Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa
File:                     3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          xLP8kwPj4TX4jaiei04wvY0+mYAZoog1DVAh7vgx7cA=
Subject key identifier:   CA:E0:FB:D3:48:11:D9:A2:5F:AA:E0:3F:14:90:99:AB:19:D9:1B:24
Certificate issuer:       /CN=9129AD41D8674385271EFA3A05D3D27494319FC0
Certificate serial:       4A7E6BB674F69B29AD2797A2C039D1AC971AD3CD
Authority key identifier: 91:29:AD:41:D8:67:43:85:27:1E:FA:3A:05:D3:D2:74:94:31:9F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9129AD41D8674385271EFA3A05D3D27494319FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa
Signing time:             Thu 12 Oct 2023 20:08:00 +0000
ROA not before:           Thu 12 Oct 2023 20:03:00 +0000
ROA not after:            Thu 10 Oct 2024 20:08:00 +0000
asID:                     263656
IP address blocks:        177.52.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7e:6b:b6:74:f6:9b:29:ad:27:97:a2:c0:39:d1:ac:97:1a:d3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9129AD41D8674385271EFA3A05D3D27494319FC0
        Validity
            Not Before: Oct 12 20:03:00 2023 GMT
            Not After : Oct 10 20:08:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a9:dc:54:18:06:a0:4d:07:ca:c6:39:38:41:
                    82:9d:ff:17:6f:c4:70:41:b4:1f:87:be:01:05:80:
                    24:a0:1e:7d:f1:c2:6e:d2:3b:ca:36:ec:a1:6c:e0:
                    e9:c6:84:f3:44:0f:ca:26:47:b7:71:a2:9d:2d:8e:
                    9e:32:14:60:98:f9:c4:f5:a9:5c:a2:ec:0c:e4:bc:
                    bd:96:84:c8:b1:56:f3:81:e3:74:db:f0:9e:c3:39:
                    fe:f6:f9:65:6f:3f:fe:3c:d5:11:9c:ea:b8:dd:7a:
                    7e:a9:bc:87:2b:d0:9d:c8:e3:f0:60:07:41:f5:cf:
                    e7:58:86:a0:5b:5f:d2:34:4e:71:40:a4:b5:44:8b:
                    75:e7:43:5d:60:d8:00:6e:ae:6c:bf:34:bc:de:de:
                    7f:1d:48:94:60:ce:4a:96:ca:3c:dd:03:c3:89:cb:
                    a5:82:08:5f:af:97:2f:48:48:93:80:7d:35:77:1e:
                    83:69:9c:26:8b:95:2a:0a:34:78:59:df:23:2f:90:
                    cb:8c:99:73:d2:fc:56:10:92:1e:7b:aa:c2:8b:1b:
                    30:d4:4a:d0:8a:eb:2d:4f:6e:36:88:42:3e:95:08:
                    0e:a4:19:b9:46:7e:a2:66:dd:23:5f:e6:b8:9a:ae:
                    e5:0c:29:af:83:53:d0:a9:3b:51:a9:68:f0:c4:51:
                    d0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E0:FB:D3:48:11:D9:A2:5F:AA:E0:3F:14:90:99:AB:19:D9:1B:24
            X509v3 Authority Key Identifier:
                keyid:91:29:AD:41:D8:67:43:85:27:1E:FA:3A:05:D3:D2:74:94:31:9F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9129AD41D8674385271EFA3A05D3D27494319FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9129AD41D8674385271EFA3A05D3D27494319FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:bc:53:5f:ed:38:44:a7:ec:19:51:14:98:53:55:29:61:85:
         cc:d2:64:ff:97:c6:c3:78:f8:73:91:d8:ee:e7:91:9b:c6:85:
         01:83:62:66:98:e8:45:42:cd:fe:f2:e3:82:db:76:11:94:da:
         2a:8e:e7:d2:d5:ea:07:40:7b:33:68:c7:c5:6f:52:3f:3e:71:
         02:b8:a3:d2:d1:67:66:53:f6:7e:ad:58:32:df:98:c2:88:66:
         19:1a:e8:cc:3b:e1:99:75:2e:ca:7f:d4:72:72:f0:41:69:bf:
         4c:f1:96:f1:f5:c5:98:3f:99:b4:e9:6c:f9:4a:22:bc:93:07:
         e4:13:d7:20:b2:fd:17:13:9e:60:bc:84:4d:2b:6e:3f:c5:10:
         cc:a3:24:0a:d3:70:73:ce:a9:f0:85:7e:4a:3a:84:10:b7:ff:
         6c:cf:ee:c3:e1:78:c4:9d:56:b7:ac:4e:a6:1b:68:7f:cc:0a:
         9c:f9:5b:15:02:03:d8:1d:e8:96:a8:7c:0f:a3:51:29:fc:46:
         b0:91:de:e7:02:ee:f7:8f:a3:03:5c:8c:1a:b7:3e:ce:23:94:
         30:06:9f:b1:fe:aa:6e:75:69:c7:c7:b2:df:c9:3c:0c:53:75:
         33:1d:04:4d:fa:c8:11:c2:75:f2:03:17:b4:62:43:6e:3e:c5:
         a0:80:c8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org