Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/3137372e37332e35362e302f32322d3234203d3e20323633303731.roa
File:                     3137372e37332e35362e302f32322d3234203d3e20323633303731.roa (raw, json)
Hash identifier:          pMBiKzq56ZMzBQUw/XStFF75i+w46pgLFNGHhPXIFH8=
Subject key identifier:   3C:FB:09:BE:F8:F2:AC:27:80:76:87:12:76:F9:CF:33:8B:51:DB:02
Certificate issuer:       /CN=2CB826CB06C695182F68FD4CB91D342C0DF2FB6C
Certificate serial:       75AA6B7D58C1264939EEDFF3A80C1A1BBE33F06C
Authority key identifier: 2C:B8:26:CB:06:C6:95:18:2F:68:FD:4C:B9:1D:34:2C:0D:F2:FB:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/3137372e37332e35362e302f32322d3234203d3e20323633303731.roa
Signing time:             Tue 25 Jul 2023 20:42:56 +0000
ROA not before:           Tue 25 Jul 2023 20:37:56 +0000
ROA not after:            Tue 23 Jul 2024 20:42:56 +0000
asID:                     263071
IP address blocks:        177.73.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:aa:6b:7d:58:c1:26:49:39:ee:df:f3:a8:0c:1a:1b:be:33:f0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB826CB06C695182F68FD4CB91D342C0DF2FB6C
        Validity
            Not Before: Jul 25 20:37:56 2023 GMT
            Not After : Jul 23 20:42:56 2024 GMT
        Subject: CN=3CFB09BEF8F2AC278076871276F9CF338B51DB02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:26:21:ea:46:ee:4e:a3:f9:0a:95:e1:db:
                    81:25:80:dd:8a:51:36:9a:ae:0c:aa:bf:81:d9:d0:
                    6b:4a:48:62:c1:4d:82:3a:99:cb:c3:39:16:ac:2a:
                    8b:f0:c4:33:d5:6e:d4:bc:0b:72:e4:a9:32:ea:dd:
                    95:fa:41:be:b2:aa:0a:18:ff:c0:1c:43:c2:7b:95:
                    a0:85:92:ca:db:ac:82:58:2e:d3:2a:a8:1f:3f:bb:
                    eb:56:92:da:92:2f:27:86:a8:b2:c5:65:a3:1f:cc:
                    d4:cc:9f:a7:9f:23:b5:d9:70:a8:dc:4d:70:af:35:
                    45:ed:7e:03:e9:44:8d:87:24:98:02:ad:49:72:33:
                    07:00:40:4f:89:9c:58:80:44:1c:79:c2:f9:0b:d6:
                    f1:7d:2f:c2:b0:5b:f1:07:d6:4a:3c:9d:66:61:97:
                    bb:6a:6c:4c:51:a5:e5:7d:9a:ed:d6:29:ac:72:8f:
                    3f:c6:af:eb:25:d5:ae:44:e1:17:ef:9a:40:5a:71:
                    e4:4b:4f:63:e7:b8:cb:0b:b4:b1:1e:e1:93:c7:7d:
                    1c:c2:ca:ff:80:3e:87:5d:63:fd:46:96:20:b2:68:
                    f7:bb:b7:37:d8:78:c1:ab:a1:98:3b:47:9e:ee:3d:
                    7b:c6:cc:98:83:2c:e9:0c:5a:bc:c4:f4:bc:01:b9:
                    0e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FB:09:BE:F8:F2:AC:27:80:76:87:12:76:F9:CF:33:8B:51:DB:02
            X509v3 Authority Key Identifier:
                keyid:2C:B8:26:CB:06:C6:95:18:2F:68:FD:4C:B9:1D:34:2C:0D:F2:FB:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/3137372e37332e35362e302f32322d3234203d3e20323633303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:ca:86:64:76:42:ed:40:c6:05:1f:31:41:d0:90:21:33:3e:
         47:40:07:7d:2a:09:ad:37:8a:fd:d3:77:ab:12:50:34:78:55:
         1a:b1:65:78:96:51:90:e6:40:cc:ea:b8:74:dd:20:ac:67:e3:
         31:3f:c5:5b:3d:15:3f:e2:79:79:9c:e7:ef:d4:dc:ee:fe:d4:
         90:5b:4a:49:e3:cb:58:a3:9e:59:6e:f7:08:04:c3:d7:1c:43:
         05:b4:e4:ab:45:a8:c0:0f:73:58:63:9e:6b:ec:3e:9f:fc:1a:
         1a:33:d7:41:d6:62:72:7b:01:8e:9a:58:bc:24:36:07:45:b1:
         a7:d1:4f:b3:fd:d2:32:4f:05:b0:40:92:49:2e:7b:48:bf:28:
         ec:54:2d:d6:06:20:f9:24:d8:ae:9f:a0:7a:81:e4:05:36:ae:
         cd:83:81:c6:e7:0c:7d:6a:1d:fa:b7:fa:19:4d:d3:14:17:42:
         d0:13:33:55:dc:9f:48:8e:a4:f1:fa:f7:88:75:46:d0:4f:ad:
         31:69:06:f9:cf:c8:d2:87:29:63:d0:96:a9:49:06:bd:cc:61:
         a8:4f:cb:99:fa:9c:a8:92:86:27:30:95:a4:97:69:76:39:cf:
         1f:24:1d:c1:2a:f5:03:5c:e6:72:3d:40:0b:84:e6:33:70:58:
         5b:19:63:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org