Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/1/3137372e38342e39362e302f32322d3234203d3e20323632353832.roa
File:                     3137372e38342e39362e302f32322d3234203d3e20323632353832.roa (raw, json)
Hash identifier:          zfycoiB14NFNQhp+Cy5T+W7kX7UNDyN35QL9spc4R64=
Subject key identifier:   23:C8:5A:B0:79:05:5E:68:3D:5E:C0:5D:68:C6:CB:44:54:FE:2E:5B
Certificate issuer:       /CN=88179750490F69D6815265DC81CD97BB402D9A2B
Certificate serial:       34F84647EDDB445BE2CB7063722C2089E7AD4A9A
Authority key identifier: 88:17:97:50:49:0F:69:D6:81:52:65:DC:81:CD:97:BB:40:2D:9A:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88179750490F69D6815265DC81CD97BB402D9A2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/1/3137372e38342e39362e302f32322d3234203d3e20323632353832.roa
Signing time:             Mon 21 Aug 2023 17:11:50 +0000
ROA not before:           Mon 21 Aug 2023 17:06:50 +0000
ROA not after:            Mon 19 Aug 2024 17:11:50 +0000
asID:                     262582
IP address blocks:        177.84.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f8:46:47:ed:db:44:5b:e2:cb:70:63:72:2c:20:89:e7:ad:4a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88179750490F69D6815265DC81CD97BB402D9A2B
        Validity
            Not Before: Aug 21 17:06:50 2023 GMT
            Not After : Aug 19 17:11:50 2024 GMT
        Subject: CN=23C85AB079055E683D5EC05D68C6CB4454FE2E5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0e:1b:49:fb:4b:60:fb:19:41:51:38:45:0a:
                    15:a7:fc:69:18:c3:90:e3:f2:96:ff:0a:f7:2b:d4:
                    93:36:81:be:d1:23:25:a6:25:82:91:35:12:9b:b4:
                    e1:17:0c:1d:c2:a5:6a:b4:19:b5:9d:31:c2:10:e6:
                    c7:91:2e:8e:c2:c5:8d:17:31:c6:42:85:22:06:80:
                    dc:d2:37:9d:0e:4b:80:5c:95:88:1b:d7:db:7f:1c:
                    cc:c2:b6:56:da:15:cf:4f:f2:ad:02:c3:ba:5a:61:
                    83:9d:a0:3e:df:5e:63:02:33:ae:76:8c:30:b0:1d:
                    33:9b:bc:d7:fd:52:6d:a8:29:ea:75:ba:a0:a4:95:
                    17:d8:35:18:49:bd:54:9a:eb:6a:43:44:a7:ca:5c:
                    31:07:ba:1b:c4:cd:23:7c:b9:93:b2:a3:00:91:45:
                    5c:f9:f5:2f:d3:20:3f:ec:2a:97:07:75:0f:53:e5:
                    b9:a1:54:96:0b:37:af:a6:d0:db:1d:49:df:b8:b0:
                    6a:fd:d3:e6:a2:1f:ef:55:f1:0f:8c:56:85:43:42:
                    b5:13:b7:39:ed:7d:30:e8:07:02:bb:58:30:90:31:
                    26:46:39:58:c9:dc:e5:93:0f:6e:40:52:90:ea:65:
                    ad:21:b3:55:be:4c:af:14:7b:a0:92:23:78:c6:de:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C8:5A:B0:79:05:5E:68:3D:5E:C0:5D:68:C6:CB:44:54:FE:2E:5B
            X509v3 Authority Key Identifier:
                keyid:88:17:97:50:49:0F:69:D6:81:52:65:DC:81:CD:97:BB:40:2D:9A:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/1/88179750490F69D6815265DC81CD97BB402D9A2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88179750490F69D6815265DC81CD97BB402D9A2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/1/3137372e38342e39362e302f32322d3234203d3e20323632353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:ff:99:44:3f:8b:dc:8e:7b:14:47:60:61:7f:f3:0c:cc:60:
         c4:28:64:50:93:39:31:9e:9f:7c:5d:60:95:49:26:88:ee:ce:
         1e:00:06:dd:1a:7f:c7:03:2d:e6:0b:69:ec:dd:9a:1d:09:7d:
         f0:3e:c7:ab:8a:af:9f:4f:45:01:8d:90:78:52:82:5a:86:8b:
         3d:c1:0d:5d:ab:f4:cc:5a:1b:8e:13:cd:31:d2:7f:3a:a3:e9:
         57:53:15:63:91:03:00:6f:50:ad:b5:94:65:8d:d0:d4:cc:82:
         76:0a:54:67:9a:33:f7:1b:81:a2:d8:be:2e:7b:d2:3b:99:36:
         4b:2a:a4:74:e8:c1:a1:06:fb:b4:17:52:92:22:3f:66:77:41:
         b1:0d:9b:10:1e:53:9c:98:db:e5:0a:45:96:30:ce:cf:b9:20:
         37:ff:29:a5:6e:14:0f:8d:7a:94:9b:8a:7f:90:30:bc:e6:d7:
         c6:08:b3:20:81:43:96:1f:bb:49:6c:db:dd:bc:b6:94:6f:0b:
         04:7b:43:f6:5b:9a:16:5b:f9:40:92:8b:66:37:59:df:fe:6f:
         a1:3c:36:3e:4f:11:ec:25:be:4d:ad:d3:56:f6:c1:1a:3d:bd:
         12:ea:ad:b3:a6:64:2e:62:4a:bf:fa:7b:2b:82:b6:5b:3a:2d:
         df:ea:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org