Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32332e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e32332e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          57NoUGjWujAydIE43MexgIUfMMoQYBLYBMxl/dmN2fY=
Subject key identifier:   B1:B4:17:27:33:28:54:83:BA:47:87:09:C7:83:AE:D8:38:8C:1D:1D
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       44FFF35E08676EF08119727E7709ED4A5B5DBC08
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32332e302f32342d3234203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:33 +0000
ROA not before:           Thu 17 Nov 2022 17:58:33 +0000
ROA not after:            Thu 16 Nov 2023 18:03:33 +0000
asID:                     28360
IP address blocks:        177.8.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ff:f3:5e:08:67:6e:f0:81:19:72:7e:77:09:ed:4a:5b:5d:bc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:33 2022 GMT
            Not After : Nov 16 18:03:33 2023 GMT
        Subject: CN=B1B4172733285483BA478709C783AED8388C1D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:80:bc:92:b9:84:3b:48:3d:c9:03:1a:bc:
                    53:e7:c8:d3:5b:19:7d:98:66:90:71:ae:a9:8e:f4:
                    72:4e:30:6d:e8:df:50:c5:03:14:7f:90:b4:51:f1:
                    37:69:ff:40:5a:83:39:aa:ca:12:c4:23:48:03:5e:
                    7c:eb:31:40:ac:0e:93:5f:53:69:4e:d0:2a:b2:7f:
                    01:58:b3:47:e8:a1:5a:f9:4d:97:de:07:15:63:e9:
                    c1:b7:75:ea:07:ed:05:9c:32:6a:cb:49:b7:f7:0c:
                    2c:5f:80:22:10:3b:e6:31:18:48:7b:df:81:7c:38:
                    2f:d4:85:48:5a:67:14:3c:19:6a:be:29:17:ba:cb:
                    91:39:07:d6:7f:96:42:96:ab:91:d7:42:20:1e:76:
                    35:34:43:bb:33:f4:f1:e9:84:d7:ba:7e:d9:5d:ba:
                    a9:0d:36:07:07:f7:ed:f0:22:71:6b:10:f6:52:69:
                    5a:a9:35:60:8b:a2:ad:b6:87:94:45:17:a4:76:f1:
                    95:2e:69:86:53:de:8d:fd:f9:a8:74:d7:41:56:62:
                    98:6f:65:93:ea:7f:f0:7a:91:54:f3:48:7b:d4:79:
                    2f:92:ce:5a:e2:46:83:eb:34:d9:42:cc:fa:69:11:
                    44:27:4f:2d:7d:ee:70:10:17:ee:bf:a5:db:c4:f2:
                    1d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B4:17:27:33:28:54:83:BA:47:87:09:C7:83:AE:D8:38:8C:1D:1D
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32332e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:a8:6f:b7:e9:6f:50:37:54:88:e9:1d:b0:b6:2f:a3:fa:e5:
         8f:c0:9f:cd:74:da:10:b9:40:4b:3b:82:a9:3c:07:7e:e7:05:
         0d:92:e7:90:65:3c:ea:9d:ef:30:9d:b0:77:07:ee:e3:77:87:
         4b:2e:db:29:26:b7:ef:df:a6:d6:6e:65:67:c7:fc:68:49:23:
         dd:13:78:2b:0e:66:84:ff:4c:e1:7a:a2:f0:a0:7b:37:11:b8:
         71:29:7b:57:f8:93:20:d3:ce:d1:34:bf:e4:40:ce:5a:a9:0c:
         f2:96:f0:92:d2:ea:85:6a:81:49:32:94:1a:6a:74:bc:df:4f:
         f6:21:f4:47:d7:02:91:e8:82:c1:a0:76:f3:9a:53:c4:cb:10:
         7f:df:8d:b7:fb:ee:13:a3:3b:1d:67:63:a9:6b:3d:b4:94:6c:
         0a:85:2e:79:4e:76:10:d4:34:cf:b4:4f:af:43:74:b2:84:41:
         17:e0:e0:fb:e5:ef:a4:44:d1:b4:87:f9:a1:2b:2d:73:d9:a1:
         34:55:c4:4f:c5:61:76:79:42:80:fe:57:73:49:cb:6d:3a:19:
         62:53:9e:51:98:a4:ab:b9:31:94:a6:d0:54:88:20:fe:c9:50:
         ed:24:63:fa:07:5b:88:df:17:71:4b:80:69:b9:f8:6c:89:eb:
         d7:54:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org