Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35362e302f32322d3232203d3e203532353637.roa
File:                     3137372e38362e35362e302f32322d3232203d3e203532353637.roa (raw, json)
Hash identifier:          sISAg+Oj2LpNIqRrZcTKZ918J/r/tnguDONnIQ2v0Co=
Subject key identifier:   4D:E8:8F:66:C5:CE:28:FE:E8:4B:35:FD:52:7F:D9:B6:77:3C:0A:52
Certificate issuer:       /CN=67EB2BACF43158300326528278D92ACE7CF7EB92
Certificate serial:       13607C1EA5B78FC541BCBB4D18CCD38C525D5BD6
Authority key identifier: 67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35362e302f32322d3232203d3e203532353637.roa
Signing time:             Mon 04 Mar 2024 15:12:01 +0000
ROA not before:           Mon 04 Mar 2024 15:07:01 +0000
ROA not after:            Mon 03 Mar 2025 15:12:01 +0000
asID:                     52567
IP address blocks:        177.86.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:60:7c:1e:a5:b7:8f:c5:41:bc:bb:4d:18:cc:d3:8c:52:5d:5b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EB2BACF43158300326528278D92ACE7CF7EB92
        Validity
            Not Before: Mar  4 15:07:01 2024 GMT
            Not After : Mar  3 15:12:01 2025 GMT
        Subject: CN=4DE88F66C5CE28FEE84B35FD527FD9B6773C0A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:b4:fa:83:ba:ed:c3:f4:82:22:ef:b0:b9:
                    0c:6a:34:f6:44:48:cf:00:e5:15:8a:0d:78:75:e4:
                    98:67:a3:c3:c9:4a:be:0f:e8:94:e8:51:34:d0:7c:
                    5b:59:91:77:ce:73:eb:27:0a:fd:62:4a:5f:14:cc:
                    2a:9b:a0:86:96:29:7b:33:a9:b6:87:c3:86:bb:38:
                    c4:02:46:19:0b:1b:0c:98:19:c4:ec:6b:ce:fa:0c:
                    fe:72:5f:0f:da:3d:74:51:04:1f:67:a0:61:d9:33:
                    2d:83:d5:3c:e5:17:ae:16:fc:c4:cd:97:02:19:79:
                    c9:60:7a:7a:8d:af:cb:80:ca:c2:ab:d0:95:62:f9:
                    5c:31:f4:2a:4b:4c:cf:03:77:30:0a:b7:39:a2:61:
                    b2:0b:0c:60:38:fb:3b:ac:56:f3:fd:e9:a2:69:14:
                    63:77:d3:27:59:48:2c:54:88:1a:56:b6:a8:2a:2e:
                    1b:25:71:20:b7:e9:bf:9b:90:5c:36:12:f9:ab:92:
                    89:98:1f:fe:f0:d7:24:8c:80:10:17:3c:11:72:41:
                    d2:97:6d:5c:b9:2b:17:d5:e9:ec:4b:3a:9f:d6:91:
                    0c:2c:4d:a9:5f:f1:a4:bc:c2:41:9f:79:ac:69:1e:
                    ba:aa:6a:c7:3c:16:50:32:04:b6:e3:c2:b5:b0:2f:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E8:8F:66:C5:CE:28:FE:E8:4B:35:FD:52:7F:D9:B6:77:3C:0A:52
            X509v3 Authority Key Identifier:
                keyid:67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/67EB2BACF43158300326528278D92ACE7CF7EB92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35362e302f32322d3232203d3e203532353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:ba:55:17:7d:5e:12:2d:06:e3:b6:31:21:85:c4:9c:af:ed:
         9e:29:81:68:d5:c6:cb:0c:62:e7:ea:77:94:e0:45:0d:7f:f2:
         f5:9e:50:98:08:4e:cf:f2:bb:56:42:29:e0:09:47:3d:96:8c:
         44:ed:90:36:4f:0d:cc:64:74:d5:a7:4d:e2:33:50:df:32:5d:
         3b:73:5f:f7:41:21:bb:84:cf:5f:3d:d8:a2:94:71:1b:b9:9e:
         5a:53:43:d0:21:1c:4a:f2:31:47:f6:9e:fc:c7:00:8c:c7:d3:
         70:04:e2:d4:5d:4c:bc:67:05:1c:5e:88:04:d4:22:53:48:2d:
         56:23:b3:0e:eb:05:23:26:29:c0:79:9c:cc:2a:b0:bf:f6:75:
         d6:a3:c4:9f:ec:08:a8:39:48:03:41:c7:44:48:4a:0e:13:4b:
         e2:73:da:d8:cb:99:65:47:a6:22:7e:2f:02:23:32:9a:81:de:
         e9:0a:42:72:88:4f:05:e0:bc:21:be:8f:fd:5a:d6:b8:51:e9:
         fe:1d:98:5b:0c:61:a7:31:45:eb:af:ae:c2:83:df:7b:1c:da:
         95:8a:02:89:59:6f:b8:8b:9e:21:d5:dd:c6:dd:cd:48:71:24:
         6b:5e:15:bc:29:54:a7:6e:b8:24:1d:f8:99:b2:71:dd:69:7c:
         55:c7:be:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org