Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/3137372e39332e3138342e302f32322d3234203d3e203532383639.roa
File:                     3137372e39332e3138342e302f32322d3234203d3e203532383639.roa (raw, json)
Hash identifier:          ilfPegDoanLceFWTihsZfSLEy9vTRuvpS+6K+uaHYxU=
Subject key identifier:   D5:D1:E5:8E:3B:30:4A:E5:04:84:F6:91:2C:64:43:6F:87:33:39:A3
Certificate issuer:       /CN=B016900AD234CF99B5077C525DF4FFE7A750EAB2
Certificate serial:       370274FF9E18AC584B3D74AEC4CB39BB2A67E547
Authority key identifier: B0:16:90:0A:D2:34:CF:99:B5:07:7C:52:5D:F4:FF:E7:A7:50:EA:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/3137372e39332e3138342e302f32322d3234203d3e203532383639.roa
Signing time:             Fri 05 Jan 2024 19:31:49 +0000
ROA not before:           Fri 05 Jan 2024 19:26:49 +0000
ROA not after:            Fri 03 Jan 2025 19:31:49 +0000
asID:                     52869
IP address blocks:        177.93.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:02:74:ff:9e:18:ac:58:4b:3d:74:ae:c4:cb:39:bb:2a:67:e5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B016900AD234CF99B5077C525DF4FFE7A750EAB2
        Validity
            Not Before: Jan  5 19:26:49 2024 GMT
            Not After : Jan  3 19:31:49 2025 GMT
        Subject: CN=D5D1E58E3B304AE50484F6912C64436F873339A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:98:bb:49:a2:43:4e:37:5c:c6:10:91:7f:
                    64:b3:55:1e:be:d6:cc:7b:cb:55:61:e6:38:99:51:
                    6e:9c:de:31:90:2f:10:3a:49:78:ba:2e:9f:f9:ba:
                    58:65:00:9a:7d:d7:4f:ab:3a:40:99:61:c9:89:da:
                    39:35:70:91:37:c3:b6:e3:b2:bd:1e:df:46:08:36:
                    f6:bd:fc:0a:8f:fe:f6:5c:f4:4f:5a:1e:5a:9a:25:
                    f6:64:07:88:02:99:de:43:b5:b8:e9:a3:82:b7:05:
                    66:42:40:9f:af:b3:ac:67:5b:df:1d:b4:f3:85:74:
                    10:d3:ef:16:0b:90:06:53:e5:82:69:58:d2:40:cf:
                    c2:c9:35:05:bb:4f:14:89:78:df:da:1c:43:9d:32:
                    d5:3a:e2:01:f1:75:c8:6a:af:83:84:18:7e:b3:98:
                    e2:25:49:21:a8:c5:ed:21:e4:46:0c:c4:f0:b8:00:
                    7b:4f:42:62:a2:8e:44:a9:1c:72:39:f5:fd:96:3c:
                    18:32:77:d1:b6:98:56:d2:15:06:c8:d0:dc:4b:7e:
                    08:29:d1:d6:be:5f:68:3e:e9:31:b2:39:02:76:99:
                    9f:de:42:7f:91:4f:13:16:90:9d:b1:38:07:b3:92:
                    f3:62:89:36:79:09:a4:e4:3b:38:02:0a:37:0e:ef:
                    72:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D1:E5:8E:3B:30:4A:E5:04:84:F6:91:2C:64:43:6F:87:33:39:A3
            X509v3 Authority Key Identifier:
                keyid:B0:16:90:0A:D2:34:CF:99:B5:07:7C:52:5D:F4:FF:E7:A7:50:EA:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/3137372e39332e3138342e302f32322d3234203d3e203532383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:6b:55:b9:ed:7a:7f:ec:40:79:5b:07:f2:20:e8:5c:56:c4:
         9c:d2:5c:4e:f9:26:69:c7:71:b7:b2:8f:86:f4:45:fd:de:07:
         cc:e9:7e:a6:b7:01:89:c1:de:ac:fd:a7:c1:fe:81:84:03:5a:
         70:64:3b:aa:8e:8e:1a:cd:58:35:ea:b9:b8:fd:a4:10:7f:91:
         a5:32:93:c3:1b:8b:bb:fb:1c:2b:06:ab:50:24:83:99:4a:e4:
         74:de:5d:c0:cc:fe:84:e0:ae:bb:36:e6:e5:a9:2d:46:ba:be:
         a7:d6:78:42:77:d5:fc:0f:be:15:26:74:5f:0b:b1:d2:c2:9a:
         bc:2a:ea:3d:e1:6e:95:2f:c2:5f:42:0d:8e:ea:33:48:7f:4b:
         d1:e1:c2:fe:5d:25:3b:98:89:4b:dd:fd:80:45:dc:97:44:08:
         df:91:be:48:e9:00:9a:c4:d1:c2:92:eb:e3:70:37:b3:41:57:
         b6:aa:c3:bb:85:ce:59:29:11:33:9c:0e:4d:96:1e:2f:53:0d:
         6c:d8:4c:08:bf:ce:93:fa:e8:9e:91:f6:60:a9:f3:13:19:eb:
         d1:97:f4:9c:47:08:ab:9d:cd:7e:cc:78:74:e4:64:ea:8b:29:
         15:18:d7:4c:04:d8:e5:2b:66:17:11:3b:32:2b:4c:65:0d:74:
         55:5d:8e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org