Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38352e3233322e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          hB9b8Y2GXqRBbExcUOZIU7gWBLqNG3LSckrvO7eh5FA=
Subject key identifier:   71:84:A8:74:BE:27:0F:DC:F7:32:7A:00:ED:AB:CA:FC:2A:A2:4F:A6
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       60E008AABD9B231CD460DB198CC8B216737E601F
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:03 +0000
ROA not before:           Thu 03 Aug 2023 13:04:03 +0000
ROA not after:            Thu 01 Aug 2024 13:09:03 +0000
asID:                     262617
IP address blocks:        177.85.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e0:08:aa:bd:9b:23:1c:d4:60:db:19:8c:c8:b2:16:73:7e:60:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:03 2023 GMT
            Not After : Aug  1 13:09:03 2024 GMT
        Subject: CN=7184A874BE270FDCF7327A00EDABCAFC2AA24FA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:2f:77:9a:fb:de:be:4e:2d:ce:6b:64:23:
                    ee:bb:a8:6a:c0:6c:72:34:51:ef:c6:a4:f9:7b:f5:
                    47:73:d9:fd:91:8e:d2:59:6d:ac:58:5c:fc:a5:5f:
                    96:45:f6:e0:6e:05:e9:b6:d1:59:f3:d1:c6:bf:d4:
                    d3:75:40:ea:b3:00:d1:57:7e:32:87:34:00:5b:85:
                    ce:97:21:c0:90:34:65:e2:fb:90:eb:b1:73:32:fc:
                    d3:da:d2:ac:c3:73:83:be:61:ef:5b:9f:8a:5b:d1:
                    d6:d2:10:ee:fb:60:25:52:4e:ff:a1:68:ec:b8:7d:
                    11:88:b3:37:ef:50:28:f6:a4:b7:62:5b:0c:86:e8:
                    5c:90:91:39:c4:26:03:84:fa:c4:be:a9:ec:77:8c:
                    7d:6f:b4:ef:9c:ab:ff:d7:9b:49:12:45:f7:4e:b1:
                    dc:e5:f2:0c:1a:61:83:6e:d6:9f:b7:9f:55:f7:1a:
                    2f:e8:df:94:46:02:8e:a0:7f:95:99:ad:f6:f2:79:
                    ef:b9:ce:11:e6:1f:9a:2a:8d:12:0c:c1:2b:f3:3c:
                    f1:15:c9:b0:1e:78:a5:11:4a:f0:73:05:5c:e5:67:
                    a8:6b:11:11:22:56:58:ea:33:a4:1e:6c:73:77:29:
                    c1:04:ef:11:a6:17:92:c6:13:4c:97:18:9d:c4:63:
                    63:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:84:A8:74:BE:27:0F:DC:F7:32:7A:00:ED:AB:CA:FC:2A:A2:4F:A6
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:a6:c8:ba:e0:3d:27:f2:52:31:10:e8:08:06:a3:8e:b4:f2:
         2a:37:77:e9:38:4d:c9:76:90:8c:43:6b:bf:c5:7d:db:e4:fd:
         a0:8b:07:f3:32:9a:4e:bf:a8:5f:fa:45:c2:5f:2f:e1:ab:c6:
         fb:61:db:14:3a:19:36:66:9f:e9:bc:63:67:41:17:55:dc:9e:
         8e:f0:a5:5d:5b:b7:30:bd:d0:b3:b7:48:d4:ef:fd:4e:73:83:
         06:9d:b3:f6:63:44:34:8f:9e:46:13:09:37:88:fd:dc:ef:af:
         0d:37:4b:42:54:38:57:84:e7:b8:56:9e:e6:bd:36:bf:09:0e:
         49:80:1d:e0:48:cd:cd:51:98:46:55:a6:63:f7:c6:0d:dc:14:
         35:a3:8b:7e:be:69:cd:9b:66:0a:8a:bc:72:38:e5:4b:10:91:
         ec:05:e8:87:9d:4b:67:ae:74:ed:f0:b5:7b:48:b1:d5:1f:ee:
         4a:9f:94:aa:8e:81:40:5a:58:71:39:ea:24:17:da:3f:dc:d6:
         1d:e3:62:7a:e5:ce:a5:0d:27:d6:97:bb:9c:32:de:4e:01:84:
         79:b5:36:63:6d:1c:ff:53:be:9e:e8:b0:9e:93:0e:88:40:10:
         fc:f2:82:56:6e:34:d2:18:09:d1:aa:09:63:5d:dc:6c:00:d0:
         68:83:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org