Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3137372e36372e3234342e302f32342d3234203d3e20323632353335.roa
File:                     3137372e36372e3234342e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          lmK9bqoLc/jK/DvhnsimK63DN77VCoAabhJ95RrEojs=
Subject key identifier:   D6:4B:B9:50:AB:4D:F7:61:47:18:32:F2:A8:72:EB:4D:27:82:BB:C9
Certificate issuer:       /CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
Certificate serial:       600AB3785DECD569D32E75F7E068D9BD58CE421D
Authority key identifier: 82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3137372e36372e3234342e302f32342d3234203d3e20323632353335.roa
Signing time:             Thu 04 Apr 2024 07:35:00 +0000
ROA not before:           Thu 04 Apr 2024 07:30:00 +0000
ROA not after:            Thu 03 Apr 2025 07:35:00 +0000
asID:                     262535
IP address blocks:        177.67.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0a:b3:78:5d:ec:d5:69:d3:2e:75:f7:e0:68:d9:bd:58:ce:42:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
        Validity
            Not Before: Apr  4 07:30:00 2024 GMT
            Not After : Apr  3 07:35:00 2025 GMT
        Subject: CN=D64BB950AB4DF761471832F2A872EB4D2782BBC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:65:bf:db:9d:4e:ad:77:03:4d:b1:14:c1:8c:
                    27:01:01:d2:d7:e9:05:88:f9:81:ca:95:3a:f4:c5:
                    c1:6e:e5:ea:29:e0:e1:b2:be:6e:91:27:94:93:a9:
                    0f:aa:b6:64:aa:82:61:64:0a:d3:82:99:36:59:36:
                    13:a5:a3:20:ba:ec:8c:0c:a3:09:d0:b0:b7:c9:ea:
                    03:04:17:4e:3f:37:96:29:3d:e0:4c:df:dd:08:d2:
                    7e:97:a3:a8:0c:bc:4a:f1:75:f9:14:ff:ca:14:60:
                    47:7a:b2:e7:85:20:40:da:51:aa:5d:ab:cf:57:4b:
                    f3:98:1f:65:d5:38:a0:94:91:e2:e1:30:a7:f5:70:
                    f4:83:8e:20:fb:8d:a9:3b:c1:41:64:36:99:ca:7d:
                    7e:7c:b9:20:3e:82:3b:42:af:c6:68:82:63:50:3f:
                    ed:c0:73:2c:1c:af:8f:f6:c7:3e:34:d9:bb:aa:7d:
                    de:75:64:00:8e:a1:d1:8b:10:69:34:27:a3:8c:64:
                    02:41:7e:62:a6:94:24:df:4c:50:21:c0:38:e9:49:
                    d6:b3:b1:a0:16:1d:90:f2:14:e3:61:ba:32:da:c4:
                    72:e8:01:39:14:4a:33:59:6b:d3:82:8a:cb:81:92:
                    45:0a:ed:b2:6b:7a:f8:58:64:4a:86:3c:ed:c4:29:
                    0c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4B:B9:50:AB:4D:F7:61:47:18:32:F2:A8:72:EB:4D:27:82:BB:C9
            X509v3 Authority Key Identifier:
                keyid:82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3137372e36372e3234342e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:3c:c6:4c:2e:96:bf:26:15:84:63:27:4c:31:f6:8b:1b:dc:
         68:ca:6d:00:4e:61:d7:23:11:77:19:47:85:e2:d5:74:28:78:
         55:71:1c:28:55:c6:37:18:33:d5:6c:ef:8f:20:69:34:c7:f7:
         5a:a9:65:e2:24:7f:28:12:ca:ac:27:79:80:32:4c:ca:9f:43:
         e0:6e:90:15:bf:1f:54:c6:b1:98:fb:60:ca:bc:8e:a6:e2:7b:
         d7:94:32:68:fa:f3:81:28:c0:01:7b:2e:c8:c8:2f:71:47:ed:
         91:f4:a4:8a:b7:2f:17:d1:b6:2f:bf:32:b9:a2:1a:0c:86:2e:
         18:25:8d:82:52:cc:e5:66:9a:4a:d1:a9:3d:4d:e9:84:2d:71:
         06:b2:7d:65:03:84:23:17:c0:ec:24:52:0a:6d:5e:e9:44:6e:
         60:ee:f8:1b:24:3c:12:c1:f4:fb:36:41:18:23:29:a9:3f:7e:
         a3:a4:f2:52:a9:e2:2b:a0:4d:a3:03:19:4c:c1:98:66:d0:b6:
         2f:ce:76:b7:1a:7c:bd:c7:20:31:d1:48:16:b5:04:e8:bf:61:
         9b:e7:38:d9:86:4a:bb:3f:fa:0b:63:6e:ce:a4:66:1d:ab:ec:
         3e:8c:bc:8f:57:3e:5c:61:4c:21:bf:d5:1d:0c:ac:24:bf:b1:
         08:78:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org