Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e312e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e312e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          HXAuKQnAIHRWRSsQaBFzjtSKTEfp0prbI6UI0wrJKiM=
Subject key identifier:   51:13:B0:32:FE:43:DA:E3:B7:7E:C3:03:2D:5D:C9:21:23:73:10:89
Certificate issuer:       /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial:       0A191326BC17648FAE7E25E5A531281E948CD1EA
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e312e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 23 Jan 2023 22:16:18 +0000
ROA not before:           Mon 23 Jan 2023 22:11:18 +0000
ROA not after:            Mon 22 Jan 2024 22:16:18 +0000
asID:                     262509
IP address blocks:        177.67.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:19:13:26:bc:17:64:8f:ae:7e:25:e5:a5:31:28:1e:94:8c:d1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
        Validity
            Not Before: Jan 23 22:11:18 2023 GMT
            Not After : Jan 22 22:16:18 2024 GMT
        Subject: CN=5113B032FE43DAE3B77EC3032D5DC92123731089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:b9:3d:10:20:ad:91:de:f7:ad:ad:db:68:
                    38:42:9b:2c:11:08:06:82:c0:e5:87:13:05:af:2f:
                    11:4a:dd:70:08:f7:2d:dc:1e:88:3c:f4:94:2c:c1:
                    08:fa:12:4a:e1:15:f9:63:76:ee:bc:a2:b0:4c:d7:
                    0e:21:03:0e:5c:a0:f1:22:31:d1:24:72:8b:90:a1:
                    1a:cd:c4:fb:2f:d8:a9:25:4f:e2:71:7e:45:3e:44:
                    c3:3d:66:26:38:db:ef:72:20:18:13:e4:99:3d:35:
                    4e:2f:1b:ff:1a:d8:90:d3:8b:25:7f:c1:ac:5f:1d:
                    63:7d:95:e4:0d:3a:41:f6:4c:e2:04:92:29:65:d0:
                    86:f8:5f:6e:fc:17:f7:58:85:fb:b4:7d:f1:f5:4b:
                    a5:2c:8c:10:c3:9b:a0:89:fd:27:9c:7e:09:03:c4:
                    65:61:eb:89:94:1a:0f:54:7f:be:68:c8:51:c2:8e:
                    2a:73:81:94:40:c4:13:37:7c:4e:68:86:31:12:37:
                    6f:63:6b:f4:0e:44:00:c7:f8:5c:78:1a:9e:e5:c6:
                    8c:11:fa:b6:17:06:7a:bf:c3:28:ce:9c:ba:a0:f7:
                    f7:11:4a:88:50:8e:9e:44:79:91:b0:35:d3:d5:aa:
                    8e:10:a8:2a:60:09:92:27:49:a1:7a:dc:e3:79:3c:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:13:B0:32:FE:43:DA:E3:B7:7E:C3:03:2D:5D:C9:21:23:73:10:89
            X509v3 Authority Key Identifier:
                keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e312e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:de:1e:6f:f4:6f:a9:3a:f5:98:1a:f0:2d:81:92:dd:3a:a8:
         6b:9a:84:15:ce:5b:89:82:a8:b6:13:b9:34:1f:6b:3b:a4:af:
         c2:14:b8:00:2f:63:1f:65:47:58:5a:c7:86:16:b8:f2:71:43:
         77:16:fb:28:7b:31:71:c0:b8:c4:b6:fd:d4:54:0a:05:a2:ff:
         b5:4b:ff:ea:a5:94:53:e9:94:63:2a:02:56:b8:4f:32:f9:bb:
         d8:d3:d4:75:1d:74:7b:72:be:48:51:6c:9d:44:0f:11:ff:7f:
         a2:51:b0:5c:ba:2c:e9:18:e0:e8:bd:93:f2:24:84:db:70:f1:
         e0:1e:b0:9b:8c:08:72:27:cd:17:f9:a7:ff:3c:28:7a:86:28:
         12:55:e0:26:dc:02:77:e1:13:a2:69:47:08:c9:65:c9:1a:32:
         7c:af:20:8a:94:69:0f:84:c8:a2:a4:40:35:dd:5d:a8:0f:31:
         b7:6f:be:2f:fc:64:f9:41:56:d8:0a:1b:4c:15:a3:ab:35:fd:
         91:37:47:02:04:ee:20:07:37:5c:68:96:4a:0d:4c:76:81:b6:
         88:f4:4c:1d:31:d7:b2:7f:ec:f8:ec:a2:58:01:3f:c3:c1:5d:
         63:ea:01:fe:d2:fb:b0:79:4c:49:d5:d5:29:3f:de:c7:73:52:
         9a:c4:47:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org