Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3139382e302f32342d3234203d3e20323632373230.roa
File:                     3137372e382e3139382e302f32342d3234203d3e20323632373230.roa (raw, json)
Hash identifier:          PkkPZDXPyr/TAgMSVzz6U/pfqmjUHLXYYugS1EGSnNo=
Subject key identifier:   24:B4:58:94:D3:66:8A:F5:3A:9A:53:B0:C6:18:AB:34:BB:44:52:DB
Certificate issuer:       /CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
Certificate serial:       1248AA037CB279703A5A3558BADADDCE430F703E
Authority key identifier: 1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3139382e302f32342d3234203d3e20323632373230.roa
Signing time:             Tue 28 Mar 2023 20:25:51 +0000
ROA not before:           Tue 28 Mar 2023 20:20:51 +0000
ROA not after:            Tue 26 Mar 2024 20:25:51 +0000
asID:                     262720
IP address blocks:        177.8.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:48:aa:03:7c:b2:79:70:3a:5a:35:58:ba:da:dd:ce:43:0f:70:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Validity
            Not Before: Mar 28 20:20:51 2023 GMT
            Not After : Mar 26 20:25:51 2024 GMT
        Subject: CN=24B45894D3668AF53A9A53B0C618AB34BB4452DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:25:3a:8e:51:f2:8b:01:9f:76:58:60:b1:c4:
                    94:5a:95:6b:f0:4f:a5:ab:28:48:3f:88:52:80:c2:
                    5f:a3:0f:9d:6e:bb:ab:99:cd:17:2f:b8:d3:33:f4:
                    7a:a4:c2:d1:f4:82:0d:2e:f4:89:27:03:32:c4:7b:
                    c4:94:07:8d:5e:4d:d4:a3:e8:87:99:06:92:50:65:
                    d0:52:0d:fc:de:67:2d:78:7a:07:9b:09:29:18:09:
                    80:f0:28:57:6f:d4:50:9c:7b:0a:73:b2:8b:8d:69:
                    29:04:c1:42:a5:51:ca:f5:95:1f:99:d6:5e:c4:74:
                    63:0b:97:71:27:95:4f:a0:a0:5b:a8:7d:83:d7:5a:
                    06:33:5c:2f:fe:5c:8f:78:d6:01:50:c1:ee:a7:e1:
                    69:cd:ca:92:78:a1:0e:b9:ad:47:af:51:4d:55:6a:
                    ad:69:e5:86:65:cc:25:94:ba:3c:a4:d7:5b:cf:29:
                    a4:68:2a:e6:03:b7:7a:01:bb:17:28:a2:3d:e0:84:
                    86:bf:fc:98:5e:b1:e6:18:d4:cf:6a:83:3e:d3:38:
                    60:fc:44:6f:71:11:d4:78:f3:e7:eb:b1:04:63:af:
                    1a:ea:33:1e:fc:3a:56:34:22:42:ea:df:35:d8:eb:
                    fc:86:05:29:82:af:ef:e0:89:57:d8:9b:96:d4:08:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B4:58:94:D3:66:8A:F5:3A:9A:53:B0:C6:18:AB:34:BB:44:52:DB
            X509v3 Authority Key Identifier:
                keyid:1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3139382e302f32342d3234203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:7b:f7:cc:3a:32:16:f7:a1:9e:c1:1a:9a:bb:60:1e:d5:72:
         3b:69:23:71:d7:e5:25:12:b0:da:ba:1c:8c:51:6f:c5:32:43:
         7d:36:fc:70:a0:d2:59:77:c2:15:1e:df:a2:1e:4a:9d:bd:fa:
         95:80:6d:fe:80:b3:b4:c3:6b:93:03:eb:e4:f1:b1:97:bb:0e:
         f3:62:0f:d2:42:d9:09:06:e7:df:3f:5e:5a:d6:61:fd:a4:2d:
         e8:5d:41:11:e2:7c:ec:38:b2:37:f4:d7:c1:93:2e:64:c1:10:
         8a:b1:86:25:39:43:c3:2a:5e:6c:99:91:bd:65:e9:cc:7a:80:
         5a:ac:f7:d0:e3:c5:ea:51:de:15:51:36:2a:a2:69:92:cb:e9:
         2e:64:d6:6f:00:f1:49:ac:94:d6:92:b7:02:39:89:1e:cc:c2:
         52:d0:eb:c2:f2:73:28:49:88:52:75:84:bb:8f:76:df:da:ff:
         fa:23:78:94:c1:5e:37:59:ab:40:52:5a:ae:18:27:0c:94:c3:
         34:f4:18:86:71:e8:93:e0:94:7c:42:46:69:38:ac:94:17:7a:
         63:3a:10:bc:29:99:f7:da:aa:fa:61:61:7b:86:5b:37:27:91:
         56:06:a7:e0:12:17:14:0c:34:eb:8f:22:2d:02:ac:1a:b1:cd:
         a3:b9:42:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org