Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e39302e302f32332d3233203d3e20323633303134.roa
File:                     3137372e31302e39302e302f32332d3233203d3e20323633303134.roa (raw, json)
Hash identifier:          kJeV33MgHI8Dm1hvy2KLSxch++UrfktCqrqWwzNTlrU=
Subject key identifier:   30:99:01:A1:C4:54:21:F6:0D:94:A4:40:41:D8:F0:2F:46:F9:84:57
Certificate issuer:       /CN=9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4
Certificate serial:       059092054734B2197DA956BF29B573EC3AD8FCAC
Authority key identifier: 9B:D9:F6:50:7D:7F:5B:C4:E7:62:D6:1F:E6:38:E4:19:F1:AB:34:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e39302e302f32332d3233203d3e20323633303134.roa
Signing time:             Thu 29 Jun 2023 21:00:00 +0000
ROA not before:           Thu 29 Jun 2023 20:55:00 +0000
ROA not after:            Thu 27 Jun 2024 21:00:00 +0000
asID:                     263014
IP address blocks:        177.10.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:90:92:05:47:34:b2:19:7d:a9:56:bf:29:b5:73:ec:3a:d8:fc:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4
        Validity
            Not Before: Jun 29 20:55:00 2023 GMT
            Not After : Jun 27 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:3f:d5:e2:57:3f:2d:09:5a:fa:7e:a6:30:
                    2a:a6:b2:ee:bf:c9:d7:87:ef:0e:0a:2d:49:f5:9a:
                    1c:d7:7a:33:ff:1a:6e:25:f1:34:7a:5f:f2:67:dc:
                    3a:e3:cd:88:a4:e0:ae:0a:84:30:e6:9b:29:59:7a:
                    dc:c6:34:58:65:79:25:84:55:1b:60:3c:3f:4a:72:
                    bd:e4:8c:ce:90:8d:58:e2:3d:4b:a5:be:44:d9:b8:
                    c3:8f:fa:b7:b9:0c:4c:dc:94:e6:42:c2:b9:14:0d:
                    49:86:c7:50:3c:ac:cd:c8:4e:b9:7b:a1:fc:7e:82:
                    2a:e5:39:da:5f:19:e0:40:bf:57:69:35:1b:4a:08:
                    58:bf:e4:9d:4a:f0:9e:2a:b2:18:1e:1f:96:8a:88:
                    33:b5:84:f7:22:3d:ae:10:58:65:0b:cf:06:da:35:
                    d5:ad:9d:e0:1a:44:93:67:e4:d5:22:6a:c4:96:af:
                    ef:5c:d7:b4:72:fa:3d:27:a3:23:6d:bc:97:3e:5e:
                    7d:19:35:94:80:15:c3:4c:48:88:ec:de:80:a6:66:
                    c1:5d:ab:38:7f:5c:1f:fc:eb:ed:d1:d1:eb:4f:c9:
                    27:5c:92:cb:eb:cf:a8:99:d0:0d:72:d2:77:3b:a9:
                    61:76:4b:d6:30:cc:2e:57:3b:a8:1c:c2:34:ec:e1:
                    66:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:99:01:A1:C4:54:21:F6:0D:94:A4:40:41:D8:F0:2F:46:F9:84:57
            X509v3 Authority Key Identifier:
                keyid:9B:D9:F6:50:7D:7F:5B:C4:E7:62:D6:1F:E6:38:E4:19:F1:AB:34:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e39302e302f32332d3233203d3e20323633303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:52:09:e6:65:d2:20:06:84:69:1a:1b:4b:6e:b2:13:e0:b4:
         8f:2f:12:92:f3:fc:db:9d:fe:95:7f:0c:df:0b:51:95:d7:52:
         fd:20:c2:ac:d2:dc:c8:60:a4:03:fc:69:cb:3b:bd:13:9d:60:
         1b:99:88:a5:d0:79:89:7d:ca:83:65:3c:16:ff:2a:fe:ee:aa:
         18:29:53:c1:2b:8f:c2:79:b2:78:54:30:4f:b6:4d:34:67:36:
         66:76:fe:c0:8d:f7:42:fa:53:ff:98:08:91:07:bd:98:9a:63:
         8c:7f:c8:de:7e:31:d9:a7:53:d1:c2:4e:68:63:fe:0c:7b:1a:
         80:cc:cd:8b:18:d0:51:05:36:a2:60:29:1b:a0:ac:25:bb:dc:
         9d:55:3f:eb:fb:a3:a5:0e:67:f9:e2:57:7c:48:95:c1:1e:14:
         65:96:6a:da:31:fd:1d:b8:8f:3a:c9:f8:1d:ae:ca:bb:85:75:
         5b:cd:1c:f3:c8:5f:6e:bc:96:8b:1d:70:2f:45:92:8c:a8:d6:
         11:25:78:6d:3a:e8:11:72:9b:2e:ae:d2:33:3f:89:ea:6e:17:
         a6:b0:e4:c2:f4:b6:a7:12:c7:77:9b:1b:0d:4e:7b:17:20:a8:
         97:6f:d7:94:92:b4:b0:a5:11:fd:ac:88:25:27:52:49:be:4a:
         57:5d:87:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org