Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e38382e302f32312d3231203d3e203238313335.roa
File:                     3137372e34362e38382e302f32312d3231203d3e203238313335.roa (raw, json)
Hash identifier:          1K+GEHT9DNDl/TeRktYFhMN70FimcrvCh8TxKKAEk5U=
Subject key identifier:   2E:0D:D5:55:EF:71:57:58:E6:D9:CA:88:B9:75:C1:CF:2B:CD:8E:DD
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       4EF59344D33C91D1ACF40C730E59C6CD4242E174
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e38382e302f32312d3231203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:10:01 +0000
ROA not before:           Wed 12 Apr 2023 11:05:01 +0000
ROA not after:            Wed 10 Apr 2024 11:10:01 +0000
asID:                     28135
IP address blocks:        177.46.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f5:93:44:d3:3c:91:d1:ac:f4:0c:73:0e:59:c6:cd:42:42:e1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:05:01 2023 GMT
            Not After : Apr 10 11:10:01 2024 GMT
        Subject: CN=2E0DD555EF715758E6D9CA88B975C1CF2BCD8EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:89:b3:c0:8e:f4:e4:d4:09:ec:e9:fa:76:c5:
                    33:0a:6e:c2:1a:5f:37:6f:cb:dc:73:9d:1f:bf:7a:
                    0b:aa:c9:c6:c8:4b:65:ba:8f:62:ca:77:19:a1:b6:
                    53:32:64:65:92:38:40:3f:ac:0a:c9:08:41:29:7f:
                    49:ac:8f:6e:ab:ae:96:22:1c:15:b0:78:c4:ce:25:
                    b2:70:1d:a8:8b:cb:f1:27:96:b9:ce:b2:a3:ea:de:
                    40:4b:5a:d8:f9:7f:72:fb:e6:98:d2:d7:10:14:fc:
                    78:e9:55:f4:33:1a:04:b1:03:15:ba:d4:5b:ff:ce:
                    fb:ed:59:c9:91:a9:a1:b5:e9:fb:b4:b6:f3:ca:48:
                    03:83:6f:e7:b8:0f:c0:56:f2:12:2b:ee:64:52:d5:
                    d0:58:a5:56:1e:13:32:54:4f:b1:04:ad:49:ef:72:
                    c8:17:68:18:ee:da:e1:f9:19:c9:95:de:f7:fe:75:
                    14:4e:33:ac:a2:14:6d:4b:b8:f8:52:a5:c0:c0:3a:
                    e1:76:cb:16:09:b8:65:7e:a4:f2:48:65:07:07:60:
                    33:af:0f:51:c5:05:18:47:64:b1:35:6a:7b:b8:48:
                    23:34:28:ca:94:d3:db:dd:db:1f:28:66:29:b7:1f:
                    b8:eb:82:3d:d1:55:db:34:16:9c:59:09:e9:3a:28:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0D:D5:55:EF:71:57:58:E6:D9:CA:88:B9:75:C1:CF:2B:CD:8E:DD
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e38382e302f32312d3231203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:ad:48:ce:e6:93:88:46:c2:74:86:c9:d7:c8:f5:11:02:43:
         57:66:ae:f2:56:a6:d7:27:76:0b:fc:9f:d8:b7:7d:a1:27:4c:
         8d:76:e8:8c:77:b9:22:c4:6a:ca:48:9a:cd:5f:4f:9a:ff:87:
         5c:b2:86:8b:ac:69:f6:03:4a:0c:43:5a:39:ab:c6:27:fc:15:
         16:5d:49:5e:c4:9f:a5:17:46:61:64:f3:02:1c:78:92:8a:44:
         c8:58:ce:8a:91:63:16:56:97:52:f9:b4:1e:d5:ca:f4:6d:78:
         a5:b5:19:d4:a1:8b:41:09:1c:50:4d:14:fb:d4:d2:3f:f3:6e:
         79:7e:41:4f:b5:a4:94:9d:14:55:28:3f:2f:99:aa:a0:99:6d:
         4d:45:d4:fa:a0:82:66:53:5e:12:71:e1:a8:bc:da:02:62:ee:
         ad:48:0d:9e:3f:e8:5d:9b:d1:0d:ae:82:a6:04:9f:c8:f5:04:
         b8:34:b6:98:e5:58:13:71:73:ec:ce:ae:ec:84:06:b7:ae:0f:
         0c:b7:2d:4a:a5:06:ef:37:77:4c:f3:58:40:a8:ee:3b:cf:1d:
         9c:03:25:2d:87:cd:09:26:cc:96:78:5d:82:56:49:eb:89:07:
         fa:09:64:c2:56:6d:56:27:c4:c5:7a:b0:fe:73:20:f4:a8:31:
         45:5a:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org