Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e342e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e342e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          tGr8aUx9m951zf9gM2PxZDY9lkyPw0Jcf9uKL8LaAyQ=
Subject key identifier:   CE:2C:B4:A3:72:56:AB:39:8A:15:BD:9A:B1:9A:D8:BE:BD:70:B6:BE
Certificate issuer:       /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial:       6E38717D1CEA4414FA1F49C15031C3AA0E36946C
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e342e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 23 Jan 2023 22:16:18 +0000
ROA not before:           Mon 23 Jan 2023 22:11:18 +0000
ROA not after:            Mon 22 Jan 2024 22:16:18 +0000
asID:                     262509
IP address blocks:        177.67.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:38:71:7d:1c:ea:44:14:fa:1f:49:c1:50:31:c3:aa:0e:36:94:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
        Validity
            Not Before: Jan 23 22:11:18 2023 GMT
            Not After : Jan 22 22:16:18 2024 GMT
        Subject: CN=CE2CB4A37256AB398A15BD9AB19AD8BEBD70B6BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:b9:10:14:c7:1d:fd:50:ef:47:9e:91:de:
                    90:34:77:fd:02:ec:ea:ec:7a:dd:06:bb:97:20:65:
                    eb:c1:af:0c:19:36:f7:02:23:3c:e4:6c:23:44:ad:
                    24:33:2c:2e:79:d3:9c:b3:4c:ad:28:69:1c:50:15:
                    84:48:16:8f:2a:9e:91:1b:8b:37:11:19:eb:c6:b8:
                    89:3b:d2:98:6a:1c:6c:62:9d:7b:d3:28:46:00:88:
                    44:d7:a8:7b:b2:6f:5b:cc:dc:79:b1:94:ee:90:8c:
                    1a:05:14:40:df:e9:92:41:13:2b:87:3a:3e:68:70:
                    cb:34:0b:1e:cc:5e:dd:f2:2a:78:7d:80:42:6a:32:
                    65:c5:38:e7:df:01:f7:42:88:fc:c5:80:52:50:41:
                    39:08:f6:0d:a5:00:6e:a2:14:56:79:57:f0:46:a3:
                    4b:9b:44:75:72:b9:58:a0:e5:3d:df:d8:b3:55:1a:
                    ab:8e:43:b2:77:b2:48:4f:f4:45:6b:9b:b4:37:71:
                    35:90:27:19:db:7c:dd:69:db:8c:2b:05:01:eb:30:
                    7b:55:ae:f8:21:ba:71:d2:0c:7e:cc:ca:f2:5f:81:
                    93:16:72:a9:11:2d:f8:f0:58:42:d4:ee:c6:fd:03:
                    a0:11:77:df:83:59:34:63:83:16:79:dc:d3:26:89:
                    84:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2C:B4:A3:72:56:AB:39:8A:15:BD:9A:B1:9A:D8:BE:BD:70:B6:BE
            X509v3 Authority Key Identifier:
                keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e342e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:cc:30:37:b7:e0:d4:a0:e9:4d:5c:ff:00:6e:8b:8b:dd:63:
         65:fb:b6:e0:f2:d9:ad:bb:b9:b4:a8:2c:04:20:61:86:bb:cd:
         dc:94:12:e8:89:40:45:90:f6:ef:df:d7:e5:32:51:6b:c9:68:
         87:06:27:f0:ad:0d:49:1d:9f:55:1a:6e:aa:7e:e9:6a:41:a7:
         ba:37:1c:ed:25:3a:40:a9:ca:5d:04:e4:04:2c:b9:b4:b8:da:
         fa:b7:82:6f:8a:a6:11:ed:f3:20:0e:9b:97:77:92:51:a4:49:
         66:e5:53:da:7e:2f:04:ae:24:9d:ac:01:5d:eb:d2:ac:f6:5e:
         0d:38:16:e3:76:b4:fc:64:ad:53:9c:ea:a0:ec:1b:f3:71:ef:
         bf:ef:23:c0:b6:17:f1:0a:02:01:9b:4b:0f:a3:cd:af:06:1d:
         85:68:26:a9:e8:42:d5:95:13:21:de:d6:17:9a:6f:92:07:e1:
         ba:53:8b:19:28:b7:be:a3:cc:30:b1:1b:60:f8:ac:d4:3c:0b:
         10:42:4f:5d:a5:c3:4e:ee:c2:aa:2c:33:5b:cc:f9:12:d2:cf:
         c7:29:a3:13:19:6d:a6:55:76:3c:c8:7e:94:ba:df:91:73:16:
         ad:c4:cf:a0:8d:7e:38:42:ec:ba:1c:87:7a:50:2c:b6:81:4e:
         fd:a4:99:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org