Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa
File:                     3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa (raw, json)
Hash identifier:          /1fZILhw42PvZaNeZdQEeb+scexuhic93CRPqLmaaTo=
Subject key identifier:   5A:C1:C5:A2:48:A1:D9:0B:12:3A:75:A2:DB:F4:92:FA:DB:80:F6:95
Certificate issuer:       /CN=57BD1EC8BC001A3303F83653135622A639BE6663
Certificate serial:       524BB89EFFA2087AB410EB0A888A34241715E8
Authority key identifier: 57:BD:1E:C8:BC:00:1A:33:03:F8:36:53:13:56:22:A6:39:BE:66:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BD1EC8BC001A3303F83653135622A639BE6663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa
Signing time:             Wed 23 Aug 2023 14:00:00 +0000
ROA not before:           Wed 23 Aug 2023 13:55:00 +0000
ROA not after:            Fri 23 Aug 2024 14:00:00 +0000
asID:                     262813
IP address blocks:        177.70.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4b:b8:9e:ff:a2:08:7a:b4:10:eb:0a:88:8a:34:24:17:15:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57BD1EC8BC001A3303F83653135622A639BE6663
        Validity
            Not Before: Aug 23 13:55:00 2023 GMT
            Not After : Aug 23 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:39:0c:b2:0f:29:32:07:15:4f:fa:fb:9b:13:
                    af:72:4d:ef:71:6d:04:ef:81:d6:4f:1b:28:57:ec:
                    88:dc:7e:b8:78:21:72:2f:8d:70:8f:43:39:39:5a:
                    8c:f8:fc:37:fd:37:17:a8:6b:eb:4a:0a:4d:6a:69:
                    08:b2:67:ea:42:f4:11:f0:1e:1c:00:03:4b:fd:5c:
                    02:4a:cd:cd:4f:3d:02:b3:a2:1b:be:cc:de:4f:98:
                    2e:48:f1:ca:76:2e:32:db:86:97:26:80:e0:12:b4:
                    62:4f:90:6d:1c:6e:61:28:05:29:18:05:43:13:9f:
                    10:b1:df:c1:46:fa:49:30:42:b4:01:e0:21:0f:88:
                    5d:76:38:c0:90:2e:e7:bc:8a:3b:64:4f:c4:9b:97:
                    4c:fd:08:64:bf:d0:73:e0:7a:0e:d2:fc:8d:fb:4c:
                    c8:0f:18:0e:64:b1:36:6f:31:c5:d2:b3:1b:98:cc:
                    f1:a4:f9:8c:6e:58:0c:9e:6c:29:5e:79:25:8a:f5:
                    b1:16:4c:83:85:f5:e9:09:dd:6c:6c:ec:29:d9:64:
                    f8:1d:a0:ce:29:e6:ae:c6:2a:94:8f:af:ed:09:c9:
                    00:55:50:b7:1f:c8:af:31:be:10:35:f0:cd:29:b4:
                    6f:c9:40:65:d0:f4:59:36:f1:d9:86:fe:2b:ce:01:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C1:C5:A2:48:A1:D9:0B:12:3A:75:A2:DB:F4:92:FA:DB:80:F6:95
            X509v3 Authority Key Identifier:
                keyid:57:BD:1E:C8:BC:00:1A:33:03:F8:36:53:13:56:22:A6:39:BE:66:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/57BD1EC8BC001A3303F83653135622A639BE6663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BD1EC8BC001A3303F83653135622A639BE6663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:8e:7d:3d:bc:7e:86:9e:75:6b:1e:8c:26:d3:4c:eb:2c:87:
         8a:4d:25:cf:5c:cf:2e:c1:5a:34:a4:ed:a1:cb:ae:58:32:02:
         c9:a1:39:37:e6:f1:03:5c:66:3d:d7:f7:5a:c4:59:36:b5:21:
         d5:4e:6b:9d:9d:10:b7:47:c8:cb:e9:75:1f:41:98:d9:19:91:
         a7:18:75:18:66:a5:ab:8a:56:82:22:dd:47:b5:cd:5f:47:3d:
         7d:bd:cc:87:69:f3:e7:e6:9f:86:7d:6c:0e:8a:15:f8:75:4a:
         0e:4a:65:aa:74:c1:ce:46:c1:61:b7:33:0c:fd:43:19:62:01:
         fb:af:c6:28:db:ff:ee:a6:e6:ba:15:9d:c5:14:dd:31:41:f2:
         12:2d:24:70:5a:69:00:7f:5f:47:c2:ee:d1:b2:13:6d:59:7a:
         d1:0c:bc:30:1e:aa:01:3d:c1:d2:6e:e2:63:af:f4:bf:ed:13:
         9a:49:98:2a:59:eb:f4:48:dc:6b:98:5e:b7:36:fe:d4:88:ca:
         4e:c0:88:37:6d:8b:e7:0d:b9:6f:cf:c7:cb:dd:df:26:60:f1:
         87:e3:a2:ce:0f:82:fc:9e:60:ce:d2:93:a1:22:1e:6d:72:60:
         cb:f2:96:d4:6a:6d:69:93:c0:55:af:17:bf:fa:ea:69:12:da:
         3a:d1:76:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org