Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234302e302f32322d3234203d3e20323730363032.roa
File:                     3137372e38352e3234302e302f32322d3234203d3e20323730363032.roa (raw, json)
Hash identifier:          h3Ex7k7pDqUWaAAa2UGiesSUoeZBaAbeFx/3BeEFxNs=
Subject key identifier:   63:18:B7:99:81:7B:7E:9C:85:26:18:19:EC:CE:AE:9B:D6:9A:F0:70
Certificate issuer:       /CN=1F209AA846293F705FB5E5250354EC9F4C3D838B
Certificate serial:       32585E35BDE3095C0AF74C4005C268588A352D8D
Authority key identifier: 1F:20:9A:A8:46:29:3F:70:5F:B5:E5:25:03:54:EC:9F:4C:3D:83:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F209AA846293F705FB5E5250354EC9F4C3D838B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234302e302f32322d3234203d3e20323730363032.roa
Signing time:             Wed 13 Jul 2022 01:50:17 +0000
ROA not before:           Wed 13 Jul 2022 01:45:17 +0000
ROA not after:            Wed 12 Jul 2023 01:50:17 +0000
asID:                     270602
IP address blocks:        177.85.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:58:5e:35:bd:e3:09:5c:0a:f7:4c:40:05:c2:68:58:8a:35:2d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F209AA846293F705FB5E5250354EC9F4C3D838B
        Validity
            Not Before: Jul 13 01:45:17 2022 GMT
            Not After : Jul 12 01:50:17 2023 GMT
        Subject: CN=6318B799817B7E9C85261819ECCEAE9BD69AF070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9a:87:27:ed:89:ad:13:98:85:36:27:04:e3:
                    a5:89:7c:8e:bc:b7:cb:85:c9:45:d4:8d:ea:d8:ce:
                    5b:25:28:93:26:bd:70:fc:0f:0a:96:8a:72:fc:b2:
                    69:c4:3a:80:b0:51:86:a4:63:a6:c0:46:fe:98:d5:
                    05:ed:f5:16:e3:88:c8:c4:39:94:3a:93:c4:96:2f:
                    97:2a:80:ce:93:62:08:95:b8:69:e0:ff:56:e6:b6:
                    12:d0:bf:fd:47:61:93:ae:49:46:fe:be:d6:fa:99:
                    4e:6e:14:5c:6d:08:be:ce:0c:e7:99:07:0e:78:43:
                    68:aa:c0:6d:f8:d8:75:2c:20:ed:d4:29:62:ea:38:
                    70:70:b8:a6:ad:4f:ba:c6:1a:aa:a6:9e:bb:d5:e8:
                    75:e4:1a:17:dc:34:a1:28:f2:a0:d3:5f:17:91:10:
                    20:54:09:e7:88:12:36:df:cc:c1:59:9e:19:44:2d:
                    ed:97:38:e6:47:34:a3:6c:de:8f:fd:8b:db:d6:48:
                    e5:bb:4e:95:b7:8e:2f:68:41:f7:57:11:ed:4d:3a:
                    f1:b5:26:74:19:40:fc:bf:0e:4b:b3:33:35:13:b5:
                    38:94:7b:42:8b:8a:cc:41:0d:f4:ef:b8:69:03:2d:
                    22:de:48:64:52:06:94:21:90:07:48:51:14:7b:12:
                    41:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:18:B7:99:81:7B:7E:9C:85:26:18:19:EC:CE:AE:9B:D6:9A:F0:70
            X509v3 Authority Key Identifier:
                keyid:1F:20:9A:A8:46:29:3F:70:5F:B5:E5:25:03:54:EC:9F:4C:3D:83:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/1F209AA846293F705FB5E5250354EC9F4C3D838B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F209AA846293F705FB5E5250354EC9F4C3D838B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234302e302f32322d3234203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:2f:69:4b:42:ce:a8:61:a7:dd:88:6d:be:c4:91:5b:0a:58:
         44:4e:bc:cc:06:05:2b:b2:93:1e:74:56:60:55:b6:1f:c3:e3:
         a6:d9:45:b7:9e:ba:a0:11:63:cd:69:85:3e:01:1a:06:16:3c:
         3a:ca:1f:54:ca:46:2d:ff:9f:ad:ff:a7:6e:4a:37:51:59:b9:
         a2:a6:35:c6:15:31:31:b0:9f:ba:93:05:8c:15:19:c9:88:74:
         c0:e5:97:c9:25:95:de:7e:20:5c:b5:25:70:f4:d8:13:d5:c3:
         13:94:9f:91:0e:d7:41:c2:7d:2a:3f:dc:96:d0:f1:aa:e6:73:
         0f:c8:99:54:16:0d:c7:56:a6:62:cd:e4:9b:f0:ee:7f:27:9a:
         fe:b6:3a:a6:80:38:45:f1:de:2a:09:6d:54:83:e3:97:ba:e6:
         0b:f0:5b:4e:01:64:61:51:67:d3:59:eb:6a:5c:e7:ae:91:88:
         cf:5f:d2:5b:df:6b:cc:33:04:e2:8c:69:b2:84:6a:01:68:b1:
         e8:a3:95:df:a2:fb:51:22:41:ce:09:fe:44:3c:6d:26:4e:f1:
         de:f7:09:48:b3:4c:f0:70:81:ed:bd:c3:4a:98:b6:00:5a:f8:
         56:6a:6f:e1:ab:f7:9b:26:40:ab:5c:33:5a:cd:0a:f3:eb:6d:
         0b:60:2f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org