Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e322e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e322e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          4BTVhpO5qLJEM1FsUehl10e1fTu0k44Vd7Hy02L5r1s=
Subject key identifier:   D6:01:56:86:AB:8A:83:38:A8:78:88:CE:B3:4E:A9:7A:59:5E:24:BC
Certificate issuer:       /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial:       24EBD57027DCE296F534FFD93E778D8D878BFA0A
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e322e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 23 Jan 2023 22:16:18 +0000
ROA not before:           Mon 23 Jan 2023 22:11:18 +0000
ROA not after:            Mon 22 Jan 2024 22:16:18 +0000
asID:                     262509
IP address blocks:        177.67.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:eb:d5:70:27:dc:e2:96:f5:34:ff:d9:3e:77:8d:8d:87:8b:fa:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
        Validity
            Not Before: Jan 23 22:11:18 2023 GMT
            Not After : Jan 22 22:16:18 2024 GMT
        Subject: CN=D6015686AB8A8338A87888CEB34EA97A595E24BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:87:39:c8:c9:10:2c:ca:4f:ae:d2:7e:3e:
                    d9:70:e4:20:72:75:6c:b5:b9:99:ae:86:26:a2:1f:
                    da:fa:2f:70:99:02:e2:c4:73:3c:c1:3e:c1:2a:d4:
                    45:6b:95:db:31:53:97:93:30:f3:e8:25:20:c8:ed:
                    44:e2:88:ad:f8:ef:b4:03:fa:10:e6:1c:f3:5d:83:
                    99:d9:74:f3:7e:94:fc:38:86:b9:93:73:e5:b0:49:
                    df:fa:e1:c4:b8:ce:54:e3:7a:88:1a:49:5d:72:30:
                    fb:76:ed:c1:47:d4:41:0c:3c:d5:79:5e:b2:d6:ce:
                    6e:f4:a0:05:98:07:8a:3c:1f:9c:2f:18:a5:a3:dd:
                    ef:e6:7a:7b:23:22:d0:e4:30:30:9e:9f:71:5b:ca:
                    d3:9b:0f:45:db:28:32:30:80:59:c4:59:00:87:93:
                    9a:94:c4:9a:67:83:dd:36:3d:ca:63:b6:38:e1:4c:
                    6f:91:d9:33:15:8e:9f:06:56:f2:70:78:4e:e1:e5:
                    95:5a:43:ca:4a:e4:4b:35:76:f8:76:57:d3:58:9f:
                    06:0d:53:33:9f:12:63:5a:b3:68:6f:6e:20:23:21:
                    87:32:10:ad:64:3b:6c:19:75:a3:cd:6a:2b:61:90:
                    5e:5a:99:89:74:83:49:93:63:b2:03:dd:59:41:9f:
                    d5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:01:56:86:AB:8A:83:38:A8:78:88:CE:B3:4E:A9:7A:59:5E:24:BC
            X509v3 Authority Key Identifier:
                keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e322e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b7:dc:6d:72:a1:53:ce:97:18:2e:72:6e:23:52:e4:82:3f:
         9c:6b:84:b8:c4:c8:92:61:0e:e3:52:38:f2:59:4d:1e:e9:ef:
         7c:b8:33:bb:fa:34:46:1a:bf:f3:4b:1b:5a:29:1d:0e:d1:d9:
         e3:86:08:ec:5b:9b:46:3d:e0:e2:2f:c8:95:cb:30:64:5e:41:
         d0:eb:fb:ef:9f:4f:c1:9d:47:8b:98:85:3e:4a:21:f4:d0:58:
         01:69:d3:a1:73:c2:59:6b:ff:8a:d7:84:32:a3:0c:ad:da:fc:
         5d:25:5c:79:72:4e:7c:c0:44:04:8c:d3:42:ee:da:12:f0:82:
         54:64:89:d5:3f:0f:b0:53:f4:ce:a0:c3:93:6b:e1:03:aa:86:
         9f:75:2c:10:ce:3e:57:42:76:2a:64:99:41:13:f4:ea:13:71:
         59:d6:10:2b:fb:bd:2a:46:8b:f7:99:e6:90:dd:ca:f2:de:c8:
         d1:96:2c:0b:4c:41:f9:13:e6:40:5a:70:82:0a:23:21:f3:cd:
         52:c5:10:cb:b4:58:da:4c:a7:b6:a4:d9:c2:01:cf:d2:51:04:
         e3:f9:f1:e0:51:c0:c3:f9:f7:2e:0a:a8:17:ef:ba:27:04:81:
         67:e5:f8:72:c7:55:3b:83:a4:db:63:d6:1a:6f:3e:95:e7:63:
         f2:bd:0c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org