Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/3137372e3232322e3137362e302f32302d3234203d3e20323633333930.roa
File:                     3137372e3232322e3137362e302f32302d3234203d3e20323633333930.roa (raw, json)
Hash identifier:          gn0dvp8VWtLtjRNXMObsEzv+E/J9tZIXAAxy7yjBH4M=
Subject key identifier:   90:3F:A6:79:DB:F1:DB:D7:C9:65:5E:73:C9:E9:DC:03:8D:D7:63:EF
Certificate issuer:       /CN=13A5EAF78E79BD43FD7B4074AA688398B5272B37
Certificate serial:       1ADF476036FCF4DD05D50B0AD1FE2B0DF6452034
Authority key identifier: 13:A5:EA:F7:8E:79:BD:43:FD:7B:40:74:AA:68:83:98:B5:27:2B:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13A5EAF78E79BD43FD7B4074AA688398B5272B37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/3137372e3232322e3137362e302f32302d3234203d3e20323633333930.roa
Signing time:             Fri 15 Dec 2023 16:00:00 +0000
ROA not before:           Fri 15 Dec 2023 15:55:00 +0000
ROA not after:            Fri 13 Dec 2024 16:00:00 +0000
asID:                     263390
IP address blocks:        177.222.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:df:47:60:36:fc:f4:dd:05:d5:0b:0a:d1:fe:2b:0d:f6:45:20:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A5EAF78E79BD43FD7B4074AA688398B5272B37
        Validity
            Not Before: Dec 15 15:55:00 2023 GMT
            Not After : Dec 13 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:30:a2:5a:49:6e:a5:e0:92:6b:c5:22:92:b4:
                    f7:ef:de:5f:49:08:11:69:57:f5:59:7b:c3:35:3d:
                    bd:95:96:64:f8:8a:34:de:a9:b7:38:1c:0e:97:64:
                    e0:50:71:84:92:0b:2e:fb:fe:23:b1:97:fe:8b:ad:
                    a1:32:d6:fd:a3:f3:e4:75:e7:61:c3:c6:3a:26:64:
                    34:65:bd:7b:d7:d6:46:00:80:78:e3:c7:a7:73:4e:
                    f5:8b:78:d3:ff:a0:e9:f9:83:c1:b2:6e:31:27:da:
                    ac:2c:99:6c:06:38:4e:27:0f:ae:33:28:e0:cf:dd:
                    25:f6:a5:56:ae:da:dc:42:f7:90:40:b4:f5:b6:d6:
                    73:19:8a:e8:a7:a2:39:65:5f:29:dc:f6:8b:b4:40:
                    4c:f9:6f:25:5c:7f:55:b7:f1:97:53:9b:dc:1d:f8:
                    0b:f1:78:7b:c8:ad:5b:c6:6f:a5:5c:de:a1:60:85:
                    3a:90:42:b3:51:45:5e:fe:59:4d:76:fb:6d:13:61:
                    ca:68:d1:c2:01:58:57:e1:34:4a:38:b2:fe:17:ba:
                    89:06:12:c4:18:b3:b3:3c:c5:fd:42:c8:7f:e1:6d:
                    a6:ae:85:de:2e:17:26:00:0f:cf:fb:ee:ca:e7:de:
                    76:f0:15:dd:21:c9:b1:42:22:3b:d1:86:03:58:3b:
                    41:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3F:A6:79:DB:F1:DB:D7:C9:65:5E:73:C9:E9:DC:03:8D:D7:63:EF
            X509v3 Authority Key Identifier:
                keyid:13:A5:EA:F7:8E:79:BD:43:FD:7B:40:74:AA:68:83:98:B5:27:2B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/13A5EAF78E79BD43FD7B4074AA688398B5272B37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13A5EAF78E79BD43FD7B4074AA688398B5272B37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/3137372e3232322e3137362e302f32302d3234203d3e20323633333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:7b:ab:0b:0c:d3:fd:6a:e5:7f:17:f1:7c:af:45:df:1a:43:
         c9:c5:cf:46:04:fa:31:89:63:04:2d:29:e1:5b:5f:c6:96:81:
         fb:71:fa:aa:19:16:8b:d7:b6:0d:3f:3c:17:22:cc:7e:d2:fa:
         50:b9:ca:46:7e:82:b4:9b:50:1f:97:09:1c:23:d2:8f:b9:2a:
         02:a9:06:25:34:43:5a:31:61:44:6a:a3:54:ed:1f:c5:9d:a0:
         f0:bd:8f:2b:e0:da:a2:34:2f:7b:c8:a8:43:3c:2f:70:f8:48:
         24:07:9e:de:e0:99:97:19:78:b9:b8:00:a4:14:4f:bf:c0:4a:
         c1:33:a1:8e:aa:b1:7b:37:01:90:be:5e:91:11:91:a3:94:f0:
         4d:8a:28:ca:34:c1:21:e3:5d:6f:38:c6:05:87:67:37:92:e5:
         95:e3:d9:6d:df:b4:a9:bd:04:b2:4f:2f:8f:11:04:de:e1:0c:
         c2:6c:d3:0e:c8:5b:b4:f0:4a:02:7f:ab:61:53:ce:04:08:47:
         a5:0c:30:35:f5:c0:7d:29:f4:40:b1:9b:7c:6c:d3:a5:2c:77:
         eb:40:71:37:00:76:a3:68:f2:21:f3:30:8d:c6:61:5f:12:4d:
         39:b2:fd:ae:6e:e4:bc:c5:0a:0f:7f:53:29:e3:68:98:41:9c:
         56:19:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org