Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32362e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e32362e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          61L+CQmDTv9j6lcJqg8rm5cXySLB9ZOZE43/UY7Qkq8=
Subject key identifier:   A9:C3:68:D8:8B:EC:54:35:BA:83:11:AF:BE:05:CC:44:1C:31:1B:41
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       090DCAA163C48BFE925CAEFC375E35CA88EBF765
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32362e302f32342d3234203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:33 +0000
ROA not before:           Thu 17 Nov 2022 17:58:33 +0000
ROA not after:            Thu 16 Nov 2023 18:03:33 +0000
asID:                     28360
IP address blocks:        177.8.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0d:ca:a1:63:c4:8b:fe:92:5c:ae:fc:37:5e:35:ca:88:eb:f7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:33 2022 GMT
            Not After : Nov 16 18:03:33 2023 GMT
        Subject: CN=A9C368D88BEC5435BA8311AFBE05CC441C311B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:fc:ab:39:ba:92:13:1e:7b:29:be:87:c2:
                    1b:5b:5c:e1:e1:43:dc:8f:c9:60:10:ca:8c:77:63:
                    f2:77:59:e5:80:82:8c:5d:07:ec:f4:6d:0c:11:64:
                    ae:d3:14:ac:4b:04:15:cf:44:84:62:d9:09:31:d8:
                    c4:8c:9e:6c:48:83:6a:6b:6e:51:c9:d3:9f:79:f1:
                    10:7b:49:1f:ee:ce:14:e9:f4:2b:98:76:93:d5:14:
                    8f:ef:f7:a4:e6:0d:da:74:c9:67:e3:0b:e2:48:aa:
                    ca:0b:9b:d9:fe:03:d9:ca:01:e3:e9:de:1d:30:c2:
                    42:65:c2:ef:c1:20:30:88:35:2a:40:ab:46:a1:64:
                    79:18:63:db:97:90:c2:09:91:bc:b4:4b:ec:97:8f:
                    4e:d4:81:5a:d5:14:5b:a7:f3:76:26:07:db:93:33:
                    77:f5:af:2d:b1:00:66:7e:5e:61:34:5f:96:7a:ba:
                    c5:ab:9e:7b:39:80:52:dd:57:c7:47:50:cd:13:f2:
                    c6:b4:2a:d6:94:13:5d:e4:6d:48:de:e1:3b:53:3a:
                    5d:c3:18:b0:da:de:6e:52:17:71:a7:d1:c8:b3:1c:
                    a5:ef:91:c3:92:f7:f7:ff:6f:2c:64:d0:13:bd:09:
                    84:6a:d6:35:0c:f0:95:4f:06:47:80:15:40:cf:a6:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C3:68:D8:8B:EC:54:35:BA:83:11:AF:BE:05:CC:44:1C:31:1B:41
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32362e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:59:44:cc:f7:67:69:fb:e2:41:df:08:1d:41:f3:f6:7e:be:
         b4:e6:96:e5:45:a6:20:e3:b7:66:26:ac:eb:8c:df:98:b6:1a:
         9c:4f:64:f2:a5:eb:b0:5e:ed:ac:d1:bb:c6:ab:3a:df:10:17:
         bd:a0:5b:51:bb:5b:9b:98:34:5f:f1:84:6b:73:4f:98:79:08:
         53:38:0d:c2:9d:8a:2d:1b:ff:4c:04:54:bd:1e:92:b2:99:5c:
         ad:86:cd:6c:95:dc:fb:60:ce:d7:4e:02:93:25:a1:49:99:61:
         1c:60:f8:2d:b1:81:23:1b:4b:8c:74:93:36:c9:b4:5d:4d:73:
         a0:ed:fe:12:8b:ee:2a:9c:84:30:45:e6:3d:5f:17:48:12:66:
         dc:02:6f:af:d5:e1:a0:f1:89:07:38:88:e3:94:06:d9:19:ab:
         f3:d4:ff:d4:a6:4a:04:99:10:3d:39:49:1f:2f:0d:fa:73:cb:
         e9:97:2e:d5:b8:2e:60:d5:a1:e7:97:68:97:b2:14:32:df:dc:
         e2:43:f5:eb:2e:4b:12:49:a8:a1:48:d2:e1:b6:e0:f1:c6:69:
         d9:a7:34:93:13:04:46:a3:ee:56:f6:bb:00:2f:3f:92:7c:79:
         01:1e:47:26:af:d4:9e:a2:94:19:31:57:03:dd:3a:f3:e7:61:
         c0:43:5e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org