Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/0/3137372e32332e3130342e302f32322d3332203d3e203532393037.roa
File:                     3137372e32332e3130342e302f32322d3332203d3e203532393037.roa (raw, json)
Hash identifier:          jm1mD3d+IkqAjb09fV+9bVNeqI+Noa5C42vTl7yA1yI=
Subject key identifier:   98:39:BD:6D:16:2F:60:B3:BA:78:59:F6:7C:2F:54:63:3C:57:25:6D
Certificate issuer:       /CN=EAE540AC049A415FD7667C071C89E2D7422438A3
Certificate serial:       3360E782499A55EFFD7F56BA0F873762F1349B82
Authority key identifier: EA:E5:40:AC:04:9A:41:5F:D7:66:7C:07:1C:89:E2:D7:42:24:38:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAE540AC049A415FD7667C071C89E2D7422438A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/0/3137372e32332e3130342e302f32322d3332203d3e203532393037.roa
Signing time:             Thu 17 Aug 2023 22:19:45 +0000
ROA not before:           Thu 17 Aug 2023 22:14:45 +0000
ROA not after:            Thu 15 Aug 2024 22:19:45 +0000
asID:                     52907
IP address blocks:        177.23.104.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:60:e7:82:49:9a:55:ef:fd:7f:56:ba:0f:87:37:62:f1:34:9b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE540AC049A415FD7667C071C89E2D7422438A3
        Validity
            Not Before: Aug 17 22:14:45 2023 GMT
            Not After : Aug 15 22:19:45 2024 GMT
        Subject: CN=9839BD6D162F60B3BA7859F67C2F54633C57256D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:32:4b:fb:d4:51:0e:e3:ee:f5:5c:73:07:ea:
                    73:03:ec:76:a0:36:cd:cc:03:a1:b0:aa:67:af:2c:
                    96:5f:7b:b9:e0:c6:4a:4d:4a:d9:3e:72:bc:5f:a2:
                    78:07:80:b2:4e:df:cb:2b:e2:90:c6:d9:f0:7a:bf:
                    91:27:41:ef:79:41:5e:90:24:02:1e:fe:a1:90:c6:
                    40:e5:de:61:b6:cf:21:06:b8:c6:5d:a0:4f:23:94:
                    5f:54:26:fa:80:5c:13:15:66:c8:88:6b:e8:c3:12:
                    80:77:a5:f6:4c:fa:75:0e:3d:18:cc:f9:d1:ff:26:
                    0c:d4:58:6c:70:40:20:e2:73:8d:25:8e:54:f8:0c:
                    f8:58:c0:80:54:6a:9e:59:a9:3d:85:b5:80:36:e0:
                    af:d9:7c:8a:41:02:56:a8:81:38:fa:e0:b8:b0:0b:
                    71:55:aa:91:9b:f6:40:33:f6:38:20:e6:22:f8:0f:
                    fa:ac:90:97:5b:5a:70:d2:75:e3:58:a5:e1:b2:a8:
                    41:88:74:56:61:66:be:ff:1a:49:8a:03:51:ba:90:
                    72:2b:9f:49:2f:a1:e2:b7:af:f8:f4:a9:80:f5:c9:
                    62:f6:33:8b:30:f5:10:32:b8:22:3f:10:37:da:4d:
                    a5:2f:a9:d4:32:5a:ee:f9:28:58:29:f5:d6:7f:6a:
                    d0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:39:BD:6D:16:2F:60:B3:BA:78:59:F6:7C:2F:54:63:3C:57:25:6D
            X509v3 Authority Key Identifier:
                keyid:EA:E5:40:AC:04:9A:41:5F:D7:66:7C:07:1C:89:E2:D7:42:24:38:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/0/EAE540AC049A415FD7667C071C89E2D7422438A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAE540AC049A415FD7667C071C89E2D7422438A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/0/3137372e32332e3130342e302f32322d3332203d3e203532393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:af:1e:df:f7:48:4a:96:73:c8:2d:e2:27:cd:40:3c:d4:c8:
         3e:db:cc:75:80:70:b8:d7:08:28:f0:f5:89:05:8b:53:1a:1f:
         33:61:11:a1:3c:26:9d:a7:f3:c1:f4:6b:df:ac:f5:56:d8:60:
         ca:e7:ba:b5:00:17:01:5c:54:91:40:5c:ce:e8:8f:f7:ed:9e:
         81:b8:53:c6:62:35:9c:af:f6:87:4c:74:82:85:09:9a:ce:8e:
         bd:9d:8c:7f:6c:08:d4:50:17:8e:ab:e8:64:5c:1e:2a:4d:52:
         b4:c0:00:93:a2:75:1f:2e:01:8e:c9:49:02:3c:66:43:c4:f8:
         0d:ea:13:cf:4e:05:31:d8:41:89:70:24:46:99:40:25:50:5b:
         d1:95:96:fb:4d:00:b5:24:49:79:94:51:19:07:19:ff:ed:bf:
         0a:f6:f2:da:78:b7:18:c8:e7:44:7a:e9:69:c0:cd:61:a9:60:
         7c:56:14:f7:14:0b:65:a6:d7:c9:e1:0f:f2:93:10:54:f3:05:
         09:73:3c:47:06:7d:e0:62:b1:15:1a:f0:14:7d:ec:56:e5:80:
         b8:43:66:db:a7:48:9b:d5:78:da:b7:f4:be:b8:68:7b:2b:a9:
         14:78:ce:20:7a:05:7c:10:72:c8:dc:33:fc:c1:4f:2b:4c:95:
         94:ae:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org