Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3137372e36372e3136372e302f32342d3234203d3e20323731303435.roa
File:                     3137372e36372e3136372e302f32342d3234203d3e20323731303435.roa (raw, json)
Hash identifier:          LNf42fxhu1CWYRTNk7ULdyqvSHRnAqIQht73zru+TPA=
Subject key identifier:   68:48:E3:D3:AE:1C:34:3A:9F:78:04:51:C4:51:BD:39:D9:E3:09:E4
Certificate issuer:       /CN=8E209267CDC4411AAE427AD7306DCA3D21923167
Certificate serial:       26C4F5D9DAC9FC9B831AB1B1871DF8AA72FD5DCD
Authority key identifier: 8E:20:92:67:CD:C4:41:1A:AE:42:7A:D7:30:6D:CA:3D:21:92:31:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E209267CDC4411AAE427AD7306DCA3D21923167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3137372e36372e3136372e302f32342d3234203d3e20323731303435.roa
Signing time:             Wed 21 Dec 2022 18:05:31 +0000
ROA not before:           Wed 21 Dec 2022 18:00:31 +0000
ROA not after:            Wed 20 Dec 2023 18:05:31 +0000
asID:                     271045
IP address blocks:        177.67.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c4:f5:d9:da:c9:fc:9b:83:1a:b1:b1:87:1d:f8:aa:72:fd:5d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E209267CDC4411AAE427AD7306DCA3D21923167
        Validity
            Not Before: Dec 21 18:00:31 2022 GMT
            Not After : Dec 20 18:05:31 2023 GMT
        Subject: CN=6848E3D3AE1C343A9F780451C451BD39D9E309E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:e7:70:aa:3e:fa:4b:6f:6b:1c:f4:dd:c0:
                    ee:45:39:7f:88:40:53:5b:61:62:a5:44:84:33:57:
                    02:5c:a7:ba:ad:57:95:59:64:88:63:a7:2f:1d:3a:
                    70:fe:87:45:b6:34:b4:ba:17:85:f8:cc:9e:69:a5:
                    87:a2:c6:8b:9b:d2:39:29:e1:f3:7f:84:ed:6e:fa:
                    ab:06:ce:cc:1f:41:56:83:41:5c:24:eb:c7:f6:8b:
                    16:66:49:f9:ea:2a:de:6e:19:b4:b1:c6:3a:bd:49:
                    b7:bd:22:4a:0c:d0:06:fe:b1:71:64:5d:ef:0c:f3:
                    45:b1:d2:f4:16:94:7b:22:e0:90:47:2b:2e:1e:46:
                    a6:81:bd:f5:23:69:b7:72:e8:33:45:7e:4c:e2:aa:
                    45:b4:d4:01:17:c9:55:75:2e:82:09:15:94:62:f1:
                    f9:d4:79:f9:ae:76:f7:1e:59:50:c1:16:da:c4:bd:
                    fc:0e:94:c5:e2:d6:1e:bc:a7:dc:59:1c:2d:9e:a7:
                    12:b7:88:19:66:3c:04:b1:29:e0:c0:74:88:8a:31:
                    cc:90:30:d9:c2:df:62:61:64:46:f6:d9:ad:fb:a3:
                    6e:d1:02:6e:54:f6:26:13:80:19:98:a9:9d:3c:ac:
                    1f:71:c5:c1:d2:7b:7a:65:43:cc:1c:ec:81:7d:ad:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:48:E3:D3:AE:1C:34:3A:9F:78:04:51:C4:51:BD:39:D9:E3:09:E4
            X509v3 Authority Key Identifier:
                keyid:8E:20:92:67:CD:C4:41:1A:AE:42:7A:D7:30:6D:CA:3D:21:92:31:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/8E209267CDC4411AAE427AD7306DCA3D21923167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E209267CDC4411AAE427AD7306DCA3D21923167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3137372e36372e3136372e302f32342d3234203d3e20323731303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:9b:9e:22:f5:71:7a:a6:44:a1:4f:29:99:a6:e5:b4:c3:2b:
         70:94:a2:ad:cd:3e:d6:fc:fd:9a:6a:f5:6c:85:55:45:8a:43:
         55:c9:c7:70:e6:19:7f:69:1b:59:6d:9e:89:84:b8:40:79:e2:
         bf:88:2c:32:92:74:fe:4a:88:90:5f:51:c3:41:8c:20:9a:ff:
         9e:9b:3f:7e:86:c6:7f:dd:28:bc:89:56:f6:9b:c7:db:4d:ae:
         41:87:30:0c:5a:32:fa:75:dd:4b:23:db:75:d5:79:c4:cd:f6:
         6a:7e:9c:92:2d:37:7e:4f:d4:a2:5d:64:5f:f3:48:24:98:b8:
         2a:d3:52:ce:64:fe:88:66:1e:27:19:34:d5:2e:a0:c5:2a:e1:
         a6:e5:86:5f:7b:7f:1e:76:25:fb:6c:29:58:4e:b0:85:0e:74:
         a0:ff:78:e6:91:6c:30:28:e9:c7:ea:58:b5:ef:6a:37:71:4b:
         fc:ec:9f:30:79:a0:ec:96:27:8d:07:5d:4f:a0:ee:0a:66:15:
         d3:ba:70:51:71:b2:fa:34:5c:36:4b:9b:a0:39:36:3e:d6:97:
         4d:8c:02:b8:4d:ba:0e:af:1f:cd:47:b2:36:53:b7:39:86:6e:
         fe:6c:b3:4e:0b:13:6e:b7:2a:4a:b0:09:6e:d4:ef:89:06:58:
         11:a1:2e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org