Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133362e302f32322d3234203d3e20323731303830.roa
File:                     3137372e38362e3133362e302f32322d3234203d3e20323731303830.roa (raw, json)
Hash identifier:          hAg3U4Lt0VjHqHejFPx9uRF+wOkGV+z8ou/T1qNVt6Q=
Subject key identifier:   37:96:5B:6C:97:9D:BD:D8:1E:CB:BA:42:B0:E5:46:1C:B0:2F:EA:A9
Certificate issuer:       /CN=B0780224148DCDADC8D023C05094C312A8CDB6B4
Certificate serial:       10C77BCC932EFC14DD22F00F3169A7E9ECC34467
Authority key identifier: B0:78:02:24:14:8D:CD:AD:C8:D0:23:C0:50:94:C3:12:A8:CD:B6:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0780224148DCDADC8D023C05094C312A8CDB6B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133362e302f32322d3234203d3e20323731303830.roa
Signing time:             Tue 02 Jan 2024 18:59:31 +0000
ROA not before:           Tue 02 Jan 2024 18:54:31 +0000
ROA not after:            Tue 31 Dec 2024 18:59:31 +0000
asID:                     271080
IP address blocks:        177.86.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c7:7b:cc:93:2e:fc:14:dd:22:f0:0f:31:69:a7:e9:ec:c3:44:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0780224148DCDADC8D023C05094C312A8CDB6B4
        Validity
            Not Before: Jan  2 18:54:31 2024 GMT
            Not After : Dec 31 18:59:31 2024 GMT
        Subject: CN=37965B6C979DBDD81ECBBA42B0E5461CB02FEAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:d5:bc:39:57:ce:34:52:9b:73:74:84:98:
                    4a:51:59:96:6f:63:27:27:a5:78:41:77:f1:be:5e:
                    d7:cd:f5:45:ca:01:ce:e2:53:48:46:f0:5a:83:0b:
                    09:23:25:18:08:7d:f8:2d:4f:ab:d6:a8:19:7d:e7:
                    b7:4f:ad:07:f6:7d:c2:c7:a8:a2:31:98:ca:4c:48:
                    37:ca:0f:e2:8f:bc:9a:01:ac:12:43:dd:d3:d9:82:
                    1a:0c:d5:8b:2f:10:fa:41:d8:59:96:c2:a9:e6:7b:
                    b2:dd:96:0e:54:35:bc:62:c4:46:5e:e0:0c:5d:01:
                    5f:2c:02:5d:76:d4:46:3d:45:7e:cf:56:8d:27:e2:
                    26:6c:31:b5:16:18:16:9c:b4:b5:90:b5:30:8c:27:
                    1a:85:9c:3a:ad:e4:51:7d:c5:37:6a:77:17:86:64:
                    6f:92:2c:e2:3a:6e:04:fb:78:df:72:98:fe:0f:39:
                    ef:c5:1c:79:37:93:61:c0:26:70:dd:11:92:7b:53:
                    f2:a7:0c:9f:0f:a0:1a:dd:dc:d0:28:20:7b:83:ff:
                    2d:87:c8:0e:b7:b1:31:d8:68:d4:3b:68:46:5e:49:
                    20:74:2d:38:c3:3e:b8:52:18:19:89:dd:71:fe:bd:
                    ed:02:eb:fa:1e:16:eb:70:72:7d:60:44:71:e9:6f:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:96:5B:6C:97:9D:BD:D8:1E:CB:BA:42:B0:E5:46:1C:B0:2F:EA:A9
            X509v3 Authority Key Identifier:
                keyid:B0:78:02:24:14:8D:CD:AD:C8:D0:23:C0:50:94:C3:12:A8:CD:B6:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/B0780224148DCDADC8D023C05094C312A8CDB6B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0780224148DCDADC8D023C05094C312A8CDB6B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133362e302f32322d3234203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:14:bf:6b:be:07:77:93:c8:1b:f2:67:20:1a:3e:74:8f:ee:
         0b:84:7f:61:a7:db:e0:bc:ad:b7:7c:7c:1e:51:58:2f:8c:4c:
         24:3f:b6:48:1d:db:a8:9e:d1:61:fa:ee:24:32:45:95:88:15:
         ea:c2:bf:34:e1:f5:92:41:9f:40:80:5a:39:79:4f:fa:66:6a:
         3c:7d:0b:0c:32:81:a3:34:9d:55:d0:51:76:78:3f:76:f4:fb:
         b8:77:53:68:82:b6:1a:d1:6b:5d:21:2b:76:b5:57:59:60:a3:
         ba:fc:bc:ce:78:27:00:71:89:3d:66:1d:db:a7:28:ac:87:59:
         d4:e3:ca:03:72:7f:96:4e:6e:b4:8c:02:83:fa:4b:7c:44:c7:
         61:94:95:5e:83:ff:89:60:0f:d8:c9:8f:ad:f7:a2:c4:5b:73:
         95:e5:27:8e:cd:9a:87:8c:c6:27:dc:52:85:59:6e:c6:38:ba:
         b7:58:a2:3c:dc:fd:29:b5:6c:91:5e:b7:a8:11:1a:61:a1:03:
         08:bd:e2:87:be:af:a4:ab:7b:45:d4:1e:90:69:3a:36:ee:c3:
         2c:e3:95:bc:8d:eb:db:6c:79:cb:dc:20:54:be:0e:fb:43:2b:
         e7:a9:8c:8a:7e:cc:89:a7:0a:14:6c:4f:b2:7c:02:a8:d2:f5:
         53:5c:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org