Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e38372e37322e302f32322d3234203d3e20323632343434.roa
File:                     3137372e38372e37322e302f32322d3234203d3e20323632343434.roa (raw, json)
Hash identifier:          QtdAjBSIhaK1B8wUMXNWhDl4JYRuUp/SeFkOOHeM7vo=
Subject key identifier:   3C:78:BD:B7:D2:BC:CE:8D:F1:BA:1F:03:71:91:F2:96:28:34:A2:83
Certificate issuer:       /CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
Certificate serial:       09F8145CA57CB2E50A152275D4C72C314426BCF7
Authority key identifier: E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e38372e37322e302f32322d3234203d3e20323632343434.roa
Signing time:             Thu 11 Jan 2024 11:32:05 +0000
ROA not before:           Thu 11 Jan 2024 11:27:05 +0000
ROA not after:            Thu 09 Jan 2025 11:32:05 +0000
asID:                     262444
IP address blocks:        177.87.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f8:14:5c:a5:7c:b2:e5:0a:15:22:75:d4:c7:2c:31:44:26:bc:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
        Validity
            Not Before: Jan 11 11:27:05 2024 GMT
            Not After : Jan  9 11:32:05 2025 GMT
        Subject: CN=3C78BDB7D2BCCE8DF1BA1F037191F2962834A283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8d:92:c1:53:93:26:f9:8a:1d:0e:de:0c:c6:
                    95:9d:32:4b:6f:36:1e:12:4f:81:65:9d:78:5e:b8:
                    48:6e:7b:86:aa:77:da:f9:66:71:e9:07:c8:4b:06:
                    fc:3c:a2:2d:ef:a4:52:1e:73:28:95:0d:fc:57:99:
                    8c:fb:39:e1:ea:7c:f3:90:9a:b5:4c:47:b9:18:78:
                    1d:b0:f5:f6:f1:38:50:59:e6:c8:a3:3d:74:9b:f4:
                    9a:4f:8d:74:8c:5f:7d:3a:bb:22:5c:d4:e0:8b:9d:
                    fd:ea:f7:79:37:27:ad:a4:0b:95:2b:4b:97:ca:23:
                    fd:ac:9e:45:88:09:0f:54:23:de:5c:b4:ee:05:91:
                    65:e8:c6:f5:2c:ce:7c:f3:b0:0f:c6:f4:4d:ad:8a:
                    28:bb:04:5d:bc:8f:ae:fa:c0:8b:bb:81:8b:40:0a:
                    25:7f:e0:56:a6:46:b5:45:82:5a:a5:a5:07:f4:75:
                    9b:74:1e:9a:25:f5:e1:74:e2:af:30:fa:16:94:ff:
                    14:72:b8:03:27:56:a1:72:58:cb:52:16:a0:bf:1f:
                    be:1e:b0:ee:58:18:11:99:ed:bc:ad:c4:7f:4f:bd:
                    62:b5:88:dc:6e:d6:b5:24:75:a6:f4:97:c8:88:67:
                    a4:d3:cb:7d:34:c7:25:71:85:2e:db:01:7c:08:8f:
                    b6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:78:BD:B7:D2:BC:CE:8D:F1:BA:1F:03:71:91:F2:96:28:34:A2:83
            X509v3 Authority Key Identifier:
                keyid:E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e38372e37322e302f32322d3234203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:1f:95:37:bc:1b:0c:54:50:e0:87:95:19:18:94:b7:83:ef:
         4c:22:9d:e8:3c:13:e5:b4:b7:3f:a3:52:3a:79:a5:4a:28:84:
         2f:57:9b:da:73:19:99:e3:26:7a:6f:ba:7f:f4:ba:54:5f:9b:
         64:18:b0:64:5f:a2:a6:de:e0:4b:21:e4:c5:3a:52:c9:af:a6:
         de:34:e9:67:80:f1:69:bb:51:3a:e0:25:bd:6d:47:1f:5b:db:
         5e:8d:be:51:25:d7:32:27:85:82:2c:bf:34:f6:1f:65:20:7e:
         f8:02:38:8e:cf:d4:7f:ec:06:2c:f2:b8:2a:27:47:8f:47:56:
         e7:e1:d6:01:f4:a0:bd:66:d9:3a:db:fe:cb:34:49:5c:07:ae:
         0a:2e:aa:41:68:60:00:80:dc:da:de:77:d5:14:d8:b5:c9:4f:
         36:f7:38:e0:81:81:13:91:3a:89:27:54:78:47:19:f7:d2:c3:
         58:4a:d3:de:03:cc:7f:85:0d:d3:3b:e3:e6:4f:64:09:0e:cc:
         e2:bb:9b:d1:ac:51:20:60:cf:8c:36:02:50:de:65:2b:35:12:
         5d:ea:09:54:1e:d6:2b:3d:01:86:c7:ee:dd:f8:90:68:39:0a:
         15:98:88:3c:92:4b:e8:9d:80:18:cc:64:3c:35:14:61:91:00:
         03:07:2d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org