Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e31312e302f32342d3234203d3e20323639303936.roa
File:                     3137372e33392e31312e302f32342d3234203d3e20323639303936.roa (raw, json)
Hash identifier:          mBM6kTxwy0ak2fALpsp+Hqa19b59DeOI2rnQR8bnJ0Q=
Subject key identifier:   A9:76:0C:15:DE:00:5F:96:5F:03:35:81:3B:F4:25:AE:4F:98:30:E0
Certificate issuer:       /CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
Certificate serial:       668627415CB29FBCB62F30EF85F5F1ECAE094743
Authority key identifier: 0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e31312e302f32342d3234203d3e20323639303936.roa
Signing time:             Thu 16 Nov 2023 15:25:39 +0000
ROA not before:           Thu 16 Nov 2023 15:20:39 +0000
ROA not after:            Thu 14 Nov 2024 15:25:39 +0000
asID:                     269096
IP address blocks:        177.39.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:86:27:41:5c:b2:9f:bc:b6:2f:30:ef:85:f5:f1:ec:ae:09:47:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
        Validity
            Not Before: Nov 16 15:20:39 2023 GMT
            Not After : Nov 14 15:25:39 2024 GMT
        Subject: CN=A9760C15DE005F965F0335813BF425AE4F9830E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ff:c2:8d:ad:ec:ba:da:b4:be:eb:61:aa:5c:
                    0c:08:ec:a0:82:cd:4c:87:6d:a4:e5:c1:1c:39:51:
                    68:31:c6:93:b2:9d:20:fb:21:aa:83:20:23:7e:26:
                    17:ff:1a:9e:8a:60:ab:92:6b:1e:95:98:a1:68:73:
                    d5:0e:33:83:4d:ff:75:06:37:c5:b1:53:53:68:77:
                    45:8d:46:d4:58:44:f3:ad:14:66:00:6f:81:12:58:
                    9a:dc:27:9c:5c:6a:39:db:d9:47:63:23:ec:d7:c7:
                    82:19:73:ad:10:87:86:50:f0:3e:79:86:34:d7:1f:
                    12:47:e1:92:39:c3:47:86:48:70:81:14:f2:7d:f1:
                    b4:f3:40:df:ca:23:27:54:af:d5:73:fe:59:3f:bd:
                    f6:e6:2c:90:a2:b6:49:fc:59:3c:ec:13:66:d3:94:
                    09:0d:26:4a:35:42:fd:b0:01:5d:06:58:57:1a:86:
                    80:a4:e8:8c:be:46:3d:33:0f:bf:8b:13:36:69:08:
                    ea:3f:3e:c0:f0:fe:f7:06:ea:84:d6:a5:83:9a:30:
                    4a:c3:f5:c1:43:9c:e4:8b:06:07:91:a5:cd:3f:4a:
                    b9:6b:33:ab:80:1a:54:b1:cc:81:1b:0f:46:0e:a7:
                    20:6e:63:b3:3b:3b:18:bc:73:e4:a4:ab:83:25:25:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:76:0C:15:DE:00:5F:96:5F:03:35:81:3B:F4:25:AE:4F:98:30:E0
            X509v3 Authority Key Identifier:
                keyid:0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e31312e302f32342d3234203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:ba:1d:ac:a3:d4:91:79:00:7c:ab:97:9f:02:c7:a4:b0:35:
         b2:39:2a:f8:e3:1d:4d:72:37:d7:d3:aa:b4:e9:96:e6:ae:7a:
         a6:03:0b:db:5a:8d:8d:6e:28:01:c6:3c:92:f9:4c:52:ac:84:
         87:df:51:ee:6c:42:e3:82:21:9e:99:aa:60:86:79:33:77:b6:
         3b:f4:cf:ca:5e:63:2d:60:5b:5a:07:e6:db:de:0a:b2:30:cd:
         0e:3f:5d:06:7a:89:d8:e0:db:ed:d4:35:78:68:bd:a7:cf:dd:
         fc:e7:03:0b:28:fc:d2:96:61:db:c9:9e:52:82:29:83:7d:e6:
         d2:f0:27:92:23:58:c8:18:61:bd:e9:24:17:7e:db:20:1b:72:
         4b:c7:6c:3a:19:ba:9f:c3:c1:52:45:aa:b0:9f:e9:e6:ae:4b:
         44:db:e8:66:11:8b:15:d9:28:ae:99:9e:22:69:b5:44:9b:1d:
         4d:53:ed:76:64:e1:09:89:f6:ff:e2:aa:a6:7a:99:75:53:c0:
         82:56:57:d5:f4:95:92:1e:ee:95:7d:21:70:24:ea:54:2a:fb:
         62:f2:3a:06:2f:b8:fb:33:94:42:ec:4a:c1:6d:e6:7e:ec:cf:
         dd:ee:0b:17:1e:3e:fb:22:98:3a:2d:e3:cb:cd:7d:b9:da:e3:
         25:7e:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org