Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e37322e302e302f32312d3234203d3e203631383332.roa
File:                     3137372e37322e302e302f32312d3234203d3e203631383332.roa (raw, json)
Hash identifier:          tx9OozSdey3wq4A11EDQn3l0kl0SnI5+nmRfNV6ihQM=
Subject key identifier:   B9:D1:DE:81:B0:98:D4:6F:D2:07:D6:58:0E:06:6E:D3:68:45:1E:D6
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       710BB3CDAE344B02077EC46F266237A40C6CA423
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e37322e302e302f32312d3234203d3e203631383332.roa
Signing time:             Thu 04 Jan 2024 04:01:34 +0000
ROA not before:           Thu 04 Jan 2024 03:56:34 +0000
ROA not after:            Thu 02 Jan 2025 04:01:34 +0000
asID:                     61832
IP address blocks:        177.72.0.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0b:b3:cd:ae:34:4b:02:07:7e:c4:6f:26:62:37:a4:0c:6c:a4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Jan  4 03:56:34 2024 GMT
            Not After : Jan  2 04:01:34 2025 GMT
        Subject: CN=B9D1DE81B098D46FD207D6580E066ED368451ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:8e:08:f3:31:5a:07:8c:29:43:c1:ed:cc:
                    34:d4:9c:2c:c6:56:68:0c:07:04:b6:87:a6:d8:9b:
                    87:e4:eb:8e:9d:2b:73:54:0e:92:18:f8:84:d8:98:
                    05:14:0f:d8:ac:56:a5:41:08:20:ab:2e:80:70:a6:
                    1c:6a:c0:a1:e7:f0:a5:d5:5e:38:31:b0:4d:50:5e:
                    33:e0:5d:e5:33:3b:4a:48:35:aa:37:22:0f:c7:f0:
                    a9:72:04:a6:ba:ea:fb:8a:6f:5d:5a:2e:28:44:e1:
                    16:8d:be:cf:24:ea:7a:f1:f0:f5:59:31:94:90:26:
                    f7:bd:a2:5b:ff:ad:ea:33:ea:89:35:cc:0b:c1:6e:
                    ef:bf:82:3a:9f:4e:d1:24:65:70:f5:43:1e:85:77:
                    90:e8:1b:9b:05:67:f4:43:dd:4b:13:82:52:51:f4:
                    6c:72:49:c9:7f:c4:35:11:61:95:db:5f:76:bc:f2:
                    39:c1:8b:af:0f:5b:a9:8b:b3:42:04:e4:fd:68:b2:
                    b7:f9:bb:35:af:07:16:f7:88:8b:89:c9:ac:0a:12:
                    cf:dd:cd:17:78:70:66:20:76:60:92:c4:f4:6b:ad:
                    50:5a:cf:e2:b4:b7:84:2c:97:5d:92:ea:45:f7:56:
                    37:7d:92:8b:ef:47:3a:47:f8:b7:2b:6a:ba:3a:41:
                    68:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D1:DE:81:B0:98:D4:6F:D2:07:D6:58:0E:06:6E:D3:68:45:1E:D6
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e37322e302e302f32312d3234203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:2d:00:c1:a2:c2:67:6f:df:62:c6:19:7c:19:1b:2f:5a:54:
         be:06:be:79:87:75:c9:cb:57:23:37:70:88:04:fe:c8:66:95:
         45:eb:c0:e6:8f:69:7e:17:5e:03:48:d0:1a:ab:6c:e6:8d:00:
         8e:48:ca:af:9a:0e:3b:3a:f4:87:7c:95:fb:ea:a4:c6:c6:45:
         64:d5:72:6c:48:ec:1a:1f:5f:bd:ac:87:c4:f7:aa:e9:99:17:
         ad:bb:a3:07:1c:4c:c0:1b:95:0e:78:23:81:de:c4:1c:4a:29:
         69:d5:65:95:1f:cf:42:20:e0:c6:9c:11:3f:5e:8b:d4:ac:25:
         8f:ca:1d:de:a7:ef:60:c7:46:c0:d6:25:c8:29:43:a6:7c:2d:
         d8:dc:5d:fc:14:5d:d0:d5:b7:90:a7:a3:3f:5b:2a:27:a7:f0:
         a6:80:f6:80:f4:b1:32:84:ce:af:b8:8a:8d:2f:87:ec:c5:4f:
         8f:63:9e:72:3a:00:f9:b6:70:38:74:9e:55:f6:d1:7a:d1:29:
         84:73:73:28:44:37:db:3d:47:c5:ff:df:34:35:7e:f5:9a:18:
         fe:19:1a:4e:fe:ff:08:9b:e0:53:05:ca:db:ef:9c:9d:b1:83:
         c7:08:fa:3a:aa:d5:c7:4e:49:7d:c5:5b:6d:a0:40:90:be:97:
         eb:4d:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org