Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3137302e302f32332d3233203d3e203532393133.roa
File:                     3137372e32332e3137302e302f32332d3233203d3e203532393133.roa (raw, json)
Hash identifier:          GVUZJgiQAE/W0Tq3KtqQ7zqSI7rg8xuvrF+Mx0PzG9w=
Subject key identifier:   7A:EC:33:1F:EA:70:7C:FE:60:2C:5A:0E:AE:25:8B:0C:BB:84:F9:D7
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       68E34095F3FBE1568DFD741C52A515CB9AE212F2
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3137302e302f32332d3233203d3e203532393133.roa
Signing time:             Thu 07 Mar 2024 21:20:43 +0000
ROA not before:           Thu 07 Mar 2024 21:15:43 +0000
ROA not after:            Thu 06 Mar 2025 21:20:43 +0000
asID:                     52913
IP address blocks:        177.23.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e3:40:95:f3:fb:e1:56:8d:fd:74:1c:52:a5:15:cb:9a:e2:12:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar  7 21:15:43 2024 GMT
            Not After : Mar  6 21:20:43 2025 GMT
        Subject: CN=7AEC331FEA707CFE602C5A0EAE258B0CBB84F9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f1:fa:87:cf:2d:58:d7:93:ab:fc:a4:f4:b7:
                    29:7c:68:d9:e7:29:3f:aa:35:89:19:08:9c:0b:26:
                    4d:dc:92:9a:c7:89:db:81:df:d8:13:93:13:08:bf:
                    78:b6:8c:3f:39:61:9a:bf:fb:dc:6a:e7:97:7c:d5:
                    52:06:49:aa:90:63:aa:a1:29:84:ae:6d:ac:f2:48:
                    b9:f7:f0:7e:56:f8:8d:b8:1f:c3:1b:ab:f1:a9:bb:
                    c9:22:d8:75:99:d5:a5:3e:66:f9:c7:0a:20:05:2b:
                    41:cf:73:ec:28:79:85:49:95:03:e7:85:32:7a:a6:
                    61:a4:0f:c2:78:1c:97:78:13:0b:f4:01:a7:19:9e:
                    e6:91:17:e0:81:e8:d8:c0:46:1f:5c:46:c8:3b:81:
                    23:b0:19:e2:04:4d:90:06:27:40:f9:d8:c1:d9:aa:
                    ef:05:e9:05:d4:c2:33:1d:1b:99:42:23:38:11:22:
                    94:f9:97:02:f1:7c:ca:03:87:cc:b4:a6:f2:e3:8c:
                    ce:6a:d6:71:e3:6a:e7:25:14:d8:b8:62:ab:ff:2f:
                    0b:dd:16:74:a2:c6:96:d7:e4:89:59:95:59:a0:08:
                    91:61:0e:a0:11:22:6d:1d:47:89:a4:74:81:cc:ee:
                    c3:a5:45:13:a3:e0:76:b3:2c:10:b5:6b:a4:12:d9:
                    e4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EC:33:1F:EA:70:7C:FE:60:2C:5A:0E:AE:25:8B:0C:BB:84:F9:D7
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3137302e302f32332d3233203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:86:1a:35:e4:54:0c:da:42:a5:45:f0:62:d9:15:ee:91:28:
         eb:68:79:e7:a7:b7:d4:83:40:dd:60:c5:5f:8e:3e:d0:f4:ae:
         02:1d:c5:ae:d1:84:60:84:13:8d:96:f6:0e:18:04:8b:c9:cb:
         96:c5:17:65:5c:f4:a0:fa:e9:42:ff:25:4b:a0:30:5a:bd:38:
         3a:20:0b:5f:ac:07:30:79:72:1c:36:d8:97:49:c7:88:9f:67:
         a1:9b:08:33:5b:6c:9d:17:e3:45:db:f4:0e:a8:b0:d2:c7:a5:
         f7:48:92:28:dc:24:50:0b:53:29:9c:32:ab:65:93:31:b7:07:
         76:d3:ba:6e:b2:1f:fa:96:e4:1a:f2:a3:4b:03:0a:85:11:f2:
         cc:0f:19:1e:1f:73:c8:c0:b7:e8:fa:34:05:51:00:d5:60:5a:
         2b:9a:10:14:76:36:11:e8:78:35:e3:3a:ab:10:29:93:c6:b1:
         16:d6:4d:97:17:f3:ee:71:14:b5:63:8c:4c:21:d9:38:7a:5e:
         33:1f:01:ff:5f:f3:09:c2:56:6e:f8:3d:2d:db:bc:cf:77:61:
         f0:08:a0:b9:c4:c5:7d:dd:48:8e:83:c0:35:ad:08:a1:85:e2:
         27:43:94:6d:c7:8a:95:51:ee:95:16:2b:bc:09:7e:13:df:ba:
         9b:87:4c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org