Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/0/3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa
File:                     3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa (raw, json)
Hash identifier:          KpKjZf4kDJwOMXbBOl0MjuJbEnO7xxCQZ0O1cGRmU+s=
Subject key identifier:   84:0B:3E:3B:0F:6D:1B:AE:EF:29:03:82:BF:5B:86:0C:8B:78:AD:36
Certificate issuer:       /CN=665F497A664051E7799FA890013BCC2F5B0B4428
Certificate serial:       72B78C0B93B1E2CC3D799F6958C0BE1B7373E4D7
Authority key identifier: 66:5F:49:7A:66:40:51:E7:79:9F:A8:90:01:3B:CC:2F:5B:0B:44:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/665F497A664051E7799FA890013BCC2F5B0B4428.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/0/3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa
Signing time:             Fri 09 Feb 2024 15:42:34 +0000
ROA not before:           Fri 09 Feb 2024 15:37:34 +0000
ROA not after:            Fri 07 Feb 2025 15:42:34 +0000
asID:                     262861
IP address blocks:        177.10.224.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b7:8c:0b:93:b1:e2:cc:3d:79:9f:69:58:c0:be:1b:73:73:e4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665F497A664051E7799FA890013BCC2F5B0B4428
        Validity
            Not Before: Feb  9 15:37:34 2024 GMT
            Not After : Feb  7 15:42:34 2025 GMT
        Subject: CN=840B3E3B0F6D1BAEEF290382BF5B860C8B78AD36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8f:f5:bd:64:ac:e8:66:0f:51:8b:11:fa:43:
                    06:6f:fc:2c:60:c7:7b:ad:f8:ab:e3:cc:dd:d3:b4:
                    09:21:f8:60:7d:ca:cc:e9:b1:f3:a1:ba:e3:41:ae:
                    fc:40:b7:a5:b0:33:92:ae:23:df:4b:d7:10:75:0e:
                    9a:47:35:ad:8d:0f:d4:62:e1:7e:20:9d:74:7a:d6:
                    f9:74:97:54:7e:36:d0:a5:1c:eb:39:87:67:e0:f9:
                    c1:a2:5e:9f:7b:8b:4b:3d:b4:dd:6c:ef:a0:e9:e5:
                    c2:26:ad:b3:48:93:bf:07:f6:09:50:09:97:9d:6b:
                    4a:04:d2:a6:2f:9c:53:37:9b:28:8f:e5:00:63:8f:
                    e0:a8:be:61:89:5d:3a:9d:05:59:c5:77:8e:93:d2:
                    fd:ea:28:f3:6f:77:bc:3d:ae:b1:7c:25:57:1e:c6:
                    b3:e8:08:9a:e9:0a:2e:79:ea:a5:05:d2:34:33:d7:
                    c3:c1:e4:78:c9:7a:cc:7d:c4:5b:91:de:a8:58:a8:
                    35:14:ab:b4:94:32:3b:10:8d:0d:a5:2d:82:60:73:
                    2a:7b:4a:a1:77:1e:7b:1e:4d:43:1a:e4:31:4e:2e:
                    91:95:92:e8:e3:a2:4e:93:6f:84:4f:4c:7e:9a:2f:
                    c7:4f:2d:f6:e3:76:1e:5f:a9:10:3c:19:89:9b:df:
                    6f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0B:3E:3B:0F:6D:1B:AE:EF:29:03:82:BF:5B:86:0C:8B:78:AD:36
            X509v3 Authority Key Identifier:
                keyid:66:5F:49:7A:66:40:51:E7:79:9F:A8:90:01:3B:CC:2F:5B:0B:44:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/0/665F497A664051E7799FA890013BCC2F5B0B4428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/665F497A664051E7799FA890013BCC2F5B0B4428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/0/3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d3:c2:52:6e:06:3b:ef:af:d4:2b:7e:35:5d:6f:3a:83:ca:8f:
         09:4c:1b:b6:18:81:ae:c9:93:75:25:42:35:b6:32:cf:ba:f4:
         75:0f:70:43:5e:d1:28:51:da:e4:e2:d8:c5:df:0f:69:d0:27:
         53:ca:8e:8d:4d:f9:69:0f:55:96:86:ae:0e:b3:bf:db:30:20:
         69:5d:db:01:55:c9:69:14:5c:d0:db:42:0d:bd:32:35:4c:a6:
         0e:0b:6b:fa:77:94:3a:85:70:56:9f:02:95:ef:fe:cf:aa:f4:
         c7:21:b9:6d:3b:3e:4e:78:3a:64:2f:9a:1d:a9:7c:d6:a2:28:
         ca:30:c3:ed:87:3b:f9:bc:4a:1f:ae:a6:82:ce:cc:ad:8a:b7:
         7b:6f:e0:73:bf:fd:af:7e:79:6f:e8:fe:1d:60:5f:13:07:85:
         c9:7d:fc:08:b2:91:cd:ef:89:91:fc:b0:53:b6:5d:26:3e:2f:
         19:3c:05:50:7f:6e:aa:7d:79:cc:a0:5b:a3:df:80:17:ba:62:
         c7:39:11:8f:df:54:1a:b8:2d:a6:75:79:62:88:9a:bc:92:64:
         51:cf:f6:2d:30:60:ea:46:79:8b:d9:f5:23:84:86:e8:f5:3e:
         dd:86:6c:e4:e3:5e:6a:9f:09:0e:8a:4a:41:f6:6a:2d:e5:7d:
         5e:83:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org