Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132332e302f32342d3234203d3e203237373135.roa
File:                     3137372e36372e3132332e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          MNeDy+TdvdqMzzRHR/gDMGvAZHD7OUfza1l6k1HO1s8=
Subject key identifier:   40:5B:85:C1:F6:33:30:04:B9:62:40:0F:E8:2C:D2:3E:45:40:F9:B0
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       592AFA93CA6FD77DE5122281B86DEECCAF003BC8
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132332e302f32342d3234203d3e203237373135.roa
Signing time:             Wed 08 Nov 2023 17:22:23 +0000
ROA not before:           Wed 08 Nov 2023 17:17:23 +0000
ROA not after:            Wed 06 Nov 2024 17:22:23 +0000
asID:                     27715
IP address blocks:        177.67.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2a:fa:93:ca:6f:d7:7d:e5:12:22:81:b8:6d:ee:cc:af:00:3b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Nov  8 17:17:23 2023 GMT
            Not After : Nov  6 17:22:23 2024 GMT
        Subject: CN=405B85C1F6333004B962400FE82CD23E4540F9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:bc:84:cc:d8:8b:1e:26:17:51:63:0f:e1:
                    ff:60:25:41:9f:a0:95:30:ec:35:a0:db:15:15:d2:
                    f9:93:e1:dc:18:e2:aa:14:d0:98:37:6e:9f:63:b8:
                    c7:3f:04:91:21:95:82:c5:d1:7a:3e:3c:d2:86:a4:
                    e8:7f:f5:51:90:25:e2:ab:fc:26:b3:d7:2a:ce:5b:
                    69:fc:ba:7e:5a:a8:11:a9:62:46:9d:fd:2c:02:1c:
                    54:66:bd:98:cf:9c:db:fe:f8:5f:a2:7c:ad:9e:14:
                    8f:aa:27:d7:1a:1a:3c:a3:40:ef:be:35:c5:5d:87:
                    35:d2:75:e5:f0:f1:aa:69:75:58:39:20:69:03:a4:
                    b1:cd:62:13:35:4e:37:7b:9e:eb:43:d3:39:16:08:
                    65:0e:a0:a8:5f:1a:19:db:55:e9:f5:19:7f:7d:76:
                    c8:a6:2a:36:48:9a:d7:b4:60:ca:16:c2:36:ae:99:
                    f4:a4:45:69:b3:9e:c0:39:80:a6:50:43:98:ad:e7:
                    ba:99:8f:a7:5d:98:2f:f6:52:4a:d3:61:85:48:0c:
                    6d:fa:e1:c6:57:8e:63:7b:c4:88:0c:37:fa:5c:72:
                    f6:76:52:66:24:85:1c:dc:83:f2:da:e5:95:27:10:
                    8a:5e:41:0f:4e:c1:37:7b:cf:79:19:93:2c:3c:43:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5B:85:C1:F6:33:30:04:B9:62:40:0F:E8:2C:D2:3E:45:40:F9:B0
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132332e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:c4:44:7a:3b:2d:88:2e:90:f9:d8:32:e4:41:13:e0:eb:6a:
         88:34:92:90:a0:fa:b2:78:08:cb:d3:97:92:a6:38:34:2f:99:
         33:56:fa:6b:e8:13:f0:e0:32:62:86:1b:8f:c6:82:af:3b:41:
         aa:d1:cd:17:0f:25:85:8a:1d:db:d9:78:f0:5d:0f:89:0d:92:
         03:47:26:56:1b:a6:28:c3:65:c9:7b:49:02:eb:52:18:99:6e:
         f7:4d:38:85:84:36:3c:05:c3:ea:d9:ee:a4:dd:a5:07:b1:e8:
         3c:22:ad:c8:52:80:78:68:43:78:03:3d:20:36:19:1b:b3:08:
         0b:06:30:0c:a7:c5:df:6c:8a:c7:73:9d:66:90:06:2d:fd:dc:
         94:b7:a3:2e:a1:d4:39:06:fb:b6:62:f1:28:a4:0d:ba:57:8d:
         1f:c7:7d:f2:05:e3:f8:38:bf:da:0f:ed:a6:af:48:9a:c9:0b:
         a3:d9:db:aa:d0:be:aa:41:ec:9f:96:03:68:cf:ed:96:d3:9d:
         ba:1f:10:e7:a4:06:05:ce:61:ea:4c:1a:07:05:63:72:02:75:
         50:1b:70:91:d8:48:fa:42:00:88:fc:87:c4:1b:84:6d:9b:a8:
         48:30:ba:b2:81:4b:6f:8a:b5:88:1c:24:89:f9:42:db:d0:fc:
         bd:1d:68:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org