Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3137372e382e3230382e302f32312d3234203d3e20323632383139.roa
File:                     3137372e382e3230382e302f32312d3234203d3e20323632383139.roa (raw, json)
Hash identifier:          hno92egkIznmv7u141CRIvHOhMvopPKS6Id3stvltGU=
Subject key identifier:   38:86:2F:92:BB:D4:28:0B:CE:54:24:AA:D6:41:AA:0B:78:71:1C:60
Certificate issuer:       /CN=DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D
Certificate serial:       2964F6ABFC273CEAF6939D586AB10831966ED544
Authority key identifier: DF:5D:91:96:94:7A:22:D5:30:6A:EC:A8:BF:48:DC:C6:C7:B5:4C:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3137372e382e3230382e302f32312d3234203d3e20323632383139.roa
Signing time:             Thu 06 Jul 2023 14:42:17 +0000
ROA not before:           Thu 06 Jul 2023 14:37:17 +0000
ROA not after:            Thu 04 Jul 2024 14:42:17 +0000
asID:                     262819
IP address blocks:        177.8.208.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:64:f6:ab:fc:27:3c:ea:f6:93:9d:58:6a:b1:08:31:96:6e:d5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D
        Validity
            Not Before: Jul  6 14:37:17 2023 GMT
            Not After : Jul  4 14:42:17 2024 GMT
        Subject: CN=38862F92BBD4280BCE5424AAD641AA0B78711C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:76:20:45:68:0a:09:10:a6:ca:c0:d7:9f:f2:
                    c7:53:37:5d:2e:47:22:ea:b8:91:66:45:18:1d:c6:
                    e8:9f:ec:61:49:31:30:8e:95:f8:1e:10:28:c0:1a:
                    7d:9d:14:0a:2c:fe:06:06:5a:70:f8:da:aa:f1:95:
                    29:69:23:e8:cc:88:f5:50:11:af:8f:cf:d7:42:5b:
                    5c:5d:1f:ef:52:67:7c:71:b0:da:3c:73:a3:4d:98:
                    ff:85:50:7e:6f:6c:62:c5:b8:61:78:34:12:53:3b:
                    2d:59:3d:29:dd:82:9a:c2:7a:02:72:0d:0a:15:cc:
                    37:e3:de:e8:88:51:a7:de:d5:41:92:48:83:ed:e4:
                    f8:c1:cc:cb:0e:79:d4:3b:1e:99:76:51:cd:d8:f6:
                    81:1c:6c:aa:80:a4:8e:87:29:fe:60:51:b0:ef:40:
                    09:1f:e9:b7:31:2e:32:df:00:14:43:4b:87:87:14:
                    49:f6:84:e3:36:aa:c0:80:be:8f:ed:7b:65:44:2f:
                    15:9a:f7:c5:68:7a:38:12:05:58:ab:34:2e:2d:0a:
                    6b:48:ac:b4:53:99:75:46:a2:f5:54:d8:1c:ea:92:
                    e2:03:ba:b7:f7:3d:b8:08:e2:1a:85:a9:54:d3:a6:
                    e1:95:4c:9e:70:3d:d8:96:53:a3:ac:ff:6a:df:15:
                    2e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:86:2F:92:BB:D4:28:0B:CE:54:24:AA:D6:41:AA:0B:78:71:1C:60
            X509v3 Authority Key Identifier:
                keyid:DF:5D:91:96:94:7A:22:D5:30:6A:EC:A8:BF:48:DC:C6:C7:B5:4C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3137372e382e3230382e302f32312d3234203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:d9:8f:e8:91:1c:1a:a0:26:20:77:0e:a0:cb:84:d1:59:c5:
         d5:b1:0b:ac:41:ad:4b:da:f0:a1:42:4f:98:e4:b4:d8:d7:03:
         f1:72:17:c1:58:36:f3:8d:c4:09:64:ef:b4:2c:cd:0a:8d:e3:
         96:fd:58:69:01:8f:bc:d8:3e:bd:2a:15:e6:a1:3c:c1:25:78:
         b8:3d:08:ed:ed:d9:35:48:2e:c8:bd:70:3c:c0:5e:fe:39:8f:
         ef:45:53:58:8b:f2:9b:89:d3:dd:15:a3:7f:cc:a5:52:48:23:
         5a:d0:95:38:c4:19:c5:1b:83:4e:d5:93:8c:a7:30:84:14:90:
         38:25:60:f4:1f:1c:d6:d7:f1:cd:35:e7:89:5e:e1:34:77:26:
         b5:77:46:c0:c7:ed:b8:1c:79:e2:5f:3f:e2:34:fb:db:c0:71:
         49:69:a5:23:db:9d:b9:7c:bb:10:a3:ce:7e:2e:93:e8:4a:9b:
         59:eb:a7:a3:2e:52:71:aa:26:60:a0:0d:00:46:56:36:c6:d3:
         66:c0:c7:02:02:7f:65:37:ab:aa:db:f5:96:0d:83:c8:07:61:
         4a:5d:0a:7b:1b:4f:08:ae:df:c9:a1:6f:3f:54:af:18:79:97:
         f4:e4:aa:26:ea:3c:38:ba:ff:1e:19:ff:a9:64:da:ad:74:dc:
         2d:51:17:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org