Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/3137372e31312e38392e302f32342d3234203d3e20323632383734.roa
File:                     3137372e31312e38392e302f32342d3234203d3e20323632383734.roa (raw, json)
Hash identifier:          Hxn013soa8jEZfTBPyY5m+AN159CMEkaszjCspeJ8xM=
Subject key identifier:   CE:86:7E:1F:D5:F6:69:C3:9F:D1:A8:BA:C6:B5:EA:AE:A4:F4:0E:F9
Certificate issuer:       /CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
Certificate serial:       1ECE49A6716E9F4DCC81AF94F2F0ED09746B706B
Authority key identifier: 1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/3137372e31312e38392e302f32342d3234203d3e20323632383734.roa
Signing time:             Wed 04 Jan 2023 13:23:41 +0000
ROA not before:           Wed 04 Jan 2023 13:18:41 +0000
ROA not after:            Wed 03 Jan 2024 13:23:41 +0000
asID:                     262874
IP address blocks:        177.11.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ce:49:a6:71:6e:9f:4d:cc:81:af:94:f2:f0:ed:09:74:6b:70:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
        Validity
            Not Before: Jan  4 13:18:41 2023 GMT
            Not After : Jan  3 13:23:41 2024 GMT
        Subject: CN=CE867E1FD5F669C39FD1A8BAC6B5EAAEA4F40EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:8d:64:e0:ab:2b:eb:b0:21:0f:e4:14:c2:
                    ad:68:46:40:02:ed:a6:e8:84:30:7e:3c:a6:ec:73:
                    6e:e7:2e:06:91:00:9c:49:bf:3f:0b:fa:5a:5b:ed:
                    14:d8:64:cc:66:3a:d4:0c:5f:8e:df:12:9a:f7:e6:
                    c2:05:35:dd:06:96:af:9d:2c:15:56:d4:32:54:40:
                    e7:d8:9f:c6:2e:2d:93:31:2e:1e:03:8a:07:91:cb:
                    24:76:a2:c2:43:48:95:64:3c:c3:37:75:08:41:82:
                    c6:a2:5c:db:30:4a:10:97:98:fc:ac:02:bb:1c:d7:
                    72:b7:e2:39:2d:27:d0:9e:dd:cf:53:6e:46:5b:c8:
                    2f:37:ed:72:c2:c4:46:de:04:08:cb:1c:cf:05:ce:
                    54:28:87:30:0c:31:c4:8a:a1:d1:4e:a3:3a:9b:66:
                    23:2b:4e:b4:2f:7d:72:e6:5e:67:53:15:0b:2b:40:
                    93:ac:41:dd:46:6c:49:1a:75:71:1e:26:44:21:3b:
                    43:33:96:ac:c5:87:05:b7:e7:cc:1f:69:ec:33:8a:
                    1d:4d:9f:cf:3f:40:1f:81:ab:56:5d:ab:d9:78:9c:
                    24:df:94:f3:f1:dc:f8:f7:0a:47:f5:54:cf:b3:63:
                    02:8a:73:f6:7c:d7:7f:27:22:49:66:00:70:5e:11:
                    70:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:86:7E:1F:D5:F6:69:C3:9F:D1:A8:BA:C6:B5:EA:AE:A4:F4:0E:F9
            X509v3 Authority Key Identifier:
                keyid:1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/3137372e31312e38392e302f32342d3234203d3e20323632383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:8b:c1:23:6d:53:15:e0:5e:15:98:02:af:a0:d5:bd:35:24:
         00:a8:8b:4c:a5:c9:93:ef:f5:9b:18:5d:08:26:5a:a3:9d:a4:
         cd:d1:df:9f:4b:9f:01:bf:2f:c4:24:d2:80:87:c8:8f:29:0d:
         82:66:c9:36:66:85:58:32:0f:a4:a4:6a:7c:2b:9d:a4:50:94:
         ab:84:ba:d5:46:86:24:d5:5d:be:64:c6:02:aa:22:15:d0:b3:
         f8:5c:1f:1d:f0:3a:f0:9d:f6:78:fa:c4:de:11:c2:b9:c0:ef:
         d7:a4:b8:00:82:4b:df:f9:a9:b0:89:40:10:34:fa:58:a0:ef:
         31:a6:2f:dc:66:d4:21:22:66:58:b2:9f:fe:c8:5f:de:38:4c:
         2f:06:21:a0:f6:d9:33:d6:19:d6:44:29:4d:28:1d:77:33:12:
         93:5a:dd:f8:e5:a5:09:01:7d:c0:17:a2:12:4d:c4:a1:3e:16:
         b2:d7:eb:db:b1:a5:1a:99:f4:dc:f9:18:5d:00:5d:70:aa:e8:
         56:94:85:8a:16:5e:5a:f8:dc:f1:a1:80:3d:1e:f6:fa:b0:60:
         ee:e3:b3:ec:21:c6:db:81:10:aa:93:5f:a3:ca:69:77:b1:4b:
         ee:ed:c0:34:51:c1:aa:d8:e5:3e:8d:89:55:3b:20:22:f9:e0:
         35:67:38:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org