Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/3137372e3135342e38342e302f32342d3234203d3e20323632393439.roa
File:                     3137372e3135342e38342e302f32342d3234203d3e20323632393439.roa (raw, json)
Hash identifier:          /eBBtvOZs/LViJODpXYGh+cdFdKJZ/nsYi5U+YW14EY=
Subject key identifier:   C1:78:08:B6:39:9C:88:3E:84:C9:DB:48:72:9D:24:41:F1:6B:5E:5F
Certificate issuer:       /CN=6647B24D7AE4237039168CAB7D658AFBAEBD2F36
Certificate serial:       680B461DFB5BD70C79C6525D119CB60C7665DE9D
Authority key identifier: 66:47:B2:4D:7A:E4:23:70:39:16:8C:AB:7D:65:8A:FB:AE:BD:2F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6647B24D7AE4237039168CAB7D658AFBAEBD2F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/3137372e3135342e38342e302f32342d3234203d3e20323632393439.roa
Signing time:             Tue 05 Sep 2023 12:10:57 +0000
ROA not before:           Tue 05 Sep 2023 12:05:57 +0000
ROA not after:            Tue 03 Sep 2024 12:10:57 +0000
asID:                     262949
IP address blocks:        177.154.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0b:46:1d:fb:5b:d7:0c:79:c6:52:5d:11:9c:b6:0c:76:65:de:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6647B24D7AE4237039168CAB7D658AFBAEBD2F36
        Validity
            Not Before: Sep  5 12:05:57 2023 GMT
            Not After : Sep  3 12:10:57 2024 GMT
        Subject: CN=C17808B6399C883E84C9DB48729D2441F16B5E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:64:d6:ab:dd:e4:c4:61:b1:11:47:c3:fe:2c:
                    49:95:46:0e:3b:71:4f:d4:9b:d7:f3:10:15:12:ff:
                    25:c0:25:75:62:28:93:e0:83:ac:cf:e5:f7:30:5d:
                    d0:1e:0b:8c:2e:76:17:cc:fd:7c:3a:ea:4f:2c:3f:
                    0d:fa:84:a4:f4:75:f8:8e:a0:60:67:8f:26:24:de:
                    6b:f3:5b:50:66:2c:c5:7d:fd:26:57:c4:d2:ae:0b:
                    8e:a2:8c:44:3a:b8:3e:41:b9:a7:fb:7e:15:34:52:
                    57:cc:dc:cb:1f:5a:3d:7c:29:01:b9:eb:38:0a:05:
                    e8:81:13:78:6f:fa:45:5a:4d:2e:80:10:07:78:db:
                    89:28:f1:ef:4e:67:77:4a:6b:42:e7:bc:9e:d9:50:
                    0b:7c:96:91:3a:07:8a:84:98:e2:7d:92:62:2d:4d:
                    c8:6a:10:3c:97:09:15:2c:47:ff:a9:c7:a9:4b:d5:
                    99:2c:68:38:c9:fc:41:6e:85:cc:74:97:06:05:0d:
                    1c:ef:88:2e:ea:43:ad:ad:c6:50:14:25:27:40:b5:
                    81:30:38:ab:78:cd:63:1f:c3:c3:bd:a8:1c:b5:95:
                    e8:3a:a1:fb:37:e4:24:26:b5:9e:30:7f:6f:d8:90:
                    83:23:ad:71:11:dc:03:a7:4c:e9:5a:6f:84:c5:19:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:78:08:B6:39:9C:88:3E:84:C9:DB:48:72:9D:24:41:F1:6B:5E:5F
            X509v3 Authority Key Identifier:
                keyid:66:47:B2:4D:7A:E4:23:70:39:16:8C:AB:7D:65:8A:FB:AE:BD:2F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/6647B24D7AE4237039168CAB7D658AFBAEBD2F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6647B24D7AE4237039168CAB7D658AFBAEBD2F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/3137372e3135342e38342e302f32342d3234203d3e20323632393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:ed:d1:10:c4:b0:f0:47:36:05:8e:f1:6c:d0:19:dd:d1:6b:
         c6:5f:7d:86:1b:e9:ea:f0:d6:23:a0:fd:95:23:c2:43:a3:62:
         55:14:c0:11:58:03:b6:40:19:0d:14:2b:5e:78:f1:c9:37:19:
         3f:31:99:bd:60:74:f8:78:3c:64:36:2a:f1:1e:95:4b:9c:53:
         d5:9d:81:81:f5:bf:a4:52:e4:ea:f2:d2:b7:04:9c:9c:9b:d3:
         08:f3:0a:ad:99:94:c4:b2:2a:fb:03:64:31:24:80:39:4a:35:
         06:31:1f:e0:fb:9a:08:6a:79:31:a3:08:8e:27:5a:4b:c7:30:
         50:b7:e1:a5:44:72:f3:7b:d7:31:d6:8f:cd:34:8c:36:76:a7:
         25:35:10:90:27:61:ce:d5:6b:ea:34:05:12:a3:a1:13:16:6e:
         33:9b:9f:04:a6:4c:11:e9:f6:db:f5:04:b4:d5:91:16:1c:53:
         f2:5d:a3:04:31:16:ec:cf:5b:19:f7:3d:8c:23:4f:30:52:b4:
         85:f9:8b:25:32:fb:08:eb:27:07:56:c8:3e:78:41:9e:2c:2f:
         91:05:e5:09:4b:45:cd:b6:ea:5c:9c:09:a3:b7:e1:56:ab:09:
         32:2b:19:c4:95:24:d1:00:80:e8:59:61:e5:fe:d6:af:10:4b:
         d7:21:dd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org