Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/0/3137372e38352e3233362e302f32332d3234203d3e20323632353135.roa
File:                     3137372e38352e3233362e302f32332d3234203d3e20323632353135.roa (raw, json)
Hash identifier:          wWEIbGbWXS3erDEBBWBcVfGU/NNWYAO3DwH9JCOgIyE=
Subject key identifier:   7A:B8:0C:79:9F:E3:E3:38:0F:D1:5F:63:FB:37:9D:1C:1D:26:6F:D8
Certificate issuer:       /CN=A73FD70419F2EBF085BC7D04BC736966875A274D
Certificate serial:       339B9278DA873AA8C76FB1AD6D3314FF66FDFAF4
Authority key identifier: A7:3F:D7:04:19:F2:EB:F0:85:BC:7D:04:BC:73:69:66:87:5A:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73FD70419F2EBF085BC7D04BC736966875A274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/0/3137372e38352e3233362e302f32332d3234203d3e20323632353135.roa
Signing time:             Wed 01 Feb 2023 16:18:00 +0000
ROA not before:           Wed 01 Feb 2023 16:13:00 +0000
ROA not after:            Wed 31 Jan 2024 16:18:00 +0000
asID:                     262515
IP address blocks:        177.85.236.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9b:92:78:da:87:3a:a8:c7:6f:b1:ad:6d:33:14:ff:66:fd:fa:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73FD70419F2EBF085BC7D04BC736966875A274D
        Validity
            Not Before: Feb  1 16:13:00 2023 GMT
            Not After : Jan 31 16:18:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:e6:2e:6d:43:52:bc:9a:34:b7:fa:0f:e4:
                    38:72:74:00:ed:64:10:7d:d0:f3:83:d1:5e:36:fe:
                    e7:3f:da:d5:c7:c3:a8:0b:91:be:0a:76:41:39:08:
                    90:e1:68:0c:5c:c9:21:ab:8d:3a:57:97:e1:4f:30:
                    8b:a2:08:ab:42:78:a5:a1:a5:56:71:4a:ce:ce:d6:
                    fc:e0:b2:4e:b8:58:e4:35:78:5f:50:2d:55:cd:c3:
                    08:02:84:e0:25:ff:51:09:bb:f7:e3:2d:f3:32:6c:
                    c6:6f:e1:bf:d8:49:13:38:aa:42:f3:8b:b3:33:16:
                    90:07:68:95:ed:b9:33:f9:77:4f:03:e2:a8:49:3a:
                    ee:f5:47:90:6f:db:45:0d:3f:9d:6a:02:3f:21:81:
                    dc:ca:ff:5c:7d:f6:b4:26:77:26:74:83:26:45:d9:
                    ef:54:02:08:ba:1a:8c:ee:82:74:2a:7b:69:fd:82:
                    59:45:41:de:8b:5e:df:b5:4a:d4:61:3f:0c:8f:06:
                    18:88:c5:35:d0:c4:92:9b:ec:89:40:f8:5d:cc:93:
                    1c:3d:8e:dd:c1:05:2c:f6:41:a8:5a:5e:c5:e8:e5:
                    f6:fb:84:44:0a:b8:d7:bd:c9:56:53:a4:8b:00:6f:
                    e3:f3:c7:7a:8e:51:6f:26:2e:c9:a7:e8:42:ca:44:
                    12:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B8:0C:79:9F:E3:E3:38:0F:D1:5F:63:FB:37:9D:1C:1D:26:6F:D8
            X509v3 Authority Key Identifier:
                keyid:A7:3F:D7:04:19:F2:EB:F0:85:BC:7D:04:BC:73:69:66:87:5A:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/0/A73FD70419F2EBF085BC7D04BC736966875A274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73FD70419F2EBF085BC7D04BC736966875A274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/0/3137372e38352e3233362e302f32332d3234203d3e20323632353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:24:d5:b1:c5:ba:56:6f:f9:ec:aa:d8:6c:86:94:da:f9:af:
         82:86:36:fd:6e:2e:5a:0e:a5:68:6a:da:ef:79:0a:b6:9f:58:
         6c:e7:76:78:26:3c:91:26:23:d2:46:54:c7:e2:3f:94:eb:12:
         54:bf:b8:5f:07:17:9e:bb:fb:b1:e6:07:b8:78:8d:98:94:4c:
         67:6f:7e:f6:54:33:e6:d8:bd:fc:8b:bc:d7:c5:12:96:fb:64:
         03:b3:dd:08:b6:f2:b9:ea:a7:94:58:c5:75:bb:4d:c4:d0:d4:
         23:cd:2b:6f:11:6a:ef:90:6a:20:2a:46:ee:6e:0a:82:be:c2:
         48:8f:1c:ca:c7:37:8f:af:5c:1e:be:4c:82:f0:98:97:25:96:
         a9:e5:e2:0e:25:13:1b:0a:97:0a:d4:cf:60:df:c1:10:d9:f5:
         7a:7f:29:9f:a4:a5:88:cf:36:ed:4a:20:c0:c4:ee:9b:6b:a4:
         a8:ea:b7:ab:6c:0d:a4:86:f9:03:77:ad:be:11:8e:d0:3c:b4:
         1e:d5:d1:f5:2c:c0:11:99:f6:86:bf:32:17:9f:91:b0:3a:75:
         7f:53:7c:d7:ea:d8:9b:27:eb:00:97:e8:46:cd:aa:a7:df:65:
         93:93:17:e7:93:82:38:93:83:47:11:42:98:c3:2f:89:e2:fd:
         a5:15:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org