Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/3137372e3232312e3134382e302f32342d3234203d3e20323730373432.roa
File:                     3137372e3232312e3134382e302f32342d3234203d3e20323730373432.roa (raw, json)
Hash identifier:          Dn56loSsAakqnxTGmbqEjGAQMO59znW7A/av4pm3ONw=
Subject key identifier:   26:2C:11:FE:EA:1D:80:B6:7E:64:36:DE:79:6A:46:38:DA:F4:17:9D
Certificate issuer:       /CN=8BDC3395A20790E2B58712C45CC172352B05BB02
Certificate serial:       573A880FBFFA83B490DFEEC5658591981269CC3E
Authority key identifier: 8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDC3395A20790E2B58712C45CC172352B05BB02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/3137372e3232312e3134382e302f32342d3234203d3e20323730373432.roa
Signing time:             Thu 23 Feb 2023 04:01:53 +0000
ROA not before:           Thu 23 Feb 2023 03:56:53 +0000
ROA not after:            Thu 22 Feb 2024 04:01:53 +0000
asID:                     270742
IP address blocks:        177.221.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3a:88:0f:bf:fa:83:b4:90:df:ee:c5:65:85:91:98:12:69:cc:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BDC3395A20790E2B58712C45CC172352B05BB02
        Validity
            Not Before: Feb 23 03:56:53 2023 GMT
            Not After : Feb 22 04:01:53 2024 GMT
        Subject: CN=262C11FEEA1D80B67E6436DE796A4638DAF4179D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:68:33:39:a3:ab:08:d4:ec:bb:8c:f9:d8:
                    02:88:01:c4:53:4a:96:d0:68:84:47:69:4a:22:aa:
                    a4:fb:b2:f1:04:cf:7e:94:6b:43:30:ea:d0:a2:1a:
                    1f:5b:69:32:de:5c:35:1f:11:55:12:d7:b4:f5:7f:
                    50:5f:b6:ea:40:84:21:34:f7:d0:2c:62:d2:2d:e9:
                    3c:ed:3e:3a:2c:ed:92:21:14:71:d5:06:d0:a3:4a:
                    71:8d:f5:15:02:25:5b:59:58:6b:68:20:52:5a:8c:
                    bd:6e:63:f0:bb:d3:8c:ba:ad:98:b3:a9:b3:fa:2f:
                    fe:68:08:03:e6:27:76:8e:48:02:38:31:3f:01:43:
                    16:e6:e0:2e:4a:31:80:c3:ed:f0:b5:2c:ca:1c:03:
                    bc:9f:ee:d4:fc:13:dd:21:32:8e:95:3a:bd:1d:ed:
                    94:1a:d9:eb:22:9a:28:ea:4b:8e:e6:f8:9f:5b:bf:
                    a0:f1:cd:c2:6d:70:ac:a0:cc:92:01:67:ef:31:0b:
                    af:6d:4b:f7:40:9b:38:bc:32:3f:a3:5f:63:16:42:
                    30:4d:5f:53:7a:44:d8:79:af:04:ef:3c:89:6d:0d:
                    ad:24:29:f3:1c:4e:cf:2b:9c:fc:02:67:6b:05:df:
                    c2:90:e2:4c:74:4f:9c:89:33:83:7d:d5:d1:85:8e:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2C:11:FE:EA:1D:80:B6:7E:64:36:DE:79:6A:46:38:DA:F4:17:9D
            X509v3 Authority Key Identifier:
                keyid:8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/8BDC3395A20790E2B58712C45CC172352B05BB02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDC3395A20790E2B58712C45CC172352B05BB02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/3137372e3232312e3134382e302f32342d3234203d3e20323730373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:f1:77:d3:02:b7:62:c3:48:38:01:4d:60:bd:97:78:9e:3a:
         e6:39:bb:11:fe:86:0d:76:44:f3:9d:c3:10:e9:49:5e:3b:74:
         f8:b2:50:65:fb:22:df:0a:e2:f1:f5:72:30:1c:00:6a:73:03:
         a6:64:d7:3c:50:45:d6:b2:c7:1a:8d:8c:58:ea:41:22:55:d0:
         16:0e:4e:7c:0d:dd:89:a7:26:e6:e6:62:71:10:a3:4f:e0:47:
         97:23:71:cf:f8:4d:41:88:cf:c1:b1:90:6f:95:33:34:e8:68:
         68:69:0d:9b:db:d7:3f:47:e7:80:a5:27:76:b7:6a:eb:8c:a5:
         16:89:a9:1d:ca:08:9c:b2:0c:05:03:be:17:49:9e:a4:c6:50:
         e7:53:96:ac:b8:d4:8a:78:2b:e4:c3:55:eb:82:23:99:da:6b:
         d5:a9:11:16:00:ca:8b:db:53:e4:22:dc:5d:ba:9e:63:62:61:
         58:eb:e0:09:f5:57:7e:fc:ff:56:2c:d7:22:b0:ec:8a:1b:e4:
         1f:a5:f4:03:33:9d:65:10:37:a7:47:8e:aa:11:64:bf:4c:9c:
         4a:5c:83:e2:90:8d:73:c8:c5:5c:7a:42:96:08:7a:f2:e2:dc:
         43:31:61:02:d1:5d:9e:18:32:c3:bc:97:78:25:89:fd:b1:b3:
         cd:7b:17:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org