Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34332e302f32342d3234203d3e20323633303338.roa
File:                     3137372e32332e34332e302f32342d3234203d3e20323633303338.roa (raw, json)
Hash identifier:          DwpnMt6lyfNbPEqYByKicweqpGTH6yCx42Z0XQmBnho=
Subject key identifier:   9A:04:AB:34:EC:26:D0:C0:42:D5:C0:34:12:B4:73:D1:4B:33:94:86
Certificate issuer:       /CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
Certificate serial:       23176403410C2F385C4DCD2E85B4B8AC92BCA3D7
Authority key identifier: D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34332e302f32342d3234203d3e20323633303338.roa
Signing time:             Mon 26 Feb 2024 13:57:56 +0000
ROA not before:           Mon 26 Feb 2024 13:52:56 +0000
ROA not after:            Mon 24 Feb 2025 13:57:56 +0000
asID:                     263038
IP address blocks:        177.23.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:17:64:03:41:0c:2f:38:5c:4d:cd:2e:85:b4:b8:ac:92:bc:a3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A
        Validity
            Not Before: Feb 26 13:52:56 2024 GMT
            Not After : Feb 24 13:57:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:c4:f2:27:4b:ac:a2:63:47:1c:06:40:4a:
                    c9:dd:06:d3:6b:f2:b9:f6:9e:2d:8d:2f:82:a8:b4:
                    32:a0:66:ac:b6:04:ec:d8:55:ff:24:f0:16:8f:aa:
                    80:c4:dd:ac:59:d3:a3:8e:f7:93:62:87:d6:9d:36:
                    4c:8a:dc:7d:9f:0b:00:16:2e:93:50:28:f0:43:c9:
                    cd:66:06:47:66:a2:a9:4f:43:32:77:f7:68:79:0e:
                    57:43:93:d6:1c:f2:98:6b:9a:d9:bb:27:2c:b7:f6:
                    fa:1d:dc:da:f3:19:c0:77:ea:bc:c1:e1:df:ba:95:
                    ce:4f:8c:1b:d1:b9:a9:e2:1c:c2:79:df:e9:20:3f:
                    fe:0e:13:36:70:2c:4e:63:63:6d:45:61:13:f2:95:
                    01:71:85:a4:17:ac:ab:02:3b:3a:31:f4:ba:5f:f8:
                    09:b4:5e:fc:a7:c3:79:30:d8:18:00:44:34:1e:95:
                    35:19:88:4d:bd:a6:c0:c6:e8:f1:f7:a0:01:50:64:
                    70:4e:d5:97:07:5f:d4:0a:66:5e:bc:a7:72:59:8b:
                    fa:59:2f:f3:2d:3f:f4:f5:e0:e1:4e:e1:7b:f1:e7:
                    f6:b4:34:9b:0d:16:5b:16:b7:3f:c1:39:f3:19:ee:
                    d5:2e:33:c0:26:ce:24:3b:10:82:80:71:b2:7b:20:
                    1a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:04:AB:34:EC:26:D0:C0:42:D5:C0:34:12:B4:73:D1:4B:33:94:86
            X509v3 Authority Key Identifier:
                keyid:D2:4F:0F:B8:CC:C9:12:9B:5E:E6:F1:E7:DF:81:84:CC:34:C4:2C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D24F0FB8CCC9129B5EE6F1E7DF8184CC34C42C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34332e302f32342d3234203d3e20323633303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:19:e6:40:74:b2:ff:29:e6:29:27:b2:13:5c:1a:a1:3e:b1:
         db:c4:f8:0b:d0:d4:16:fe:5f:d1:d1:15:95:79:a4:5b:b1:9f:
         b0:38:21:e1:7c:d2:dd:6f:d7:56:d3:d8:88:4d:34:6a:af:de:
         f3:d1:0d:68:35:0f:28:04:e8:3c:e1:00:0b:90:6f:c7:20:c2:
         01:e4:8a:c7:c1:2d:74:f0:ab:01:f9:e8:58:39:ff:07:c3:e0:
         73:64:22:18:45:ec:68:43:e8:ba:3c:2c:15:a3:1c:54:8f:09:
         a2:6e:73:7c:43:f0:3b:cf:b9:a1:2d:97:ec:de:18:b3:b2:b7:
         91:fa:b3:4a:47:31:df:d7:ff:7a:20:a4:15:11:59:51:70:6c:
         9a:ad:d0:c6:ce:11:7f:de:60:89:20:70:b4:bc:52:a3:48:04:
         f9:9f:0a:10:6f:76:c9:cc:25:36:60:b8:f7:25:65:99:08:bd:
         ff:ac:0d:66:d4:1d:d6:c5:71:d0:e6:33:55:63:85:76:fa:56:
         9f:66:fa:5d:21:36:b3:cc:0c:53:00:9c:82:dc:6b:55:f8:41:
         f7:57:0f:9b:a2:91:40:77:d0:e7:5e:6e:fe:04:68:6b:56:c2:
         4d:8c:69:83:89:1e:1e:e8:44:af:c8:59:ca:c0:b4:43:35:b6:
         51:7a:51:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org