Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233382e302f32332d3234203d3e203631363839.roa
File:                     3137372e38342e3233382e302f32332d3234203d3e203631363839.roa (raw, json)
Hash identifier:          a3QWTLik7TfVXri5YRvXJTqNjZwY7K8A/ltQ39+bAVc=
Subject key identifier:   D4:BC:D4:42:E2:CA:97:9E:AB:3A:4A:26:55:2F:E7:0E:F3:B8:C9:64
Certificate issuer:       /CN=725625A656CCD2BE3F3F0F87D9A4BF2E192BE414
Certificate serial:       63EBB1DE23B5DF48AB455D4975DF7D5FBC8A0B51
Authority key identifier: 72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233382e302f32332d3234203d3e203631363839.roa
Signing time:             Wed 10 Apr 2024 13:37:00 +0000
ROA not before:           Wed 10 Apr 2024 13:32:00 +0000
ROA not after:            Wed 09 Apr 2025 13:37:00 +0000
asID:                     61689
IP address blocks:        177.84.238.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:eb:b1:de:23:b5:df:48:ab:45:5d:49:75:df:7d:5f:bc:8a:0b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725625A656CCD2BE3F3F0F87D9A4BF2E192BE414
        Validity
            Not Before: Apr 10 13:32:00 2024 GMT
            Not After : Apr  9 13:37:00 2025 GMT
        Subject: CN=D4BCD442E2CA979EAB3A4A26552FE70EF3B8C964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:61:70:07:9f:0a:dd:3a:99:36:37:aa:8f:4c:
                    c8:15:1f:71:a3:40:a5:c6:a2:61:f1:ab:3e:1b:50:
                    8c:f3:40:bb:13:92:14:6e:e7:e9:14:80:a4:d7:62:
                    81:29:b6:82:7b:5a:09:b4:ae:6e:b3:94:9a:9e:dd:
                    3c:ff:9d:0f:88:0d:3f:86:71:f6:2f:9a:f8:ff:63:
                    4a:4f:84:4c:34:21:f4:10:70:0c:73:f9:9b:0e:9a:
                    6b:54:3e:32:e9:47:b9:78:1c:2b:80:47:2f:f6:b9:
                    a8:d0:2d:4e:70:08:28:57:f6:7e:37:85:b2:a7:40:
                    f0:b2:01:59:aa:3d:32:4a:fc:48:28:3c:d7:78:0b:
                    5d:a0:8f:29:6d:e5:7a:ac:04:9d:ed:20:d0:a5:bf:
                    50:01:0f:f2:57:8d:b1:fd:d5:56:1e:42:cb:8d:2a:
                    68:28:a0:66:1d:94:7b:7f:8c:9d:ed:67:df:09:be:
                    5a:c2:cc:02:b4:ac:bd:58:26:a8:9e:06:83:1f:3e:
                    d7:88:47:fe:5f:c8:0e:25:b7:e3:53:6f:a3:41:8d:
                    77:06:ca:bf:0c:80:19:d7:03:ac:ec:e0:4d:ed:ee:
                    5f:27:6b:a4:72:7b:f4:99:6e:96:07:9b:7a:7b:e9:
                    29:c3:da:bc:4e:c3:05:2a:fa:0d:ea:55:f6:e9:10:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BC:D4:42:E2:CA:97:9E:AB:3A:4A:26:55:2F:E7:0E:F3:B8:C9:64
            X509v3 Authority Key Identifier:
                keyid:72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233382e302f32332d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:30:be:6d:51:5d:36:e7:10:fc:52:1b:26:79:f9:cd:1d:1a:
         fa:17:55:df:7f:55:dc:89:c1:8c:6f:da:cb:8e:7b:cf:b5:31:
         53:c4:c6:d5:3f:76:1e:bd:82:34:62:8f:4e:a8:3b:db:18:b3:
         7c:c4:91:65:93:70:3f:92:2c:e0:7b:42:d1:e4:48:cf:67:8b:
         97:d3:de:eb:e9:02:44:60:c8:24:3f:8a:9b:63:9d:24:92:b0:
         4d:db:3f:bb:c4:fa:c7:38:1b:6c:32:27:78:99:a1:f8:f6:80:
         26:45:45:f7:b9:c3:74:d8:0b:2d:7f:67:b9:b9:ab:c6:9c:b8:
         ec:1f:db:9a:3a:44:76:97:b3:28:89:28:ed:fe:d5:af:81:23:
         70:a0:fe:55:d3:94:53:4e:cc:fe:6f:04:6b:2a:72:ce:91:56:
         78:b7:e5:6c:4a:93:c3:fe:6f:a6:35:52:18:34:f3:e6:95:3c:
         4d:70:8f:38:72:87:23:4d:5d:ca:86:30:dc:9b:68:0e:2a:52:
         cf:ed:51:44:a1:99:d2:71:34:dc:2d:b4:68:ac:d2:56:a3:af:
         a3:6d:5f:e6:51:36:f6:3a:39:14:c7:27:08:3d:d9:32:6a:1e:
         8d:2f:77:8c:df:f8:22:c3:65:34:0e:e8:39:49:67:97:15:27:
         8a:d0:b2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org