Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/3137372e3132362e3234302e302f32302d3230203d3e20323632333633.roa
File:                     3137372e3132362e3234302e302f32302d3230203d3e20323632333633.roa (raw, json)
Hash identifier:          zkuDQZNs568+L9wxzDRNzMO8Z5ItyErAz7e+NlCO6JY=
Subject key identifier:   73:24:36:C6:2A:74:7A:50:AB:EE:B2:53:1A:C5:4A:36:DC:EE:F2:FF
Certificate issuer:       /CN=9FAE53C7387E64BBF2B2968741FBF22495656806
Certificate serial:       33879A504949718823C357743A2B2480B8B7CF5E
Authority key identifier: 9F:AE:53:C7:38:7E:64:BB:F2:B2:96:87:41:FB:F2:24:95:65:68:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FAE53C7387E64BBF2B2968741FBF22495656806.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/3137372e3132362e3234302e302f32302d3230203d3e20323632333633.roa
Signing time:             Wed 23 Jun 2021 19:08:49 +0000
ROA not before:           Wed 23 Jun 2021 19:03:49 +0000
ROA not after:            Wed 22 Jun 2022 19:08:49 +0000
asID:                     262363
IP address blocks:        177.126.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:87:9a:50:49:49:71:88:23:c3:57:74:3a:2b:24:80:b8:b7:cf:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FAE53C7387E64BBF2B2968741FBF22495656806
        Validity
            Not Before: Jun 23 19:03:49 2021 GMT
            Not After : Jun 22 19:08:49 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:f5:40:6d:ce:3d:a0:20:df:0e:25:05:9d:
                    4e:fd:6b:ac:7b:78:ae:8f:66:76:2b:a0:91:45:36:
                    62:cd:7c:ca:d5:a8:5f:52:04:4d:8a:41:b1:50:bf:
                    f4:c7:ea:ec:b3:ab:5a:61:4a:82:22:c2:63:b9:bc:
                    c7:5b:03:51:dc:99:b7:ec:cf:bc:50:e4:78:ed:72:
                    0e:28:99:01:00:d1:14:21:2a:2d:be:c7:f2:b3:63:
                    0f:2e:6f:be:2e:56:89:ef:05:d6:d0:b7:48:42:05:
                    2f:23:c3:51:2e:ef:40:a0:45:28:d9:c4:37:92:e3:
                    83:85:fc:72:5a:19:4e:68:bd:58:26:34:30:b3:8f:
                    bd:57:a9:92:b9:4e:8f:89:d5:75:5b:57:fa:1a:72:
                    b0:92:59:9e:b6:e9:bf:5a:07:e0:85:00:2d:35:3f:
                    8b:30:9c:2a:1a:f1:f8:c4:f2:00:09:ad:cd:97:82:
                    d1:9a:4d:3c:b8:55:5e:3d:c2:d3:14:5f:67:8a:29:
                    8e:f1:a8:75:a3:3a:f8:e0:2f:e2:59:25:08:aa:13:
                    54:c3:69:a5:9c:cc:76:28:f7:3e:b3:69:6f:3d:44:
                    1d:92:3e:c9:a4:5f:a5:75:da:8a:53:9a:a0:50:00:
                    41:b7:84:9f:84:df:d7:a9:94:26:ae:63:43:f9:b2:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:24:36:C6:2A:74:7A:50:AB:EE:B2:53:1A:C5:4A:36:DC:EE:F2:FF
            X509v3 Authority Key Identifier:
                keyid:9F:AE:53:C7:38:7E:64:BB:F2:B2:96:87:41:FB:F2:24:95:65:68:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/9FAE53C7387E64BBF2B2968741FBF22495656806.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FAE53C7387E64BBF2B2968741FBF22495656806.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/3137372e3132362e3234302e302f32302d3230203d3e20323632333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:ba:50:5f:8c:ed:1a:54:12:d5:5f:04:f4:ea:d0:1f:b2:ff:
         91:4b:23:17:17:c9:e7:55:bd:eb:01:c2:6e:ab:1e:8d:2d:84:
         20:6f:52:0f:35:2d:bb:23:26:6d:0e:d8:fa:b4:3f:10:6d:44:
         56:e1:9d:4d:d6:b0:5b:17:de:28:10:0a:39:e3:85:f8:8e:58:
         a3:45:e3:7f:8c:28:22:ca:28:50:1f:8a:6b:98:7d:4e:53:f4:
         3c:7f:c9:f4:c5:c1:53:ce:f2:71:62:4d:17:91:7f:89:60:b4:
         dd:8b:74:d5:91:60:ab:37:d1:fd:48:7b:43:82:47:1e:9b:23:
         c5:c6:34:c4:7f:0c:df:1c:ff:1f:c5:76:d3:30:53:97:6d:f2:
         bd:26:22:ab:8c:bf:63:f7:07:7d:5c:1d:ab:73:1c:97:fb:5e:
         70:d0:94:41:ef:ef:ce:7b:fb:ac:81:af:96:5d:3b:c1:e4:6c:
         af:80:29:54:e3:52:10:6d:6d:6a:ba:49:0d:0c:5d:5c:66:ed:
         cc:bc:27:3f:7c:f3:93:0a:2c:b4:48:68:f6:71:80:81:ab:e6:
         c3:85:03:d5:13:6f:e8:73:d6:74:84:d1:08:d3:9a:dd:90:da:
         fb:4a:30:10:fe:fc:01:8c:a6:d8:15:f1:78:15:76:02:11:42:
         21:0b:86:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org