Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233342e302f32332d3233203d3e20323632363137.roa
File:                     3137372e38352e3233342e302f32332d3233203d3e20323632363137.roa (raw, json)
Hash identifier:          3dLCZ88YOVmhoObNguz4FtJkcj7gBdW+s3jEBQw+RNo=
Subject key identifier:   EF:DB:79:9C:B0:D4:D3:36:C3:9A:9E:41:57:D2:CC:0E:A8:F1:AD:DF
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       660581EFE705612D8B519801F0C95B6C4DF18E5F
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233342e302f32332d3233203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:08 +0000
ROA not before:           Thu 03 Aug 2023 13:04:08 +0000
ROA not after:            Thu 01 Aug 2024 13:09:08 +0000
asID:                     262617
IP address blocks:        177.85.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:05:81:ef:e7:05:61:2d:8b:51:98:01:f0:c9:5b:6c:4d:f1:8e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:08 2023 GMT
            Not After : Aug  1 13:09:08 2024 GMT
        Subject: CN=EFDB799CB0D4D336C39A9E4157D2CC0EA8F1ADDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:4a:aa:73:29:b4:b7:18:8e:1f:2b:7f:59:
                    12:ea:17:52:60:99:77:e3:3e:fa:de:80:50:69:6e:
                    0a:2a:77:72:40:ae:76:9d:c5:f7:e9:43:97:cb:99:
                    44:ee:e1:c1:b7:9e:2d:fd:d1:8f:56:66:e5:57:6d:
                    6d:84:e3:dc:ef:c8:48:5e:36:9d:0a:61:33:c0:e5:
                    4e:5a:79:2b:06:ce:34:92:93:1e:5f:bd:39:ff:a8:
                    69:e1:f1:e1:38:be:5b:c9:e6:aa:e1:dd:58:1f:da:
                    7c:89:44:5d:77:65:8a:fc:8f:d1:f4:d8:4e:c2:a7:
                    f7:3d:06:9a:22:d8:4e:9b:26:21:02:e0:8f:de:f4:
                    ff:62:14:c8:23:f7:8f:f1:32:8a:4b:2d:a1:d2:65:
                    d4:a1:1b:34:a8:10:5e:4f:1e:d4:3f:e0:a4:20:cc:
                    8c:52:34:a2:4b:e6:4a:eb:6a:6e:57:64:53:9f:87:
                    05:6d:ea:90:3a:b8:49:c8:bf:0c:4a:40:d2:8a:85:
                    98:56:94:85:cb:06:33:4a:1e:85:40:ac:b6:9d:41:
                    36:5d:4f:b2:31:24:a9:c5:42:9d:92:d8:11:56:74:
                    d1:b2:ee:f9:4d:f5:1d:db:ff:0a:3d:28:9f:a0:77:
                    29:3e:37:a0:e8:ae:b4:cb:c4:a1:8a:35:67:62:ca:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DB:79:9C:B0:D4:D3:36:C3:9A:9E:41:57:D2:CC:0E:A8:F1:AD:DF
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233342e302f32332d3233203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:2d:21:fa:70:2c:ef:4d:0c:3e:75:0d:f5:0c:67:53:ea:27:
         f7:0d:99:03:7b:41:19:be:77:8d:d8:f9:7c:5c:79:46:a0:87:
         ea:2b:5c:79:d2:b7:33:02:69:4c:da:b4:08:d6:d5:a9:e9:4f:
         bf:1c:11:c1:98:3f:e8:54:b0:b9:c2:2d:a0:15:33:db:4b:f5:
         d8:ce:cb:34:4d:5d:80:f9:fb:66:2a:d3:bf:3e:e6:73:e3:54:
         74:f0:29:c1:9d:c7:8b:fa:68:ff:83:78:da:40:9d:73:41:b8:
         c2:b2:89:2f:fa:3c:c4:12:ad:85:65:17:db:ff:02:9b:33:e6:
         58:37:7b:a0:18:4b:a0:07:cd:53:19:18:d9:c3:04:8f:bc:c9:
         45:7c:17:7d:75:fa:31:10:27:1a:e8:8b:e5:e2:c0:e1:7a:de:
         75:9d:d4:69:55:9e:16:05:7c:ac:49:9a:ab:74:ed:55:24:15:
         ce:22:3f:c8:9d:f5:dd:bd:69:e8:bb:b4:39:d0:e6:bc:35:bd:
         c7:9c:7b:98:9b:69:8e:f3:53:34:9d:9d:12:41:28:b3:38:4f:
         fa:2d:0e:d3:a8:67:ba:9c:78:dc:81:71:ff:16:55:80:e9:23:
         ef:99:5f:c3:32:42:ba:3a:e6:45:15:fe:62:6e:8e:66:dd:45:
         01:6c:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org