Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3230342e302f32322d3232203d3e20323632373230.roa
File:                     3137372e382e3230342e302f32322d3232203d3e20323632373230.roa (raw, json)
Hash identifier:          oNnl1McAgmL8lmxUuQ1x81YfHfVuykMRav0aH3svcEA=
Subject key identifier:   E9:8D:74:B7:36:0B:7B:98:80:AC:97:5C:5E:9E:18:D9:3E:AC:9E:3E
Certificate issuer:       /CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
Certificate serial:       80E5D9BF6F435AF1026953C86EDE93F5572B17
Authority key identifier: 1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3230342e302f32322d3232203d3e20323632373230.roa
Signing time:             Tue 28 Mar 2023 20:25:51 +0000
ROA not before:           Tue 28 Mar 2023 20:20:51 +0000
ROA not after:            Tue 26 Mar 2024 20:25:51 +0000
asID:                     262720
IP address blocks:        177.8.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            80:e5:d9:bf:6f:43:5a:f1:02:69:53:c8:6e:de:93:f5:57:2b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Validity
            Not Before: Mar 28 20:20:51 2023 GMT
            Not After : Mar 26 20:25:51 2024 GMT
        Subject: CN=E98D74B7360B7B9880AC975C5E9E18D93EAC9E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a1:8f:ec:71:4c:62:c0:a5:7b:39:a5:9d:ec:
                    d1:a1:7e:b9:96:33:40:40:96:a8:11:cd:a4:66:a0:
                    58:6a:46:67:a9:19:7f:f0:3a:50:42:60:ea:71:c5:
                    67:e0:9a:10:79:4b:3e:51:44:90:fb:a9:a8:7a:61:
                    ef:df:57:94:58:43:81:99:5f:64:c2:ac:88:03:47:
                    b5:fe:0c:f8:8f:62:d2:67:c8:cb:2e:75:cf:f2:4f:
                    9b:ec:f9:67:f8:ab:c5:21:ea:69:f6:c4:82:d4:24:
                    25:e2:44:87:b1:4b:b7:c4:bd:b7:fb:6a:f3:97:ad:
                    48:7f:23:e6:d5:3f:94:88:09:fa:3f:b4:75:95:d6:
                    41:0b:e7:5a:2a:7c:fc:e6:d8:9d:2a:3b:4b:28:c3:
                    63:33:2d:16:d0:9d:87:2d:f6:43:20:1c:ec:9d:d5:
                    bc:03:e1:c5:0b:10:b3:02:7b:06:54:9e:c8:61:c4:
                    30:9b:75:ea:85:33:da:65:c3:00:a8:56:87:36:38:
                    dc:75:20:67:6b:59:c5:b7:34:33:19:c7:93:9a:76:
                    74:21:28:e6:53:aa:38:ac:87:84:c5:fc:4d:aa:f0:
                    04:2a:64:cd:4f:b0:b0:65:1b:c8:b4:3a:83:6f:29:
                    57:85:4d:62:48:a7:a6:0d:dc:6b:d5:46:f8:27:97:
                    59:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8D:74:B7:36:0B:7B:98:80:AC:97:5C:5E:9E:18:D9:3E:AC:9E:3E
            X509v3 Authority Key Identifier:
                keyid:1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3230342e302f32322d3232203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:d3:b6:cc:30:40:48:80:6f:46:a8:79:2c:a3:f1:40:af:cc:
         b5:73:05:cd:1b:a6:9e:a0:49:3a:98:42:02:f6:ba:cd:8a:55:
         ca:2f:17:88:c8:93:95:2f:40:c6:97:73:96:dd:39:ba:d8:3c:
         69:8e:b1:a7:42:7e:b7:b7:d8:97:7f:cb:0e:7c:3a:e0:43:e3:
         f5:b4:10:1c:fb:d1:64:43:6c:81:c7:9c:a0:86:3d:c9:ea:ff:
         ae:d6:54:62:12:04:02:a7:b4:ef:3c:df:b2:10:6c:83:5d:9f:
         d4:a6:bb:3b:15:b2:30:a5:e4:a1:8b:45:88:3d:84:47:8c:7c:
         84:1d:1b:7e:81:7a:c1:b5:65:35:17:0b:86:d2:bc:25:f4:8e:
         d7:42:48:92:e0:39:d3:9b:7a:ee:e8:a9:dd:9c:43:86:c6:e5:
         a5:68:c4:2b:9d:6a:ba:54:bc:2c:5f:08:6e:13:a3:0d:6f:b7:
         ba:a6:42:2f:68:19:d9:df:fe:16:f4:e8:3f:9d:9e:91:c2:c6:
         02:bf:fb:ed:e4:ca:d4:7e:a9:86:3f:65:c4:dc:7f:83:24:c2:
         f0:b8:93:92:0d:b7:e8:3d:e1:3b:99:95:df:47:68:1c:5c:2e:
         c9:97:6b:24:fd:41:04:a5:21:89:9b:bf:98:92:f8:c9:7b:9f:
         46:d9:31:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org