Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3130382e302f32322d3232203d3e20323633363134.roa
File:                     3137372e32332e3130382e302f32322d3232203d3e20323633363134.roa (raw, json)
Hash identifier:          BMZ+f5rWxlFfP0jH2WOcGywtyRY9oi0km6qbqz6Htng=
Subject key identifier:   C1:F8:E1:C0:8D:92:CC:90:CE:2C:2F:D9:0C:9C:C9:87:03:82:71:F4
Certificate issuer:       /CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
Certificate serial:       422D4F8122032B671CA4612E1723F15A540E8C74
Authority key identifier: 0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3130382e302f32322d3232203d3e20323633363134.roa
Signing time:             Fri 09 Feb 2024 17:19:01 +0000
ROA not before:           Fri 09 Feb 2024 17:14:01 +0000
ROA not after:            Fri 07 Feb 2025 17:19:01 +0000
asID:                     263614
IP address blocks:        177.23.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2d:4f:81:22:03:2b:67:1c:a4:61:2e:17:23:f1:5a:54:0e:8c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
        Validity
            Not Before: Feb  9 17:14:01 2024 GMT
            Not After : Feb  7 17:19:01 2025 GMT
        Subject: CN=C1F8E1C08D92CC90CE2C2FD90C9CC987038271F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:2b:5b:9b:b5:47:e8:36:d1:9b:4b:a7:d7:
                    e2:b9:18:54:31:85:bb:7a:8d:15:bc:3d:ba:f0:d7:
                    a4:5b:d1:5d:91:dd:d9:99:65:38:87:2c:25:c8:b8:
                    46:30:b0:f5:6e:56:5b:1e:82:e4:31:a2:b2:9a:b4:
                    5a:75:62:3e:2a:3b:ea:3b:f9:1f:65:68:50:a6:ff:
                    a7:06:b7:20:90:fa:78:30:ba:a5:bc:1d:c1:81:39:
                    22:81:1a:75:13:92:65:cc:1f:bb:38:33:61:5e:3f:
                    fb:57:dd:ee:5c:49:fc:cf:c5:e0:a4:99:41:bf:1a:
                    a1:cb:58:75:ac:39:28:5d:ff:97:25:13:f2:57:d5:
                    21:b2:2c:c9:9e:b1:36:79:26:e8:83:1d:7e:d5:72:
                    b1:b3:ea:7d:e4:13:46:1b:09:b8:39:38:d4:72:a9:
                    4a:07:41:7c:8f:02:a4:b3:90:e6:d8:24:8e:a1:f0:
                    fd:bc:d9:6b:35:e7:c5:2d:a4:44:e7:d4:cf:55:dd:
                    39:7d:d4:10:34:dc:3b:eb:a6:5c:11:d0:ab:f2:63:
                    a8:7e:c4:a3:25:22:c0:09:f8:04:a0:e9:f6:51:a8:
                    76:16:17:ae:cd:6e:0e:60:18:25:f5:c8:3c:27:6f:
                    21:35:ff:52:f1:1c:61:96:a6:58:d2:51:76:f9:01:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F8:E1:C0:8D:92:CC:90:CE:2C:2F:D9:0C:9C:C9:87:03:82:71:F4
            X509v3 Authority Key Identifier:
                keyid:0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3130382e302f32322d3232203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:8e:d1:d2:9a:67:c6:40:63:aa:46:79:91:1c:27:77:03:74:
         5a:cc:a0:0e:a7:61:b2:0c:4f:7d:68:d8:56:b6:eb:4b:36:07:
         99:34:01:db:12:d5:c6:12:6b:8a:02:1c:d4:8b:5c:2a:37:62:
         d7:de:8a:f9:7e:06:ae:95:b5:d2:2e:71:ba:67:e6:10:68:88:
         f1:98:ec:88:78:45:91:3e:c7:ec:e1:49:e1:06:87:91:d2:e7:
         8f:b6:82:12:48:6a:e8:d1:a5:ca:22:36:61:f2:c9:9b:d9:6c:
         e4:24:63:a0:ed:4b:6f:f8:5f:4f:f6:f7:9e:0c:ce:66:18:39:
         f7:c3:ec:5a:69:f5:e7:90:ca:85:b7:83:94:3e:8a:45:1a:96:
         33:69:5d:03:8d:40:94:93:4e:5b:52:03:6e:7f:8d:00:3e:e2:
         53:ef:6b:07:7a:31:ce:a3:1e:c3:59:17:7c:fe:1e:b8:2c:e3:
         03:cd:3f:80:34:ef:45:ab:80:44:df:13:b9:a9:01:00:9b:f4:
         32:78:c7:36:d6:41:27:d4:62:77:5a:70:01:d8:c0:1e:33:9c:
         26:e7:13:ce:26:d2:87:bc:e3:5c:ed:a1:b4:7a:c9:95:17:55:
         53:f5:f7:88:58:e7:d8:a9:81:55:51:d9:cd:05:c2:f7:36:b6:
         46:18:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org