Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e33372e302e302f32302d3230203d3e20323632343632.roa
File:                     3137372e33372e302e302f32302d3230203d3e20323632343632.roa (raw, json)
Hash identifier:          8TQxcH4NLswnCS4S0wav+ozGthSCEQ0eTKknw9IPxlc=
Subject key identifier:   AF:44:00:49:93:BE:AB:64:C5:C4:E7:CF:5A:86:F7:ED:52:CC:69:D3
Certificate issuer:       /CN=B6FA119FA160005A846B85E70D1592650CE34DE9
Certificate serial:       0F26B51C5CD5DE5F16409535DBE2E1A8C7F6936F
Authority key identifier: B6:FA:11:9F:A1:60:00:5A:84:6B:85:E7:0D:15:92:65:0C:E3:4D:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6FA119FA160005A846B85E70D1592650CE34DE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e33372e302e302f32302d3230203d3e20323632343632.roa
Signing time:             Mon 04 Mar 2024 14:59:56 +0000
ROA not before:           Mon 04 Mar 2024 14:54:56 +0000
ROA not after:            Mon 03 Mar 2025 14:59:56 +0000
asID:                     262462
IP address blocks:        177.37.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:26:b5:1c:5c:d5:de:5f:16:40:95:35:db:e2:e1:a8:c7:f6:93:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6FA119FA160005A846B85E70D1592650CE34DE9
        Validity
            Not Before: Mar  4 14:54:56 2024 GMT
            Not After : Mar  3 14:59:56 2025 GMT
        Subject: CN=AF44004993BEAB64C5C4E7CF5A86F7ED52CC69D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:7a:ab:80:9d:aa:84:40:78:de:87:d7:92:
                    04:7b:2d:52:4a:94:78:7f:8d:28:ab:d9:61:1d:3d:
                    b8:75:35:07:a1:1d:5b:b5:b1:8c:20:6d:83:95:7b:
                    2a:e9:dc:cf:41:b2:63:63:f8:ac:bd:11:56:1a:cb:
                    a1:50:c9:55:83:3d:25:25:59:0f:38:6a:17:5d:f3:
                    0c:95:c8:c9:19:7d:a4:e2:6f:c2:e5:73:ba:39:d2:
                    58:46:9d:2b:3e:c1:1a:e7:19:fd:66:bc:67:d2:1c:
                    fb:15:3b:9f:d0:eb:2c:28:f1:d2:3c:2a:fd:81:65:
                    3f:8c:3e:3b:1d:2d:65:bf:03:af:73:a7:cc:3c:ae:
                    09:f1:6a:b7:07:31:61:f2:2a:98:10:59:db:50:71:
                    5b:8d:f2:22:82:25:2e:e4:e6:e2:ba:38:47:70:e4:
                    9c:cc:61:1f:8c:f6:4e:17:3d:a7:2d:22:04:fd:07:
                    36:c9:4f:67:d0:ad:5e:e7:38:21:41:21:1e:9c:43:
                    e4:b7:83:ba:14:3c:ec:3b:05:84:fc:de:46:69:38:
                    0a:58:08:10:21:1a:41:d2:44:9d:16:eb:b3:96:e8:
                    bf:7e:57:81:32:84:b4:03:0e:89:da:29:80:05:93:
                    61:01:67:02:cd:81:93:50:fa:8a:43:91:d9:60:df:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:44:00:49:93:BE:AB:64:C5:C4:E7:CF:5A:86:F7:ED:52:CC:69:D3
            X509v3 Authority Key Identifier:
                keyid:B6:FA:11:9F:A1:60:00:5A:84:6B:85:E7:0D:15:92:65:0C:E3:4D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/B6FA119FA160005A846B85E70D1592650CE34DE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6FA119FA160005A846B85E70D1592650CE34DE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e33372e302e302f32302d3230203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:95:45:a2:cc:39:30:88:01:6e:a9:e7:87:97:43:4f:4d:df:
         c9:e4:01:9f:c2:cd:88:4b:8f:21:30:66:fc:47:ae:88:64:f7:
         c2:78:73:90:75:fb:6b:3e:82:65:4c:41:83:9d:1b:e2:ac:29:
         ed:38:73:ec:a3:ba:33:1a:80:ea:f0:9d:55:73:19:91:3e:08:
         58:8a:96:92:7b:60:37:32:57:0c:d7:7e:0d:f0:8f:9d:fa:b6:
         87:a4:82:28:8d:dd:28:66:51:c9:f4:59:41:dc:04:39:06:3a:
         3d:36:0f:28:06:d3:ac:7e:6f:41:0e:f0:db:29:d6:4a:f3:ca:
         e7:71:d2:18:d3:ec:9a:26:b3:10:d9:e8:88:4e:fe:da:37:4a:
         41:51:84:d8:db:4d:d7:d6:45:b5:9d:0c:3d:86:0d:51:3c:66:
         25:b8:97:e2:06:19:8f:71:9b:9e:f4:bc:60:34:6e:83:7d:3f:
         0b:70:54:5a:7e:79:62:7f:3e:26:7f:7a:13:5b:15:37:07:0c:
         30:1d:d5:80:d8:fd:7f:d3:15:45:67:f9:16:54:aa:a8:b9:ba:
         14:ac:3c:44:70:c1:3d:9f:a7:7a:88:41:71:9c:5f:b3:d9:5a:
         d1:22:5f:2e:9e:b4:33:2b:86:c6:61:65:60:67:b9:82:8d:9b:
         d7:d3:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org