Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/3137372e31312e3130392e302f32342d3234203d3e20323731343634.roa
File:                     3137372e31312e3130392e302f32342d3234203d3e20323731343634.roa (raw, json)
Hash identifier:          gmXbV2pLtq8ksjKT2PPehQQ3aq6x1EIrNfnqM1YIJys=
Subject key identifier:   9B:57:45:FB:29:13:BC:F3:29:E1:E2:18:FD:61:D8:0D:E2:E8:85:D1
Certificate issuer:       /CN=DB7A300CBD2858F3333D17C91EB007FFEAEA49DE
Certificate serial:       2EA907B5A2FD2528AE3EC603C44FB381AEB1E06C
Authority key identifier: DB:7A:30:0C:BD:28:58:F3:33:3D:17:C9:1E:B0:07:FF:EA:EA:49:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/3137372e31312e3130392e302f32342d3234203d3e20323731343634.roa
Signing time:             Fri 18 Mar 2022 18:56:29 +0000
ROA not before:           Fri 18 Mar 2022 18:51:29 +0000
ROA not after:            Fri 17 Mar 2023 18:56:29 +0000
asID:                     271464
IP address blocks:        177.11.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a9:07:b5:a2:fd:25:28:ae:3e:c6:03:c4:4f:b3:81:ae:b1:e0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB7A300CBD2858F3333D17C91EB007FFEAEA49DE
        Validity
            Not Before: Mar 18 18:51:29 2022 GMT
            Not After : Mar 17 18:56:29 2023 GMT
        Subject: CN=9B5745FB2913BCF329E1E218FD61D80DE2E885D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:63:00:f4:d8:d1:e9:bf:8c:ea:ce:2d:29:
                    00:5a:94:d5:20:75:65:2a:cb:61:78:ea:42:2e:ce:
                    89:20:73:b4:d7:2d:3d:bf:1b:48:8a:e7:fc:2a:91:
                    b8:f6:ca:31:26:60:bb:c9:4c:b4:81:ef:85:89:fb:
                    2e:75:8e:ee:f4:fe:56:9c:05:da:ff:a9:e3:82:0d:
                    67:69:f9:aa:19:8f:4a:88:1b:1e:d8:ed:b8:60:7b:
                    21:4b:d4:2b:25:38:4f:cc:f8:cd:a7:36:84:ce:f5:
                    19:59:71:fb:85:1d:f9:fc:66:a2:4c:67:1b:3b:87:
                    e9:1f:a7:dd:00:04:cf:6c:65:a6:db:d4:ad:92:ce:
                    5a:20:21:cb:60:62:15:d7:4a:49:c4:dd:33:06:79:
                    e4:84:c2:a0:24:9c:ab:f2:30:3f:75:52:36:14:88:
                    81:72:e3:1b:dd:77:3e:82:50:a0:cc:b9:cf:c6:ea:
                    dc:de:48:68:75:73:12:fc:06:81:35:73:db:a9:9c:
                    a2:eb:5e:de:a5:8e:f8:f0:16:90:fa:fc:5e:a3:1c:
                    73:c5:fa:28:49:74:47:89:da:67:df:3c:52:18:f7:
                    f4:3e:9a:84:9d:9b:02:8a:76:e0:16:ae:ed:20:16:
                    2b:97:34:6b:ab:29:6b:d2:a1:ca:78:cf:83:3f:42:
                    19:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:57:45:FB:29:13:BC:F3:29:E1:E2:18:FD:61:D8:0D:E2:E8:85:D1
            X509v3 Authority Key Identifier:
                keyid:DB:7A:30:0C:BD:28:58:F3:33:3D:17:C9:1E:B0:07:FF:EA:EA:49:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/3137372e31312e3130392e302f32342d3234203d3e20323731343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:1a:07:52:74:f7:cc:c0:95:83:e0:89:6f:a5:ed:2b:f0:61:
         90:7b:d1:99:59:48:51:37:f0:38:aa:9b:38:c1:57:0a:2e:5b:
         ef:a8:e2:31:8e:58:d1:9a:c8:1c:ac:96:5e:01:4c:ec:61:86:
         36:e2:2f:a5:dc:ce:0d:e9:91:de:ac:69:73:23:b5:9e:ed:26:
         58:e4:04:1e:5d:a2:72:ce:c5:e6:8f:7a:79:3c:51:a3:04:da:
         a3:ba:f6:a1:75:d6:09:3e:ec:7f:e8:d2:5f:3a:e6:16:d8:b3:
         bb:de:24:98:0c:8d:bf:f8:9f:e1:27:2c:1e:24:88:f5:ba:50:
         20:3c:6d:d7:e6:69:40:2b:67:d6:f5:13:3f:b7:6d:64:63:7e:
         9e:12:39:b7:72:6e:55:37:a0:7f:98:a8:0c:e2:aa:61:19:8b:
         32:20:93:6d:8f:a0:21:05:4a:c1:c8:43:b0:b8:16:e5:c6:22:
         a8:08:76:f4:de:70:c4:8d:17:bd:c6:0f:ef:2e:ef:a6:57:b0:
         b1:fe:6c:80:6b:44:a2:0a:6f:a0:80:ca:7a:af:42:5d:b5:30:
         9e:47:eb:d7:d7:e3:19:0f:78:b1:d2:c9:fc:53:a6:dd:f4:83:
         0c:89:c8:21:27:72:3f:68:af:a9:8e:80:2d:82:5b:ba:bb:44:
         66:b4:3e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org