Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137372e32332e3133362e302f32312d3234203d3e203532363939.roa
File:                     3137372e32332e3133362e302f32312d3234203d3e203532363939.roa (raw, json)
Hash identifier:          itNHx6acjJuslyphFUJPrBwD4ZKx7yhwD+x7gq72B0Q=
Subject key identifier:   1C:C5:A0:CF:A7:12:59:D7:B4:6F:BC:C6:7F:3F:B7:04:6D:69:CF:44
Certificate issuer:       /CN=B17FDBB2898DEB3128D0DFBC517CB982BDA2D370
Certificate serial:       707C767A6356F80EB35BBDA22D8E1C930ECE7D0D
Authority key identifier: B1:7F:DB:B2:89:8D:EB:31:28:D0:DF:BC:51:7C:B9:82:BD:A2:D3:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17FDBB2898DEB3128D0DFBC517CB982BDA2D370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137372e32332e3133362e302f32312d3234203d3e203532363939.roa
Signing time:             Thu 14 Sep 2023 21:02:59 +0000
ROA not before:           Thu 14 Sep 2023 20:57:59 +0000
ROA not after:            Thu 12 Sep 2024 21:02:59 +0000
asID:                     52699
IP address blocks:        177.23.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7c:76:7a:63:56:f8:0e:b3:5b:bd:a2:2d:8e:1c:93:0e:ce:7d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B17FDBB2898DEB3128D0DFBC517CB982BDA2D370
        Validity
            Not Before: Sep 14 20:57:59 2023 GMT
            Not After : Sep 12 21:02:59 2024 GMT
        Subject: CN=1CC5A0CFA71259D7B46FBCC67F3FB7046D69CF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:c4:ed:09:1d:39:ba:84:94:cf:0c:5b:a0:
                    3c:c3:fe:e7:27:c1:e2:6f:3b:f4:ce:20:a5:d0:55:
                    57:c2:7b:13:54:b6:8c:e2:0f:62:d7:30:37:49:ce:
                    a8:71:3b:4c:c2:58:17:80:3d:81:8c:74:07:f4:d9:
                    3f:46:a2:40:6b:fb:01:c3:32:f9:2d:3c:a5:a1:0c:
                    69:de:92:fa:ef:05:6a:2b:4f:08:e8:f0:c7:40:ec:
                    1f:eb:b4:b1:96:3d:9c:10:28:38:f7:bf:0d:1d:b4:
                    bf:88:ca:92:2c:36:7b:12:f8:62:9e:e3:a8:d2:fd:
                    3e:77:f5:69:1b:7a:6f:bb:55:8d:4d:86:2a:5b:7a:
                    66:83:a3:b1:3a:0e:0f:27:48:23:f4:56:4e:b5:20:
                    da:91:9d:20:a0:23:05:71:57:6c:b1:63:50:e2:e0:
                    55:64:ff:f8:f5:ac:ef:4b:c0:29:d3:be:e8:41:e4:
                    7d:f1:bc:ae:8a:63:e9:f1:15:da:5a:a9:2c:15:a6:
                    6b:1d:6c:ea:c6:a1:87:b7:3a:f6:0e:59:c3:db:02:
                    b8:75:8b:ed:dd:97:65:65:a8:16:3c:90:d9:7b:e5:
                    ce:0d:ec:ac:0a:b8:f2:33:a3:f1:ea:b4:9c:d7:b7:
                    0f:32:5e:4c:44:62:9f:82:f4:40:10:02:29:23:ad:
                    6a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C5:A0:CF:A7:12:59:D7:B4:6F:BC:C6:7F:3F:B7:04:6D:69:CF:44
            X509v3 Authority Key Identifier:
                keyid:B1:7F:DB:B2:89:8D:EB:31:28:D0:DF:BC:51:7C:B9:82:BD:A2:D3:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/B17FDBB2898DEB3128D0DFBC517CB982BDA2D370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17FDBB2898DEB3128D0DFBC517CB982BDA2D370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137372e32332e3133362e302f32312d3234203d3e203532363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:32:84:cb:1d:7e:69:2a:c7:11:5e:da:09:70:17:4f:ec:
         c8:6b:12:f8:e7:ec:5b:20:1f:c3:ce:95:82:2c:7f:3d:0a:0c:
         af:80:a3:6d:5d:63:4f:71:c1:0e:5d:94:e3:b2:9b:25:f6:e1:
         84:49:6a:fa:63:da:f1:0e:fb:30:57:91:ae:08:16:d2:94:0c:
         67:f6:92:bf:ae:e6:cb:02:24:65:b6:94:c4:26:9c:4d:cc:aa:
         9f:e9:0c:11:2d:8d:52:e5:ae:16:9f:c4:3b:65:7d:bd:60:09:
         d9:f5:d7:e1:b1:7d:50:a0:23:33:12:54:7c:e4:b0:07:16:0f:
         e7:b9:cc:e2:42:da:12:64:59:95:91:1c:96:2f:3e:92:49:92:
         bd:36:65:41:72:c1:44:65:23:2f:2c:2b:4a:2d:3b:3d:d3:57:
         e8:d0:a4:cb:50:76:c8:4a:94:75:a9:62:0d:48:6a:01:b5:bd:
         cd:85:9a:4a:ea:17:5f:bc:f6:ce:e9:b1:93:5d:ff:3f:63:bf:
         b7:34:21:31:79:48:1e:84:d2:97:00:37:b9:3d:0f:6f:8d:13:
         78:2c:57:e3:75:e9:8d:74:9f:ba:04:97:e8:4d:aa:ed:86:70:
         3c:7a:61:a9:9d:c8:a4:18:7b:7f:69:df:b7:d1:81:d0:2c:28:
         18:12:ba:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org