Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233352e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38352e3233352e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          Ap0BNrLaiSaP7cKQqsW3a9uFO8sVj4u66uwzbdKxUlE=
Subject key identifier:   68:41:50:7E:92:F1:3E:6C:23:4F:1B:3A:92:EE:9A:D6:87:43:1B:B8
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       48345C174F1EF0941D8C41EEB8091D3F758F6B3A
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233352e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:12 +0000
ROA not before:           Thu 03 Aug 2023 13:04:12 +0000
ROA not after:            Thu 01 Aug 2024 13:09:12 +0000
asID:                     262617
IP address blocks:        177.85.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:34:5c:17:4f:1e:f0:94:1d:8c:41:ee:b8:09:1d:3f:75:8f:6b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:12 2023 GMT
            Not After : Aug  1 13:09:12 2024 GMT
        Subject: CN=6841507E92F13E6C234F1B3A92EE9AD687431BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:f3:31:9c:41:bd:06:f1:f5:14:0b:cc:5e:
                    09:67:1f:79:39:cf:7c:e4:3d:0c:73:78:90:44:1a:
                    22:ca:f3:98:22:34:27:ce:39:35:71:b5:c9:d3:43:
                    82:35:4a:b0:e7:7b:ff:f1:32:cc:49:8d:13:c2:9b:
                    7b:e0:bb:19:fe:c4:a8:e9:9a:f8:20:50:17:c0:23:
                    2f:81:2d:b4:dc:8e:c1:f8:58:dd:2a:5d:d6:96:b5:
                    d4:01:50:8c:ab:24:2a:60:5c:d2:79:d9:fb:57:81:
                    9e:bd:d3:53:0a:aa:18:4c:2a:70:08:ed:c7:fe:10:
                    d3:a5:ca:2e:ea:d3:f8:3d:b0:6d:20:f0:40:dd:f9:
                    f5:32:2a:e1:b1:94:a5:ca:76:39:63:f6:c0:f5:f1:
                    45:00:23:4b:7a:62:f7:6a:99:93:cf:ef:7d:cb:b4:
                    7a:a2:1d:be:bc:25:b4:95:f4:b0:f6:63:78:3d:36:
                    18:34:be:d4:3a:30:4b:0a:a4:35:ea:51:24:17:4f:
                    f6:af:1a:c9:f0:30:b5:61:b9:c8:16:6b:ad:ad:28:
                    df:f6:4d:83:68:ad:32:02:ac:a9:1f:d0:2a:d2:e9:
                    85:c1:b4:a6:ac:33:2a:6f:46:7d:41:cd:95:db:7f:
                    14:58:58:2b:3b:d9:56:cc:84:be:1f:0f:e8:45:64:
                    66:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:41:50:7E:92:F1:3E:6C:23:4F:1B:3A:92:EE:9A:D6:87:43:1B:B8
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233352e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:44:ed:da:a1:98:7f:62:a0:70:1e:53:f2:67:fe:53:09:
         4f:d0:d4:21:a7:cb:e8:29:c5:87:6a:d5:fa:e5:e0:64:2e:08:
         4f:36:95:2c:6e:2d:f5:9d:21:f8:9e:67:bd:1f:b5:c5:ad:25:
         dd:9c:f7:11:17:43:bd:30:e3:fe:65:02:d7:ac:ab:83:5a:37:
         fa:fd:7f:f7:3e:8c:e7:01:2d:8f:30:f9:0f:ea:85:72:c5:98:
         15:4a:0c:e6:fd:17:a3:c8:7a:50:f7:0a:c4:3f:6a:ff:b3:26:
         d1:a5:4d:66:a1:a6:e3:59:85:24:37:b1:43:e9:fc:28:97:15:
         3a:3b:84:b1:0f:2b:d5:54:3e:c6:23:10:20:c7:d3:24:39:2d:
         6f:fa:8c:e9:ef:3b:46:5c:ae:f9:1e:e0:1c:a8:c0:03:b8:85:
         4f:60:d6:72:58:99:ff:60:e1:54:cf:64:cf:71:5a:f3:50:a5:
         f0:e9:b1:5f:dd:25:bd:59:ad:e8:4b:fc:c8:fd:b9:82:aa:c0:
         62:62:bc:1c:6a:61:95:69:98:ad:f4:ec:f7:68:e3:7f:d7:f9:
         37:4f:ff:ff:cd:15:c1:14:1c:b5:c8:02:a8:0e:be:7b:8e:e8:
         f9:a9:62:67:ab:9f:83:06:df:c0:4f:44:eb:88:b7:36:19:d7:
         af:a1:b5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org