Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/3137372e3135342e31372e302f32342d3234203d3e20323632393432.roa
File:                     3137372e3135342e31372e302f32342d3234203d3e20323632393432.roa (raw, json)
Hash identifier:          NzFeCLJWPBnPu7VktYUnvYGTUnqdKD47vdpW8a3Hdyo=
Subject key identifier:   67:0B:D4:24:90:BA:D1:CF:91:F9:A8:0B:38:2C:B0:36:E4:DB:66:8A
Certificate issuer:       /CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
Certificate serial:       71C002A9DECB87370DB777A1C092F0E4D561F9E9
Authority key identifier: C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/3137372e3135342e31372e302f32342d3234203d3e20323632393432.roa
Signing time:             Wed 03 Apr 2024 18:31:36 +0000
ROA not before:           Wed 03 Apr 2024 18:26:36 +0000
ROA not after:            Wed 02 Apr 2025 18:31:36 +0000
asID:                     262942
IP address blocks:        177.154.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c0:02:a9:de:cb:87:37:0d:b7:77:a1:c0:92:f0:e4:d5:61:f9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D2D4B830F24D1323D706EAEFB759AC47A5304F
        Validity
            Not Before: Apr  3 18:26:36 2024 GMT
            Not After : Apr  2 18:31:36 2025 GMT
        Subject: CN=670BD42490BAD1CF91F9A80B382CB036E4DB668A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:14:68:c0:70:1b:1c:42:a0:c9:60:70:ff:
                    4f:4c:9d:79:b0:e3:31:63:23:40:67:82:21:79:69:
                    01:94:9d:64:b8:09:d4:fa:b1:aa:93:c5:39:ba:6a:
                    db:c7:0a:ab:6f:1e:76:bb:33:05:2b:59:58:5d:67:
                    3e:75:bc:66:6b:67:84:26:f6:bb:cd:f9:da:a9:6b:
                    0b:54:c5:a2:98:b8:a0:4f:21:29:7e:d5:6c:72:d1:
                    a5:14:61:e3:b8:83:9e:a3:fa:e3:3e:ff:4d:aa:0a:
                    6f:fd:81:19:da:e7:ed:bd:bb:fd:7d:62:27:18:ad:
                    4c:3f:b2:b3:ba:87:66:ea:6d:fe:e1:77:84:c6:68:
                    6f:be:13:09:03:05:c4:87:4d:86:c1:f4:57:82:94:
                    8f:51:3f:45:7e:f6:d9:5e:c5:7e:f5:69:8c:93:68:
                    22:fa:58:c6:c4:7a:da:a3:09:22:d7:22:fa:b4:49:
                    7e:2c:8d:e7:5d:ac:2e:cb:62:cc:8a:15:f8:8d:2f:
                    44:fa:c7:67:db:11:8d:2d:6e:c8:6f:91:af:1d:8d:
                    d2:a4:b6:1a:58:e5:27:9c:1e:e5:da:1c:a9:3b:55:
                    03:3d:db:21:4f:7c:04:cc:bf:17:9b:0f:4e:0c:fb:
                    69:30:57:01:54:0d:7a:2b:dd:c4:04:d4:c7:e2:e7:
                    4a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0B:D4:24:90:BA:D1:CF:91:F9:A8:0B:38:2C:B0:36:E4:DB:66:8A
            X509v3 Authority Key Identifier:
                keyid:C7:D2:D4:B8:30:F2:4D:13:23:D7:06:EA:EF:B7:59:AC:47:A5:30:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D2D4B830F24D1323D706EAEFB759AC47A5304F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/1/3137372e3135342e31372e302f32342d3234203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:9e:d6:6c:65:9b:96:42:57:ab:3a:18:34:6e:97:b8:22:15:
         db:03:02:c0:9f:43:d8:96:69:6b:ab:25:0d:b4:0b:71:b4:5b:
         e0:d6:92:65:73:bc:d1:84:af:0b:75:f1:7d:a5:14:1f:16:6b:
         93:67:d2:c4:5d:f6:65:a0:bd:1f:1d:d4:3a:ba:05:8c:9e:ba:
         7a:14:53:1d:4a:ca:e0:1a:7c:bd:46:bc:86:75:d8:77:d4:f9:
         78:a0:eb:0d:dc:1a:90:10:95:68:d1:71:8f:2f:44:7b:1d:a3:
         0e:96:ae:34:21:1d:10:44:2d:81:d6:1c:05:1b:7f:7c:91:d7:
         7c:65:f3:20:7b:03:e5:56:0c:dc:07:4c:79:34:f6:eb:5c:27:
         7a:09:07:0b:34:e0:75:d6:b6:22:3b:b6:13:9a:15:57:c8:ff:
         b5:6e:7a:fa:da:c2:ce:06:df:9f:64:7b:8e:20:1b:bc:bf:70:
         29:12:4c:2d:70:60:bc:14:b9:c5:37:81:d4:0d:24:4c:17:73:
         06:1c:06:bd:08:c3:50:3a:98:fe:83:b7:a1:c4:ef:e0:a0:68:
         39:c0:e8:8f:ce:6c:76:aa:95:9d:2f:17:46:34:92:71:bc:e7:
         e8:b5:8d:18:29:7f:db:77:76:35:93:6e:1e:ec:1b:82:2e:ee:
         aa:13:95:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 16:21:29 2024 by rpki-client on console-fra.rpki-client.org