Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/owdAy1uGb5xBtSUp5jP2T5T6nipmxH2j3QJFiaEyz3x/0/3137372e31302e3132342e302f32322d3232203d3e203532393138.roa
File:                     3137372e31302e3132342e302f32322d3232203d3e203532393138.roa (raw, json)
Hash identifier:          waShJ0UvwdXG8Z0Cq/cZazq9aM6qPDbHfptg6kJZeV4=
Subject key identifier:   37:16:42:B0:6D:F3:51:76:22:93:96:1B:B6:CB:DB:0C:DF:96:69:F2
Certificate issuer:       /CN=4A0559F9CE3145CEAD352814018B1C85517828E5
Certificate serial:       747A8F5D7C3FC3440A82F91FD5B67565075AFCE5
Authority key identifier: 4A:05:59:F9:CE:31:45:CE:AD:35:28:14:01:8B:1C:85:51:78:28:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0559F9CE3145CEAD352814018B1C85517828E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/owdAy1uGb5xBtSUp5jP2T5T6nipmxH2j3QJFiaEyz3x/0/3137372e31302e3132342e302f32322d3232203d3e203532393138.roa
Signing time:             Tue 10 Oct 2023 22:13:35 +0000
ROA not before:           Tue 10 Oct 2023 22:08:35 +0000
ROA not after:            Tue 08 Oct 2024 22:13:35 +0000
asID:                     52918
IP address blocks:        177.10.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7a:8f:5d:7c:3f:c3:44:0a:82:f9:1f:d5:b6:75:65:07:5a:fc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A0559F9CE3145CEAD352814018B1C85517828E5
        Validity
            Not Before: Oct 10 22:08:35 2023 GMT
            Not After : Oct  8 22:13:35 2024 GMT
        Subject: CN=371642B06DF351762293961BB6CBDB0CDF9669F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:04:5d:30:19:35:d1:f2:70:0e:a5:60:90:8a:
                    4e:20:0c:b2:4c:4c:8e:6a:e3:7e:a7:c9:89:9e:29:
                    6b:fb:38:39:58:46:e5:04:b6:82:3b:c2:d3:75:83:
                    ed:49:a6:da:00:de:07:c8:6e:01:20:41:9d:41:6c:
                    53:e9:f2:21:dc:e1:9f:5b:6d:88:8c:ec:3a:07:05:
                    8d:a6:28:26:c1:96:58:a9:b0:fc:10:bb:9e:9f:f2:
                    cf:34:15:0e:63:77:52:93:1f:19:01:df:94:f9:3a:
                    fa:fa:3a:12:57:2a:78:6f:03:df:fa:5d:50:1f:04:
                    5f:f4:52:10:9f:69:82:f0:3c:c3:9b:19:0c:39:79:
                    07:9a:23:35:5d:96:16:80:a3:98:80:3a:e4:1e:4e:
                    e8:5a:24:68:61:ee:99:16:b8:75:8e:d3:d5:7f:92:
                    bb:7c:f3:b6:cb:0d:b7:33:23:92:b6:fd:22:31:7c:
                    31:f7:a9:51:a3:41:cd:0e:1f:27:4e:f6:61:84:52:
                    fc:4d:89:a6:88:a6:7e:f7:db:1e:4c:c5:52:b4:f3:
                    bd:c7:f2:26:39:3c:e1:62:c1:b4:d9:f5:0f:a9:eb:
                    db:c6:50:24:bc:1d:1c:c2:96:e3:22:93:89:b8:b4:
                    6a:c5:fc:dc:5e:cf:1c:34:34:bc:d7:01:67:9a:a7:
                    70:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:16:42:B0:6D:F3:51:76:22:93:96:1B:B6:CB:DB:0C:DF:96:69:F2
            X509v3 Authority Key Identifier:
                keyid:4A:05:59:F9:CE:31:45:CE:AD:35:28:14:01:8B:1C:85:51:78:28:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/owdAy1uGb5xBtSUp5jP2T5T6nipmxH2j3QJFiaEyz3x/0/4A0559F9CE3145CEAD352814018B1C85517828E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0559F9CE3145CEAD352814018B1C85517828E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/owdAy1uGb5xBtSUp5jP2T5T6nipmxH2j3QJFiaEyz3x/0/3137372e31302e3132342e302f32322d3232203d3e203532393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:ba:fb:96:fb:9b:3b:73:04:14:25:78:9a:6c:c8:4f:dd:4b:
         44:df:cb:1a:48:6c:c6:b8:2e:63:97:fc:13:4a:11:d4:f6:5c:
         51:a4:58:95:0a:5d:0d:23:53:0b:6b:15:b9:8e:3d:e3:e5:d8:
         ee:3c:65:83:ea:41:15:9b:9b:f0:4d:91:4b:08:a9:2f:30:d0:
         f7:d8:e6:3b:df:cd:0c:bf:33:71:81:0b:4a:75:b2:dc:b4:d5:
         2e:e0:a4:29:dc:e8:61:c9:78:65:4c:19:39:ea:e7:fa:56:c5:
         79:e1:3c:3b:30:c5:84:46:c6:cd:47:3f:85:16:35:7e:dc:c6:
         01:b8:da:37:07:11:6e:56:e1:aa:0e:2d:4d:00:33:65:6d:ac:
         e5:97:02:ad:fd:88:93:c6:21:da:43:bd:38:ba:f4:55:bf:c8:
         4b:cf:ee:8e:df:2a:a7:df:03:e5:0c:20:20:27:74:7e:3d:73:
         bf:fe:4c:63:f9:b8:d7:9e:0e:e9:bf:47:59:e4:a4:3c:25:3d:
         8d:66:d0:58:74:87:f2:6c:51:30:14:01:34:e4:0c:ae:fa:6a:
         96:c5:86:d7:4d:e1:a5:af:9d:de:58:6e:f1:d1:79:2a:02:7e:
         c4:b6:9b:a8:cf:3f:c0:c1:bd:67:d5:c3:be:67:c7:a8:bd:53:
         94:20:07:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org