Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3137372e36362e32382e302f32322d3234203d3e20323633363536.roa
File:                     3137372e36362e32382e302f32322d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          aMR2Al6E47McfAE6iRGhpSHmrS2GXJJFsth5cexC33k=
Subject key identifier:   B9:A2:F0:DB:DB:6D:41:D2:1A:26:35:24:E8:42:92:B0:5D:44:B0:32
Certificate issuer:       /CN=9129AD41D8674385271EFA3A05D3D27494319FC0
Certificate serial:       41E4689771E938DC5DD2145A999DA01D238EC08F
Authority key identifier: 91:29:AD:41:D8:67:43:85:27:1E:FA:3A:05:D3:D2:74:94:31:9F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9129AD41D8674385271EFA3A05D3D27494319FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3137372e36362e32382e302f32322d3234203d3e20323633363536.roa
Signing time:             Thu 12 Oct 2023 18:24:00 +0000
ROA not before:           Thu 12 Oct 2023 18:19:00 +0000
ROA not after:            Thu 10 Oct 2024 18:24:00 +0000
asID:                     263656
IP address blocks:        177.66.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e4:68:97:71:e9:38:dc:5d:d2:14:5a:99:9d:a0:1d:23:8e:c0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9129AD41D8674385271EFA3A05D3D27494319FC0
        Validity
            Not Before: Oct 12 18:19:00 2023 GMT
            Not After : Oct 10 18:24:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:c4:39:b1:41:99:94:80:d9:5f:ca:aa:bb:
                    63:ff:d9:6b:7b:22:06:fa:5f:40:50:52:b7:1f:d6:
                    5b:81:10:36:bf:45:94:e8:3c:23:ef:b9:33:9e:55:
                    a9:06:66:e6:6c:74:c8:3b:eb:87:88:31:ba:2d:43:
                    ba:40:dd:7f:72:f8:41:73:70:b8:b2:43:f9:de:76:
                    d5:52:cb:e0:e5:48:cc:29:c6:e5:04:4f:63:29:0d:
                    f1:49:64:a1:8c:d9:24:60:bb:60:48:25:2c:9d:61:
                    b8:7c:74:4f:04:70:1e:34:8b:81:bb:f8:81:0e:43:
                    eb:e1:81:be:1a:d0:a7:41:4a:3b:8f:12:02:62:9a:
                    50:96:43:0e:c3:97:1a:48:0f:22:22:81:eb:2c:f3:
                    e3:ce:62:b9:61:30:9b:0f:78:a3:e2:f3:b9:61:78:
                    3c:3e:f0:44:e1:18:73:6a:08:88:8f:29:0f:c3:62:
                    64:33:68:cd:bf:eb:d7:6a:08:ba:a5:4e:43:f6:4b:
                    3f:b3:21:1c:9c:fe:5c:32:d9:0e:03:37:fb:74:9f:
                    77:7e:96:34:5c:3e:a6:7a:0c:a2:f7:fe:71:ca:67:
                    07:5a:1d:e2:3a:82:77:4e:c7:d6:ce:82:9a:e6:ae:
                    29:ce:00:97:c6:94:54:58:61:cb:a9:68:7a:63:0d:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A2:F0:DB:DB:6D:41:D2:1A:26:35:24:E8:42:92:B0:5D:44:B0:32
            X509v3 Authority Key Identifier:
                keyid:91:29:AD:41:D8:67:43:85:27:1E:FA:3A:05:D3:D2:74:94:31:9F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9129AD41D8674385271EFA3A05D3D27494319FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9129AD41D8674385271EFA3A05D3D27494319FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3137372e36362e32382e302f32322d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:e2:12:c2:a0:40:12:97:79:e3:7d:80:6d:b9:f4:6d:1f:b4:
         19:52:c6:e5:b7:f5:07:48:83:67:c1:b7:81:35:8d:a6:ab:f7:
         d5:27:7c:9e:07:3a:80:28:78:7a:6b:a6:0f:35:d3:76:63:a0:
         02:8f:40:55:d6:6c:86:cd:7b:bf:c8:90:af:9a:16:bf:6e:ba:
         8c:9d:6b:20:ac:60:2d:f8:06:77:7e:e4:8b:e1:f4:0b:e9:82:
         f1:a4:c5:46:40:07:dc:5f:a5:70:fd:35:6b:7a:21:65:45:0d:
         31:62:2c:05:fb:4a:6b:c7:4f:da:82:48:32:33:23:39:b3:38:
         63:b2:c6:a9:a0:af:cf:c7:ed:30:bd:8a:59:ef:48:6e:ff:a0:
         0f:94:6c:e0:03:2c:4f:ef:c1:89:c1:6e:e0:61:23:f3:2c:67:
         4b:20:63:69:f2:84:e0:04:4d:f0:1b:de:77:2c:03:60:6b:cb:
         24:64:04:5c:f5:01:52:b4:c9:03:e9:5e:4e:12:9f:02:49:09:
         cf:8d:1d:d6:60:8c:01:a4:fe:ee:59:04:53:81:b3:58:31:1e:
         79:23:85:e9:03:2c:7b:1e:20:ec:03:bc:85:68:49:02:c0:12:
         f8:93:6f:82:61:d8:50:a2:f5:85:a8:46:98:64:74:be:3b:b6:
         df:5c:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org