Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/3137372e33392e382e302f32322d3232203d3e20323639303936.roa
File:                     3137372e33392e382e302f32322d3232203d3e20323639303936.roa (raw, json)
Hash identifier:          eNjART1Qn12RbrONPQVYEpeSRJOqwpPULfYQ8r1Kc+U=
Subject key identifier:   3F:87:EF:95:61:5A:19:31:E8:1A:2D:AC:2D:6E:16:90:39:21:9A:D3
Certificate issuer:       /CN=824C1C971930641F52CF76D6607DED5BB03BA15F
Certificate serial:       40CA8A830C2D84207428B6AB9E3C695E1293F0E2
Authority key identifier: 82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/3137372e33392e382e302f32322d3232203d3e20323639303936.roa
Signing time:             Wed 05 Apr 2023 15:01:29 +0000
ROA not before:           Wed 05 Apr 2023 14:56:29 +0000
ROA not after:            Wed 03 Apr 2024 15:01:29 +0000
asID:                     269096
IP address blocks:        177.39.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ca:8a:83:0c:2d:84:20:74:28:b6:ab:9e:3c:69:5e:12:93:f0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824C1C971930641F52CF76D6607DED5BB03BA15F
        Validity
            Not Before: Apr  5 14:56:29 2023 GMT
            Not After : Apr  3 15:01:29 2024 GMT
        Subject: CN=3F87EF95615A1931E81A2DAC2D6E169039219AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:59:9e:ce:df:08:5a:fc:47:ea:af:2b:db:
                    87:c9:10:f1:b4:25:f3:db:95:ad:3a:24:ca:d3:92:
                    0c:77:89:96:e9:29:15:23:92:18:0b:e1:4a:b3:e6:
                    b2:08:1f:66:c8:c1:19:ea:af:67:fe:52:71:0d:b9:
                    4a:93:b5:4d:66:8f:ba:75:8c:b0:34:cb:fc:01:cc:
                    e8:44:36:f8:a7:60:cf:40:f8:f7:05:e1:3c:eb:d2:
                    db:ef:ba:f9:26:be:99:80:e7:34:53:97:5e:d7:70:
                    fa:f5:c5:2e:dd:c2:d5:88:95:dc:8e:ae:e3:7d:cc:
                    3b:0d:c4:c7:26:3f:a3:27:41:0a:cc:dd:fe:45:18:
                    5d:79:58:b6:96:6b:52:00:86:18:c2:0b:13:31:ab:
                    d4:52:28:a6:55:e6:d4:e5:c2:cc:fa:12:5e:ea:a9:
                    f5:c8:02:78:d1:4a:0e:4a:e6:cd:c4:f0:b4:3d:05:
                    8d:2d:61:e3:eb:db:72:e9:bf:b9:17:f7:09:4e:73:
                    7e:e7:d0:54:c5:e6:d5:69:46:9b:61:20:0b:4b:5d:
                    33:21:bc:1f:dd:14:b7:b5:66:94:0f:af:d8:ef:5a:
                    39:83:56:5e:8c:9e:48:c6:19:b6:0a:b6:75:fa:9b:
                    8d:7f:11:5b:5f:b6:8c:3e:84:36:bb:27:bd:4b:15:
                    c7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:87:EF:95:61:5A:19:31:E8:1A:2D:AC:2D:6E:16:90:39:21:9A:D3
            X509v3 Authority Key Identifier:
                keyid:82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/824C1C971930641F52CF76D6607DED5BB03BA15F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/3137372e33392e382e302f32322d3232203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:51:1b:34:9a:22:29:6c:0a:c0:62:b5:aa:1a:8c:8c:14:
         77:99:ea:96:fe:16:54:5b:3b:35:3f:19:34:9e:af:ee:e4:26:
         d8:cd:0d:3f:4d:82:e9:1b:d2:1f:20:35:c3:5a:fb:d0:30:de:
         13:30:25:66:77:0e:62:89:68:44:a6:9c:bb:96:ff:7e:fc:95:
         7e:0f:ee:b0:e6:48:36:cd:68:1a:1e:90:71:67:da:53:70:e1:
         ba:07:e6:f5:96:2e:bc:73:a2:16:a1:ad:f8:7e:7e:22:a3:c0:
         6d:4a:c9:7a:93:90:3d:87:26:87:e6:dd:4d:1f:53:80:fd:6d:
         1e:39:bc:a0:1c:fa:95:a9:50:e4:09:13:94:70:a2:b9:8f:72:
         95:36:5c:36:fb:33:05:43:16:08:52:ee:60:f6:5b:b1:b3:51:
         c4:2a:98:35:f1:1c:ec:b9:53:b8:70:66:b3:31:6b:ab:70:d3:
         97:ea:2d:6d:aa:ec:15:ed:d4:48:0d:66:07:83:9a:ec:0f:b6:
         11:32:69:18:28:c5:d4:6b:f9:9f:4d:9a:b6:e5:d4:83:2e:75:
         44:b5:53:f5:7d:8d:b4:67:8c:81:ce:63:79:d8:b1:80:f7:ef:
         5a:6b:83:47:98:48:05:85:ab:74:f8:58:d0:dd:59:35:e1:1b:
         38:81:7c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org