Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/3137372e31312e39312e302f32342d3234203d3e20323632383734.roa
File:                     3137372e31312e39312e302f32342d3234203d3e20323632383734.roa (raw, json)
Hash identifier:          k0OTnFg0wpswCSvwnLiEIUoxRS0JjzU002T0E9YmXyw=
Subject key identifier:   E8:43:E3:E1:37:C7:D7:A8:36:31:A0:33:49:E1:04:0C:77:A1:BF:D0
Certificate issuer:       /CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
Certificate serial:       37A8CB056F5C85A5FBACBAA51372FB58BE6755ED
Authority key identifier: 1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/3137372e31312e39312e302f32342d3234203d3e20323632383734.roa
Signing time:             Fri 06 Jan 2023 12:08:31 +0000
ROA not before:           Fri 06 Jan 2023 12:03:30 +0000
ROA not after:            Fri 05 Jan 2024 12:08:30 +0000
asID:                     262874
IP address blocks:        177.11.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a8:cb:05:6f:5c:85:a5:fb:ac:ba:a5:13:72:fb:58:be:67:55:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
        Validity
            Not Before: Jan  6 12:03:30 2023 GMT
            Not After : Jan  5 12:08:30 2024 GMT
        Subject: CN=E843E3E137C7D7A83631A03349E1040C77A1BFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:25:ca:42:6c:7a:39:48:1c:a1:17:78:14:
                    09:05:df:26:60:d1:c8:f4:de:80:bd:7a:07:fd:67:
                    ef:22:83:da:73:b2:41:0a:58:ce:e2:bb:52:45:6d:
                    38:d5:98:02:e0:13:50:ab:ba:1d:59:b2:ba:4e:39:
                    83:27:e3:7d:c3:47:1d:a8:77:9a:c3:b8:01:fc:19:
                    3f:10:c9:c4:1a:74:44:e5:be:79:03:f2:32:20:56:
                    0e:1f:7c:40:ff:ea:0e:02:3c:fe:c4:64:ef:5e:3a:
                    4e:d0:59:4e:61:45:1b:ea:3e:c0:e3:ed:3c:cf:33:
                    bb:6e:0b:54:9b:c3:ca:bd:12:51:75:3d:53:32:8e:
                    a6:6e:3c:44:37:f7:9c:96:7f:1d:de:dd:aa:f8:2c:
                    05:10:27:95:f7:55:6e:4e:3b:06:45:84:2e:40:32:
                    59:78:49:b9:c9:b6:46:c9:3d:24:06:8a:da:6f:fa:
                    77:c9:2e:f4:09:30:a2:33:d0:57:17:79:2c:a3:29:
                    d1:49:29:a3:45:72:1c:2a:a4:2d:47:0f:00:3f:1c:
                    de:41:03:ca:0b:9b:1c:21:f9:be:3d:be:2d:a7:ab:
                    d1:84:c1:63:c8:d4:91:ac:d2:4c:63:80:16:33:89:
                    d7:c3:11:e2:e9:76:c0:cc:6e:ad:83:64:ea:f0:26:
                    f2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:43:E3:E1:37:C7:D7:A8:36:31:A0:33:49:E1:04:0C:77:A1:BF:D0
            X509v3 Authority Key Identifier:
                keyid:1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/3137372e31312e39312e302f32342d3234203d3e20323632383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:5e:4d:b9:87:e6:5a:4b:d0:6d:74:44:7f:22:43:a6:2e:64:
         c6:25:13:ab:e8:37:c8:fd:82:d8:fc:67:69:b9:b1:e4:fc:e7:
         46:4f:ff:71:f6:53:6d:fa:fd:d0:72:3b:62:d8:1a:97:69:7f:
         86:bc:cc:d4:bc:60:b4:58:1e:1d:e0:84:58:23:9a:50:aa:26:
         eb:68:67:9b:04:b1:1b:d8:1a:03:df:cf:bb:bc:86:14:dc:5d:
         fd:3c:c9:71:a2:5b:1b:a4:13:ea:b2:59:fc:38:fa:03:99:8d:
         4b:2c:cd:ed:a8:8b:e9:87:2b:a1:a2:e2:d7:92:54:87:ea:76:
         55:a1:2b:b1:0a:b2:cf:2b:f6:d4:e9:d6:88:8c:1f:7c:04:97:
         5e:52:55:66:c7:f8:82:02:28:42:1b:45:16:54:2f:41:56:41:
         59:cd:83:57:e2:8e:10:5f:f7:fd:44:6d:8d:84:45:fe:df:f3:
         93:3f:4f:d1:34:11:02:70:c0:e5:e9:f3:fc:29:f9:39:38:a6:
         c3:32:7a:75:59:66:c1:6f:bb:47:72:e5:4d:e4:6d:d4:3d:81:
         84:95:95:f8:62:a1:43:2e:56:68:9a:97:3b:fd:ed:13:17:8f:
         bd:2d:af:1e:5d:1e:39:9a:a6:17:d6:86:c7:47:ed:29:9e:58:
         12:fc:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org