Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/3137372e33392e31302e302f32332d3233203d3e20323639303936.roa
File:                     3137372e33392e31302e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          CtEDXi+RSYtrgWCLIAqlyWESQV0ZM0km7dXYEYt44Ic=
Subject key identifier:   3B:CF:F5:C2:41:E1:F2:36:4D:2F:0B:83:73:66:A6:47:46:2F:7C:F8
Certificate issuer:       /CN=824C1C971930641F52CF76D6607DED5BB03BA15F
Certificate serial:       0154F63CCF044862FFD5BC81AD5EEB534D9B23C0
Authority key identifier: 82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/3137372e33392e31302e302f32332d3233203d3e20323639303936.roa
Signing time:             Wed 05 Apr 2023 15:01:30 +0000
ROA not before:           Wed 05 Apr 2023 14:56:30 +0000
ROA not after:            Wed 03 Apr 2024 15:01:30 +0000
asID:                     269096
IP address blocks:        177.39.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:54:f6:3c:cf:04:48:62:ff:d5:bc:81:ad:5e:eb:53:4d:9b:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824C1C971930641F52CF76D6607DED5BB03BA15F
        Validity
            Not Before: Apr  5 14:56:30 2023 GMT
            Not After : Apr  3 15:01:30 2024 GMT
        Subject: CN=3BCFF5C241E1F2364D2F0B837366A647462F7CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:64:6c:95:bb:25:ad:42:0b:20:42:84:e0:34:
                    c9:61:39:6a:82:55:ec:b3:c9:4a:f3:78:79:e7:52:
                    e4:2c:15:15:fd:62:af:48:66:77:a8:19:d0:60:30:
                    8f:83:c1:46:9a:e0:30:6e:68:67:6f:26:9b:df:ce:
                    4e:c8:a8:bd:d3:79:2d:e3:1a:a3:be:45:7f:32:47:
                    38:1a:3c:0a:99:31:37:0b:a4:07:38:8f:4d:1d:96:
                    79:ec:78:74:6e:40:92:a1:bd:cb:61:44:45:2a:d8:
                    46:89:f8:27:21:33:04:63:5d:5f:ec:2e:0b:74:3b:
                    89:d4:dd:03:ee:69:6e:ce:60:8c:0b:07:9b:1b:00:
                    5a:76:7b:89:8f:6f:f7:c4:00:a0:04:7b:29:eb:48:
                    35:c8:00:44:91:f6:68:38:92:7f:ca:d1:dc:ac:8a:
                    ed:60:29:41:5e:06:cf:e3:2a:14:57:c3:7e:c2:d6:
                    c1:ce:42:f2:03:e7:8d:86:64:6e:03:06:6c:55:a7:
                    a8:39:6b:53:d4:b7:f3:3f:9d:e1:f8:31:a4:e0:3c:
                    92:29:3f:4f:ea:38:82:44:b1:03:14:99:7a:70:9d:
                    26:6e:8c:00:de:c8:a8:92:34:fc:e5:0e:e9:59:38:
                    9a:1b:12:a5:1d:8b:98:75:80:52:02:21:5f:c1:9a:
                    a9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CF:F5:C2:41:E1:F2:36:4D:2F:0B:83:73:66:A6:47:46:2F:7C:F8
            X509v3 Authority Key Identifier:
                keyid:82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/824C1C971930641F52CF76D6607DED5BB03BA15F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/3137372e33392e31302e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:e4:db:50:b8:58:eb:35:b3:c9:96:fd:a3:1f:58:a9:09:0e:
         98:f9:d8:d2:e3:7f:b3:a5:a9:c7:ba:06:55:f2:c5:ef:6f:20:
         ef:be:65:27:ee:3d:0e:bf:4f:66:f8:04:6d:41:3e:3c:01:d5:
         aa:78:38:00:a2:48:b6:58:98:6b:cd:cf:86:8c:02:5e:b4:d7:
         38:fa:f2:b1:37:26:8b:8b:9e:b1:af:36:af:c3:48:d3:9c:39:
         b8:d8:b9:ee:8c:3a:c5:1c:89:e8:bc:83:96:2f:eb:3f:6f:21:
         99:0f:89:a3:90:c5:88:fe:a5:a3:73:2c:98:a6:f0:c0:7f:2c:
         2a:71:72:be:08:82:e2:d8:fb:82:df:73:54:61:fc:ad:8f:b7:
         f8:69:fe:37:bd:63:9f:e2:89:c0:f5:f2:41:f5:01:66:f2:6c:
         1c:df:87:35:02:ad:18:5d:08:7c:a0:ca:22:a2:ff:af:3f:17:
         5b:4b:39:91:d4:1f:13:48:0c:bc:56:eb:11:5f:48:74:8f:ea:
         b4:f9:da:93:ad:0f:8e:56:45:a1:60:7e:28:e5:35:87:24:02:
         35:98:62:1c:b6:f2:b6:7b:e8:16:7c:d3:d2:42:72:cb:e0:80:
         ce:b3:4d:64:c9:42:69:6a:35:bd:2a:16:d5:85:ce:4b:ab:33:
         77:6e:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org