Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32322d3232203d3e20323632363137.roa
File:                     3137372e38352e3233322e302f32322d3232203d3e20323632363137.roa (raw, json)
Hash identifier:          GSPrvHCAccFnycDJDnffmh71Ed3PPywYpl/mLYyOk70=
Subject key identifier:   E8:E0:24:FF:40:7B:1F:D1:8A:97:96:9F:1D:AC:05:77:E6:0B:AF:59
Certificate issuer:       /CN=A29A661923968BDFB1DCB02A45952175689C9AE9
Certificate serial:       2ABA2C5F249F019D767D12B497F5600AF311D8B2
Authority key identifier: A2:9A:66:19:23:96:8B:DF:B1:DC:B0:2A:45:95:21:75:68:9C:9A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A29A661923968BDFB1DCB02A45952175689C9AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32322d3232203d3e20323632363137.roa
Signing time:             Wed 18 Jan 2023 17:49:35 +0000
ROA not before:           Wed 18 Jan 2023 17:44:35 +0000
ROA not after:            Wed 17 Jan 2024 17:49:35 +0000
asID:                     262617
IP address blocks:        177.85.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ba:2c:5f:24:9f:01:9d:76:7d:12:b4:97:f5:60:0a:f3:11:d8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A29A661923968BDFB1DCB02A45952175689C9AE9
        Validity
            Not Before: Jan 18 17:44:35 2023 GMT
            Not After : Jan 17 17:49:35 2024 GMT
        Subject: CN=E8E024FF407B1FD18A97969F1DAC0577E60BAF59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:e3:8f:96:56:2f:30:39:3e:87:60:1d:a6:
                    11:09:e2:9c:86:30:a9:46:d6:f4:bb:d5:4c:d9:bc:
                    37:b9:92:71:68:cc:17:e8:d7:f1:9e:2d:4a:4c:d1:
                    19:a7:06:06:a6:b2:9a:05:03:95:e6:b2:da:ec:bb:
                    9f:f2:47:f2:41:a1:84:8c:20:69:b0:1e:cf:83:81:
                    0c:48:ad:ea:6a:8f:d3:99:d2:0a:43:2b:8a:ed:2c:
                    df:ac:9a:27:fb:9f:f4:88:dd:05:d7:bd:18:54:7a:
                    d1:07:4a:12:53:80:76:aa:da:94:c2:95:e3:25:7f:
                    c2:f0:fd:b6:11:13:6b:1c:3f:93:9f:4b:2c:82:30:
                    51:53:2b:06:5c:5c:82:ad:3a:cf:26:4e:ad:5a:60:
                    a4:8b:12:e1:d0:ea:9b:84:2e:b2:0c:fe:02:f7:bc:
                    25:12:43:cc:53:52:e9:1e:72:57:45:9f:13:58:d4:
                    43:1a:b2:7b:3e:72:88:6d:e7:d1:93:73:03:0f:87:
                    de:87:39:1d:9b:82:70:76:d1:59:4f:ac:ed:e8:97:
                    c0:df:fc:1a:ef:6e:48:83:07:5d:ff:5a:16:c0:e0:
                    a7:1e:02:d7:8f:b2:75:3c:cc:d3:06:ee:8c:fe:26:
                    65:52:7f:62:06:bb:83:76:b0:34:27:75:96:bd:2f:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E0:24:FF:40:7B:1F:D1:8A:97:96:9F:1D:AC:05:77:E6:0B:AF:59
            X509v3 Authority Key Identifier:
                keyid:A2:9A:66:19:23:96:8B:DF:B1:DC:B0:2A:45:95:21:75:68:9C:9A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/A29A661923968BDFB1DCB02A45952175689C9AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A29A661923968BDFB1DCB02A45952175689C9AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32322d3232203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:2e:c4:ad:43:07:d2:ce:c5:b1:b8:30:c2:14:82:26:40:19:
         bd:86:a0:4d:93:16:d0:64:78:0f:9a:25:98:ee:5c:b3:e3:07:
         ab:97:e5:a7:06:4e:23:7f:d3:bf:c3:82:5a:46:43:d6:0e:a8:
         a5:c9:d2:6f:9c:59:7a:d3:3c:61:21:a6:af:d9:89:37:7e:98:
         25:21:74:45:72:55:cf:99:c9:ab:33:9f:cb:77:26:92:71:e6:
         5c:8e:30:5a:69:dd:96:ca:7f:7c:7b:5e:c6:ee:2a:3f:d1:7b:
         65:6d:cc:6b:a8:a2:49:ca:f6:70:a2:f1:91:fd:c4:de:c2:e0:
         b0:00:ba:14:1f:48:36:89:5d:64:6b:14:ac:69:a9:5f:fe:e0:
         27:65:05:16:83:aa:9c:1d:d0:8e:d9:4d:06:6b:b0:91:30:07:
         22:b7:e2:28:55:88:b8:2b:23:ea:db:6f:6c:17:13:d6:77:a1:
         ac:0c:47:01:df:70:90:e7:cb:5b:dd:c1:f9:1b:fd:ff:3c:fc:
         27:2e:7b:b0:ef:4e:0f:ba:28:b9:55:b0:87:71:dd:21:c6:3f:
         cd:fe:a1:9b:f5:27:de:83:5b:4f:a2:02:b7:04:e2:1d:b1:a2:
         c6:99:9c:40:64:43:ab:8e:54:09:31:f6:1f:01:9d:f9:1d:27:
         36:07:27:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org