Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e36372e38382e302f32322d3234203d3e203532363734.roa
File:                     3137372e36372e38382e302f32322d3234203d3e203532363734.roa (raw, json)
Hash identifier:          ijKOJIiapETQeiQigj2ezSi+XGLHn+2jmvv9oc+x0/k=
Subject key identifier:   9C:46:0B:0F:0C:02:5E:AE:5B:F6:7E:54:24:35:20:77:9C:1B:AA:25
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       551B568FFD0025949B09172030B086114134389B
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e36372e38382e302f32322d3234203d3e203532363734.roa
Signing time:             Wed 21 Feb 2024 22:53:25 +0000
ROA not before:           Wed 21 Feb 2024 22:48:25 +0000
ROA not after:            Wed 19 Feb 2025 22:53:25 +0000
asID:                     52674
IP address blocks:        177.67.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1b:56:8f:fd:00:25:94:9b:09:17:20:30:b0:86:11:41:34:38:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb 21 22:48:25 2024 GMT
            Not After : Feb 19 22:53:25 2025 GMT
        Subject: CN=9C460B0F0C025EAE5BF67E54243520779C1BAA25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:4b:df:61:71:09:63:5c:9f:5b:02:b0:6f:
                    54:78:91:8b:68:49:12:b5:7b:9b:cf:59:cb:95:1f:
                    b7:01:5c:f6:28:85:f1:71:f3:6e:b6:aa:63:3f:d7:
                    38:46:92:fd:ef:b7:c8:ef:20:4c:70:c4:b5:56:69:
                    07:c5:f4:77:e5:36:eb:c6:d4:89:dc:46:0f:37:57:
                    35:da:fa:bc:6e:00:b0:a7:c7:1d:46:a5:b9:88:76:
                    9b:3b:ec:23:13:34:93:fa:23:89:02:7f:c4:50:6d:
                    47:3b:9a:97:2d:8e:d9:ae:ab:56:26:a0:e8:95:f8:
                    1d:7c:38:d7:9b:bd:59:77:bd:4c:fe:ef:53:86:23:
                    15:66:ca:e6:30:ba:9b:27:99:24:2a:a8:8b:cf:a1:
                    9e:4b:e5:a0:d8:52:3b:4b:b1:32:8e:28:ed:1c:aa:
                    f3:72:e8:a8:72:d4:c3:06:4f:93:bf:80:86:1e:f1:
                    dc:d7:09:3a:82:06:cd:40:03:20:43:b5:c9:7d:b7:
                    20:40:1e:1f:5d:10:30:28:cb:54:a5:e2:b9:fb:8b:
                    b7:9a:44:cc:1b:d7:82:b7:4f:23:df:11:dc:9b:a6:
                    b6:b3:e6:10:ca:44:46:8f:a6:40:0a:d0:f9:2e:00:
                    da:76:90:d4:df:80:cf:83:b5:75:0f:b0:7e:fc:d5:
                    a0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:46:0B:0F:0C:02:5E:AE:5B:F6:7E:54:24:35:20:77:9C:1B:AA:25
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e36372e38382e302f32322d3234203d3e203532363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:ad:be:b8:11:68:08:43:57:26:66:59:1c:03:23:89:b0:33:
         67:6b:eb:08:b8:af:fa:57:8c:f1:65:59:24:88:93:f3:bb:92:
         42:af:04:98:9c:26:80:25:3b:ad:4c:17:c8:d4:a2:b7:d5:37:
         e6:76:b8:b0:58:43:94:bd:4d:ce:fd:98:98:02:db:51:d6:13:
         e0:5d:3a:1f:8e:e8:8f:76:f8:97:e5:01:80:8e:d1:74:e8:78:
         2d:5c:d5:44:41:ec:e5:52:29:99:c5:96:99:ac:bc:22:bb:4a:
         79:be:b4:ec:e3:0a:05:60:83:86:7e:2e:0d:c8:a5:63:dd:a7:
         fb:d5:69:d8:0e:10:4d:b3:ef:3e:a8:17:26:b8:4d:39:ea:e2:
         e0:7c:c0:e7:07:a5:a1:bc:75:ee:c2:4d:e2:00:16:96:ab:0c:
         04:66:31:a8:e6:07:bd:48:22:a6:9c:0f:f5:0a:f6:58:47:29:
         5a:fe:04:fb:b5:7e:9a:59:00:40:a3:15:b2:e0:59:a7:f7:15:
         2c:c1:12:05:04:69:af:b3:3b:d8:4a:96:33:9b:2d:8a:5e:0b:
         24:e8:83:c3:57:70:44:58:09:be:6b:7d:cc:88:23:dd:d7:77:
         5a:2b:5f:43:c8:03:07:82:ba:38:5a:74:7d:43:cf:0d:c1:ad:
         7e:7a:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org