:87:bd:10:c3:df:c2:38:42:6e:c7:99:26:b8:
                    01:bf:19:2c:3a:1b:da:5e:4f:3e:5d:a6:1f:11:1c:
                    14:70:82:5b:eb:1a:1a:1b:96:27:01:a3:e9:3d:0c:
                    1d:77:0b:d5:a7:63:07:f1:48:30:31:eb:e3:28:98:
                    29:3a:e0:7f:f8:f2:e8:41:cd:97:63:aa:14:c0:b2:
                    8b:74:a6:78:30:f3:3a:1f:83:c0:ef:93:6a:9f:d0:
                    66:c9:74:fb:b0:6a:c3:83:43:f6:10:81:8b:0f:32:
                    7b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DF:8A:4E:6F:C0:0D:70:84:69:86:EA:A4:F8:79:67:E2:11:D6:F2
            X509v3 Authority Key Identifier:
                keyid:1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:68:76:84:b2:2a:1b:e5:4a:ec:16:a6:3f:9c:b0:70:38:06:
         e8:61:ec:e3:68:22:38:2a:aa:f5:57:ae:dc:c8:24:49:b8:49:
         fe:eb:37:bb:f9:b9:08:cf:e8:45:59:09:97:b6:7b:70:0b:bc:
         d1:51:ae:f7:30:80:be:31:0c:d0:85:73:05:2c:a6:4e:e6:16:
         99:a7:f8:fe:ed:ca:f9:29:18:20:a9:a9:ba:5a:dd:f7:b4:0b:
         69:93:6c:04:e6:50:eb:3e:ad:70:7c:ec:31:f0:a6:31:95:d2:
         f9:c0:eb:97:f2:6e:88:5d:ec:4a:a1:cf:45:c5:1d:40:96:c7:
         b8:fc:f7:0b:93:11:36:96:05:51:a8:37:59:7b:f7:82:21:68:
         88:29:59:05:4d:45:31:7d:b1:13:87:47:a9:ea:7d:80:d6:13:
         e1:bf:c0:ce:96:7e:f2:df:2a:53:92:6f:dc:2c:10:a5:62:db:
         d1:90:fc:4f:3a:db:22:6f:d3:79:64:a7:93:94:2f:16:79:69:
         5d:34:30:7c:1d:f7:f3:96:02:c0:39:a9:69:9f:4b:4d:4d:7d:
         82:4c:f4:ab:6d:d0:cb:a6:d4:93:ce:41:8d:02:1e:8b:f8:20:
         98:a7:af:ac:18:37:19:0d:df:c2:27:bc:85:3a:4e:87:15:4d:
         a4:f2:5d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org