Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3133312e302e302f32302d3234203d3e203238313938.roa
File:                     3137372e3133312e302e302f32302d3234203d3e203238313938.roa (raw, json)
Hash identifier:          fgScJt3iw5pMxTcJPCyQ65mDmoZNJ5z2dvjDX88TAEM=
Subject key identifier:   8A:74:47:49:C1:8A:E6:35:43:7C:E5:D5:06:D1:78:EE:7D:2E:D5:F0
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       67F5026CB574669EC06063F5C9DF882F4A349311
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3133312e302e302f32302d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:22:33 +0000
ROA not before:           Mon 21 Aug 2023 20:17:33 +0000
ROA not after:            Mon 19 Aug 2024 20:22:33 +0000
asID:                     28198
IP address blocks:        177.131.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f5:02:6c:b5:74:66:9e:c0:60:63:f5:c9:df:88:2f:4a:34:93:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:17:33 2023 GMT
            Not After : Aug 19 20:22:33 2024 GMT
        Subject: CN=8A744749C18AE635437CE5D506D178EE7D2ED5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4c:82:6c:e8:8d:ac:84:26:bb:fd:06:94:41:
                    6e:be:49:7c:1d:a2:53:99:17:e9:6b:9f:0b:27:9e:
                    44:ea:db:4e:bb:3a:fd:64:da:62:f8:0c:c2:3b:3b:
                    11:cc:20:94:d6:64:54:53:20:b2:53:f4:56:0c:8a:
                    13:f6:cd:dc:eb:63:75:aa:51:65:66:a5:51:64:ba:
                    a8:03:4c:c5:dc:21:e7:10:6d:23:f0:bb:06:8e:f5:
                    e4:5a:86:bb:42:a1:d2:dc:a2:22:7c:49:9b:a1:db:
                    17:7b:0a:91:11:1c:a1:4c:af:ef:1e:7c:54:57:92:
                    ea:ae:6a:7d:50:52:18:b4:fb:89:36:34:7c:af:24:
                    dd:43:10:a4:ec:03:d2:1e:76:d8:f3:82:44:f8:57:
                    7a:7d:8a:87:18:ec:b9:02:00:79:7e:da:29:44:9a:
                    33:59:cc:5f:4f:82:25:8c:20:a4:ce:59:77:3b:46:
                    51:8e:53:5e:3c:d2:a0:51:4d:64:3a:ef:bb:98:c3:
                    99:67:28:28:82:2e:01:71:c0:d0:5d:08:cb:77:5c:
                    e5:7e:f8:c1:6c:39:4f:f2:4a:fc:94:74:d9:f3:1e:
                    9c:43:36:ac:21:ed:3a:f8:89:21:e8:24:39:f7:e9:
                    0a:6d:ae:c3:9b:8c:2a:b7:1c:d7:0c:fe:08:b3:4c:
                    87:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:74:47:49:C1:8A:E6:35:43:7C:E5:D5:06:D1:78:EE:7D:2E:D5:F0
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3133312e302e302f32302d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:d3:09:d4:92:0b:41:d8:b0:4c:b3:cf:fb:fe:19:2b:53:99:
         ff:d4:a7:43:0c:1e:67:da:8f:0a:67:f5:6d:84:af:ac:4e:ee:
         76:fb:02:6f:70:c1:2c:8b:a7:8d:c8:af:e9:76:1e:bc:76:36:
         6a:1a:11:9d:c2:b6:5b:6e:8f:1a:ea:25:b4:f4:5c:f4:85:ea:
         37:24:6c:47:6b:f8:c0:13:9f:96:0e:86:5d:ce:fd:97:b1:cd:
         55:14:36:fe:d7:82:f3:09:cd:48:2e:2a:46:aa:57:4d:fd:c9:
         92:f3:c1:c0:ee:84:d4:a4:fd:24:f4:40:47:0a:db:9d:47:05:
         e3:2b:39:7b:60:4f:79:36:6a:3c:ec:10:f9:92:ae:54:4a:93:
         31:f5:5d:8e:a8:be:74:37:62:89:a8:35:af:b7:14:41:c4:69:
         27:3f:fd:2d:7d:54:5b:eb:47:5d:84:6a:32:00:5b:da:8a:09:
         ea:b7:b1:49:e0:1c:e4:d9:7e:3b:9e:d6:04:23:4e:21:eb:c0:
         86:90:bf:e5:c1:d5:26:76:51:f0:48:76:c6:ce:f0:34:f6:c2:
         4e:61:38:b8:46:12:8c:9f:c1:e9:d2:48:a9:4f:39:55:33:15:
         ea:ee:e9:11:0c:4c:42:e4:c9:4a:38:88:32:25:60:0b:c4:0f:
         85:d4:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org