Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31392e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e31392e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          gNOUTMx0+nOlb2g0rY+nSgtJg+K7D5/qopLJ9rXVMKA=
Subject key identifier:   AB:82:9D:B2:F1:C1:20:10:36:FA:E8:7C:34:52:71:F4:1E:0C:83:DD
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       08256BD90358DCF8484D056266331C14EF0DC7BB
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31392e302f32342d3234203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:32 +0000
ROA not before:           Thu 17 Nov 2022 17:58:32 +0000
ROA not after:            Thu 16 Nov 2023 18:03:32 +0000
asID:                     28360
IP address blocks:        177.8.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:25:6b:d9:03:58:dc:f8:48:4d:05:62:66:33:1c:14:ef:0d:c7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:32 2022 GMT
            Not After : Nov 16 18:03:32 2023 GMT
        Subject: CN=AB829DB2F1C1201036FAE87C345271F41E0C83DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f9:c1:0c:2e:0d:1e:46:4d:7f:3e:c4:f0:a4:
                    1d:f0:77:1b:b1:a6:9b:4e:54:c7:ea:3c:90:3b:0b:
                    a4:07:dc:97:9d:00:05:66:93:ca:7f:ac:4b:dd:cf:
                    cb:93:00:ce:a0:f9:cc:74:96:db:06:09:95:14:92:
                    78:4e:9f:c6:07:3a:88:bf:12:8b:32:a1:7a:4d:9b:
                    b5:59:92:38:f0:e8:06:34:36:00:59:da:45:14:8e:
                    a5:a2:da:a4:ca:bb:f5:90:dd:7e:f6:43:27:0b:65:
                    73:05:dd:e6:f8:9d:21:d9:16:78:4d:a6:78:c7:bf:
                    f8:63:c1:c6:72:a6:8d:9a:c5:07:f4:92:ae:77:4f:
                    98:75:ea:ae:75:89:ca:19:bf:9c:ee:20:e8:11:c5:
                    fe:33:da:3b:a6:c9:d1:18:54:a0:5d:86:24:e9:08:
                    60:f1:72:a1:08:f9:ce:8d:49:f2:2d:9b:2f:5f:3f:
                    af:e1:de:75:59:08:55:b7:17:f1:f8:96:0a:76:75:
                    d5:3f:30:1b:d0:b8:3a:52:3e:3e:43:58:0c:87:04:
                    90:17:90:e0:ec:04:5d:c9:1e:29:5c:06:f9:f8:ea:
                    7f:88:a5:7b:f3:e4:80:32:a5:9a:a7:c1:2c:f2:97:
                    3f:0b:f0:94:4a:15:c9:25:bd:7d:7c:36:96:07:d9:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:82:9D:B2:F1:C1:20:10:36:FA:E8:7C:34:52:71:F4:1E:0C:83:DD
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31392e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:36:c3:a5:d7:cc:ff:08:fa:d5:1d:fe:7a:35:a5:bf:7d:b9:
         74:ac:9f:85:71:60:89:ca:81:69:76:c5:72:63:10:e1:af:2a:
         fd:1e:3c:2d:a7:71:c5:48:ca:a2:39:bd:bb:b5:18:58:d6:8a:
         b6:1f:9a:c8:d4:1f:fc:bb:6a:2f:f9:84:f4:a5:b3:bf:d9:ef:
         63:05:5e:c7:58:ce:7c:92:09:a9:c4:21:37:39:cb:60:28:1c:
         5f:63:92:25:9e:e0:69:4c:43:9f:bc:cc:d1:c8:a7:8a:c1:5f:
         0f:76:4a:4d:a0:d3:1a:50:79:72:d7:23:d0:ea:bd:8c:ee:1c:
         36:8d:49:fa:44:98:d2:bb:2a:8f:f9:21:f4:fe:c8:19:7d:5d:
         9b:ad:4c:bc:62:62:29:34:29:bf:4a:eb:35:af:12:6f:8e:ac:
         cd:14:ea:86:f6:3c:84:7c:3e:45:29:ac:1d:e5:9f:c0:50:3f:
         f6:84:4b:ea:46:1d:29:12:2b:ee:08:50:cf:5d:5f:7d:43:9f:
         e4:52:26:37:8f:1e:3f:ed:c2:e8:45:51:39:f1:fa:9d:54:a8:
         07:1c:0e:b9:64:19:75:11:d8:ca:da:e1:04:6e:e4:e7:df:9f:
         90:20:cf:06:f9:84:85:f6:30:06:d3:7a:dc:a0:c8:f2:07:a1:
         c5:24:f8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org