Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233342e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38352e3233342e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          QSnENjMD2fGES8tSpBUivFe3JS2ufuEML7Q3ks94j+M=
Subject key identifier:   F4:A2:BA:66:CB:12:F2:0D:33:7A:DB:09:2C:90:40:06:DA:67:8D:81
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       30270600CD9F60F3ECCA96314BB7505B73D2488A
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233342e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:15 +0000
ROA not before:           Thu 03 Aug 2023 13:04:15 +0000
ROA not after:            Thu 01 Aug 2024 13:09:15 +0000
asID:                     262617
IP address blocks:        177.85.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:27:06:00:cd:9f:60:f3:ec:ca:96:31:4b:b7:50:5b:73:d2:48:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:15 2023 GMT
            Not After : Aug  1 13:09:15 2024 GMT
        Subject: CN=F4A2BA66CB12F20D337ADB092C904006DA678D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:84:5f:6a:b9:4e:dc:d8:d4:20:cf:48:67:
                    d0:0c:65:6d:35:1d:9c:77:40:77:4b:d0:49:c3:94:
                    1f:1e:0a:d3:c8:71:59:92:5c:08:7a:f5:e0:6a:c6:
                    84:f3:35:3a:9c:fc:73:e1:26:5b:8b:3c:51:12:f4:
                    60:6d:13:bf:9c:01:f4:b7:21:10:c8:08:0f:2c:8e:
                    bf:ea:86:88:2a:41:94:e8:0a:05:cf:c0:da:e2:01:
                    82:24:e5:90:2b:45:96:41:51:6b:f9:89:71:3f:c3:
                    6e:e3:e6:8a:3b:aa:12:3c:36:60:ba:9e:87:d0:63:
                    d7:a4:03:21:29:e1:7a:c8:65:6d:c4:c0:b0:72:b3:
                    77:fa:29:2a:0f:9f:b1:c4:81:71:78:47:64:e9:58:
                    8c:a4:44:cb:2c:f6:e0:37:ca:cf:74:cd:bf:9c:08:
                    d9:db:b3:da:b5:58:cc:55:e2:90:f3:4b:da:ec:be:
                    75:8e:6d:94:97:e9:84:62:33:ed:ca:a5:0b:7f:fc:
                    b3:ad:b5:07:39:3d:f2:4e:d8:5d:75:fd:bc:43:b2:
                    51:f3:aa:54:1c:70:b5:dc:95:6f:16:e5:ac:c8:79:
                    b6:64:e4:90:3b:c0:98:83:80:3a:01:48:2d:26:8d:
                    7d:fa:55:e1:4d:fb:ca:7b:6f:77:aa:ba:4a:83:b0:
                    2b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A2:BA:66:CB:12:F2:0D:33:7A:DB:09:2C:90:40:06:DA:67:8D:81
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233342e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:df:42:c3:f7:5a:5f:c6:7c:11:10:34:5b:e1:bd:0b:95:26:
         f1:b9:37:4e:8f:bf:f4:73:f0:fa:33:ee:f7:27:2f:07:76:3a:
         f9:69:80:35:65:1f:d6:21:8e:9a:dd:98:ff:99:f0:d1:d7:c8:
         12:5f:4b:85:dc:1d:5d:e4:af:27:36:01:bd:6a:43:1b:b1:2f:
         3d:a9:83:02:1d:28:f3:0f:b5:cf:ef:1d:28:2e:ad:d0:af:ac:
         03:c9:ca:3c:28:60:5a:10:e3:d1:a7:3a:85:30:2d:10:d4:a3:
         aa:66:77:9c:b4:63:90:62:2d:9e:f3:0c:10:28:af:d5:df:44:
         93:34:52:93:28:14:3a:99:f3:51:9a:99:b9:df:e8:17:90:56:
         69:ae:f4:27:50:4d:28:39:d2:50:cb:05:81:e3:04:ea:7a:be:
         6d:54:fa:d1:36:82:a7:96:2a:51:d3:48:a3:a4:c2:9c:7b:84:
         fe:90:38:b8:52:50:10:1f:f1:25:55:47:11:45:16:2e:5c:2b:
         8f:db:c4:21:8e:c5:3d:5a:17:13:89:ac:74:bb:9e:e9:e8:36:
         fe:db:a9:31:3c:fd:30:be:3c:aa:3b:9c:a8:06:68:dd:13:44:
         13:43:b9:f3:ae:02:6c:9b:70:0e:52:f2:af:fa:e7:2f:f7:e3:
         9b:da:bf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org