Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3137372e382e3231322e302f32322d3232203d3e20323632383139.roa
File:                     3137372e382e3231322e302f32322d3232203d3e20323632383139.roa (raw, json)
Hash identifier:          ON7ydUFS6e942mBJu8SLIWhgrxgJUgGR+S4iHubvrbc=
Subject key identifier:   F7:EB:CA:DD:70:3E:03:6E:F7:34:1B:77:9A:07:8E:C1:2A:0C:9E:C2
Certificate issuer:       /CN=CF608992965DC7DE08820B93FC270DCED15124BC
Certificate serial:       56C3DBC326E6FC9C1A350423D0E5CE0A9E0C935F
Authority key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3137372e382e3231322e302f32322d3232203d3e20323632383139.roa
Signing time:             Wed 09 Nov 2022 20:11:02 +0000
ROA not before:           Wed 09 Nov 2022 20:06:02 +0000
ROA not after:            Wed 08 Nov 2023 20:11:02 +0000
asID:                     262819
IP address blocks:        177.8.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c3:db:c3:26:e6:fc:9c:1a:35:04:23:d0:e5:ce:0a:9e:0c:93:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF608992965DC7DE08820B93FC270DCED15124BC
        Validity
            Not Before: Nov  9 20:06:02 2022 GMT
            Not After : Nov  8 20:11:02 2023 GMT
        Subject: CN=F7EBCADD703E036EF7341B779A078EC12A0C9EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:64:4c:2b:62:0b:63:a0:79:62:04:91:6f:
                    b3:61:6c:06:60:a8:b9:6a:6b:5b:2f:7a:e5:d4:3a:
                    72:54:eb:1c:65:0e:db:c6:04:e4:d5:a7:53:4d:fd:
                    bc:f3:1c:b5:27:59:7e:aa:71:5f:0a:9c:fe:e7:e6:
                    fb:e3:0b:0a:07:50:eb:57:54:db:cc:87:df:32:7a:
                    d8:a3:83:af:07:60:d7:e3:10:a9:94:d8:89:be:25:
                    01:09:92:68:7e:19:2b:8a:66:37:f9:60:f0:d3:5d:
                    27:19:ba:27:ab:03:b2:de:50:3b:64:f1:75:3e:1e:
                    f5:2a:bc:e5:50:2c:80:3b:a0:ff:0c:31:0d:1b:02:
                    ad:35:97:fb:5e:de:c6:de:5b:cd:7a:9a:2e:f6:07:
                    c8:4e:ee:af:1b:c6:f7:ff:78:24:68:e1:9c:6a:8f:
                    5e:dd:5d:a6:bf:43:16:10:55:90:d0:7c:25:b3:0e:
                    52:a0:33:a7:44:b0:c0:71:1a:db:96:1b:bc:9f:76:
                    34:eb:86:ca:76:e8:24:13:55:d9:39:31:90:96:0e:
                    41:75:8a:9e:df:ac:40:dc:20:1a:de:db:d2:54:11:
                    48:ef:1f:5f:32:09:e7:cf:be:38:c7:77:50:fa:f5:
                    49:8f:8c:c5:22:07:2c:c5:b5:7f:54:7c:9c:1d:ca:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EB:CA:DD:70:3E:03:6E:F7:34:1B:77:9A:07:8E:C1:2A:0C:9E:C2
            X509v3 Authority Key Identifier:
                keyid:CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3137372e382e3231322e302f32322d3232203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:b0:a0:33:9c:86:55:aa:51:4e:9c:23:a6:73:66:27:e6:e9:
         d9:c7:d8:d5:08:26:66:de:4f:88:05:f8:a2:2a:ea:7f:42:d5:
         fd:9b:6b:d3:fa:35:61:f3:8b:51:e7:6a:79:00:a7:33:4c:24:
         ae:94:f4:27:05:4c:03:8f:1d:5f:e3:70:a2:22:c1:c6:21:a6:
         da:68:22:25:2c:d2:83:e5:b9:fd:8b:5c:ff:5a:a5:53:b2:8a:
         41:b7:96:ef:21:3d:e6:87:0c:79:ff:d0:86:1f:34:c0:d6:c9:
         65:05:d7:09:a3:4f:73:e1:31:fd:8a:ed:bb:53:3b:d3:9d:6a:
         3b:ef:09:2e:b6:69:84:40:ae:5b:a2:72:a3:ce:8b:df:b3:74:
         79:36:e9:e1:2e:89:78:3a:b2:f2:7a:7f:f3:a3:7c:43:e0:ab:
         70:a8:98:27:90:6b:8e:99:be:23:ae:73:af:70:16:57:47:65:
         08:d4:24:d1:c2:dc:3f:bd:8b:79:cf:b1:84:2c:0d:ba:05:05:
         0b:3a:78:1a:7c:de:a2:2e:2f:09:7c:81:16:21:f7:48:3f:ca:
         cd:4e:2c:a3:5a:aa:59:c1:eb:5b:83:45:83:fd:9a:31:af:12:
         91:07:24:0b:9d:e5:67:dc:55:f7:e3:7d:ce:52:53:55:a4:3b:
         22:95:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org