Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137372e33392e32342e302f32322d3234203d3e20323632333734.roa
File:                     3137372e33392e32342e302f32322d3234203d3e20323632333734.roa (raw, json)
Hash identifier:          1Z+0qXE/MtSX7h49raAMYTx4oGNPGHkXZsMokwIRpgk=
Subject key identifier:   34:D8:61:BD:27:E0:E4:A7:F2:AD:C8:C7:66:FD:9E:1F:8E:D2:EE:2B
Certificate issuer:       /CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
Certificate serial:       6B923E11EF717DC42066B55F9C0623112F0B8C4C
Authority key identifier: FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137372e33392e32342e302f32322d3234203d3e20323632333734.roa
Signing time:             Fri 08 Dec 2023 12:34:43 +0000
ROA not before:           Fri 08 Dec 2023 12:29:43 +0000
ROA not after:            Fri 06 Dec 2024 12:34:43 +0000
asID:                     262374
IP address blocks:        177.39.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:92:3e:11:ef:71:7d:c4:20:66:b5:5f:9c:06:23:11:2f:0b:8c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
        Validity
            Not Before: Dec  8 12:29:43 2023 GMT
            Not After : Dec  6 12:34:43 2024 GMT
        Subject: CN=34D861BD27E0E4A7F2ADC8C766FD9E1F8ED2EE2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:4a:a7:15:58:31:4a:e5:61:62:db:d7:5a:
                    e0:22:a5:36:ff:00:b8:3e:a3:f9:1a:b2:a6:80:6d:
                    37:f1:ed:5a:7a:65:72:1a:e4:f3:50:fd:90:0a:96:
                    b5:03:f2:7c:95:68:06:d2:81:29:bd:a5:29:66:c5:
                    cf:b3:52:18:69:a2:b2:c8:26:69:96:c0:15:6e:74:
                    64:8d:b8:c0:2e:43:ac:11:4d:b1:6c:b6:72:af:70:
                    31:7b:16:16:e8:1b:8b:89:2a:9f:0d:d6:ed:28:63:
                    d4:d6:63:da:af:cd:ec:9d:f9:70:d9:ff:63:d1:4a:
                    96:48:d1:33:26:72:43:fb:9e:ea:7f:d1:bf:ab:e6:
                    83:e0:bf:59:d7:d5:20:46:e1:c4:44:75:04:8d:78:
                    98:f1:c3:61:fe:ee:90:3c:45:de:ac:4e:a3:8a:e4:
                    32:46:24:c5:ee:25:5f:86:9a:fe:40:b1:8c:6f:61:
                    99:c0:9b:04:d8:a9:f2:9b:06:2e:dd:c3:3e:f3:3f:
                    6c:c7:6d:e6:5c:94:36:42:52:13:c0:7c:0c:71:80:
                    3d:72:eb:41:fe:dd:41:7f:07:a4:b9:ec:f1:72:4a:
                    1f:47:47:8f:34:ad:84:9f:2e:fd:43:88:89:68:42:
                    cf:d8:b1:73:ea:c8:b4:71:f8:5e:74:92:09:f9:0c:
                    60:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D8:61:BD:27:E0:E4:A7:F2:AD:C8:C7:66:FD:9E:1F:8E:D2:EE:2B
            X509v3 Authority Key Identifier:
                keyid:FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137372e33392e32342e302f32322d3234203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:0b:f3:24:91:58:f2:de:56:e7:ba:6c:92:df:f8:f5:22:9a:
         88:2c:9d:b1:5a:79:4d:80:90:24:46:72:d8:49:7c:61:15:ca:
         cb:5c:03:c8:43:b9:1a:a0:a7:d4:cb:f5:6b:96:9a:63:52:e8:
         dd:d4:bc:57:3f:f3:a2:73:56:7d:e1:21:dd:1a:f1:74:44:92:
         72:02:ad:88:00:68:86:b5:78:aa:0c:66:d1:35:bc:2d:49:6f:
         4e:c8:56:38:f1:20:20:15:f1:6d:40:28:08:ed:6c:a2:f6:8f:
         ac:fa:99:d2:74:e2:3a:fc:91:0e:09:48:be:cf:61:0b:b5:2f:
         b1:7d:79:56:6d:7f:8b:f9:2e:4e:c8:c4:9f:d5:e0:5c:26:51:
         a9:47:10:34:a3:b5:82:23:0c:5b:fa:14:17:57:47:fb:28:92:
         a1:fc:00:b2:03:be:0f:25:52:92:b4:51:5f:78:28:91:d5:bb:
         59:b7:3e:81:24:0c:41:2b:ec:4c:40:8e:02:37:3e:de:d2:f2:
         76:93:45:02:78:c6:8f:47:a1:49:1a:0d:38:35:de:3c:13:be:
         e8:c3:74:4c:7b:1f:30:84:a2:8a:02:b5:6b:51:b6:cc:4b:7f:
         9d:06:80:29:f0:ce:6f:f3:c4:a4:1d:d6:d9:d8:8b:8a:d7:9f:
         10:cb:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org