Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/3137372e33392e382e302f32322d3332203d3e20323639303936.roa
File:                     3137372e33392e382e302f32322d3332203d3e20323639303936.roa (raw, json)
Hash identifier:          O+IkcL7bno+G1eimIuZ84VCq9YSXT4/YCHH+OYkBoL4=
Subject key identifier:   27:D0:6E:F2:23:B5:16:E7:F8:BF:6C:1B:1A:F6:2A:09:6C:3D:8A:5C
Certificate issuer:       /CN=824C1C971930641F52CF76D6607DED5BB03BA15F
Certificate serial:       4B263AC1F6BC802B472B02B2081F082F8F9006FB
Authority key identifier: 82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/3137372e33392e382e302f32322d3332203d3e20323639303936.roa
Signing time:             Tue 25 Apr 2023 13:54:40 +0000
ROA not before:           Tue 25 Apr 2023 13:49:40 +0000
ROA not after:            Tue 23 Apr 2024 13:54:40 +0000
asID:                     269096
IP address blocks:        177.39.8.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:26:3a:c1:f6:bc:80:2b:47:2b:02:b2:08:1f:08:2f:8f:90:06:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824C1C971930641F52CF76D6607DED5BB03BA15F
        Validity
            Not Before: Apr 25 13:49:40 2023 GMT
            Not After : Apr 23 13:54:40 2024 GMT
        Subject: CN=27D06EF223B516E7F8BF6C1B1AF62A096C3D8A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:de:62:2c:fb:d7:2b:66:0e:fc:1e:ca:3f:7c:
                    5f:d6:b9:90:79:e1:b2:4a:23:ff:20:f4:84:72:40:
                    b9:77:03:f9:03:38:e3:4b:89:50:d5:f7:64:a3:3a:
                    58:44:a8:ea:04:cd:44:e8:f3:65:2a:7d:b5:1d:a1:
                    d3:78:bd:ed:40:b0:b1:04:bd:32:a3:a0:ae:af:b3:
                    02:de:ac:d2:52:71:b8:0d:88:26:93:73:09:c4:fb:
                    9f:b8:a5:05:bc:c5:42:d6:79:4e:df:7d:cd:3c:00:
                    82:4f:4a:7c:22:a7:98:32:b6:03:c1:49:97:55:3f:
                    79:4f:67:80:56:e4:16:b9:fb:11:46:1b:51:91:dd:
                    3b:28:3c:a1:e6:1a:f4:09:69:95:bc:74:59:40:69:
                    f3:a3:a1:3b:ac:54:b4:5c:f6:5f:ab:4f:6e:00:f5:
                    a4:55:ad:f9:da:d0:eb:a9:14:dc:dc:3b:bc:00:d1:
                    f0:15:3d:4a:ab:49:aa:ff:b7:4a:39:75:32:6e:94:
                    84:49:ae:c9:2b:df:6d:43:5a:5a:63:6a:ba:4f:e5:
                    04:98:68:b3:6f:37:3e:cf:ce:42:1c:7c:25:ab:7d:
                    7f:de:27:cd:df:86:39:b7:ed:b2:99:3b:76:c2:a0:
                    45:85:50:df:f9:89:6e:32:9f:24:f7:95:36:fe:53:
                    0f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D0:6E:F2:23:B5:16:E7:F8:BF:6C:1B:1A:F6:2A:09:6C:3D:8A:5C
            X509v3 Authority Key Identifier:
                keyid:82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/824C1C971930641F52CF76D6607DED5BB03BA15F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/3137372e33392e382e302f32322d3332203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:d5:c4:64:2f:aa:f5:f9:3f:0a:08:9b:66:0d:50:2f:a5:39:
         57:b8:66:50:42:8f:b2:10:69:33:d2:b7:7e:b7:87:4c:76:5d:
         f1:70:40:30:c4:36:51:82:1b:83:e0:88:88:8f:76:ee:3d:30:
         89:2e:c2:fc:5b:b5:db:75:9f:75:3c:5f:bd:fc:14:f8:7b:58:
         5d:3e:0c:cd:f6:de:55:c0:16:57:aa:b6:a9:67:99:34:6d:ce:
         f2:c1:38:64:5f:de:b0:54:6f:41:ba:fa:92:ba:a9:1e:fc:70:
         0e:d6:29:f7:6b:35:46:4d:22:a1:ee:01:1b:de:83:c1:f7:38:
         97:8a:da:1a:3c:8f:64:23:bb:ae:93:db:03:3e:c1:e6:e1:93:
         c5:6b:cc:bb:86:96:b4:fa:a8:f2:1e:5d:bb:19:28:8d:fc:1a:
         81:62:7a:b8:d2:fe:7d:7f:32:0c:73:ed:a6:e0:7e:30:58:34:
         2a:f1:6c:34:c0:e9:aa:dc:33:1a:68:b0:03:f8:dd:c4:84:cf:
         c4:b3:d3:e1:3a:c3:b9:2e:32:99:98:ad:84:05:fa:0d:e0:07:
         62:c9:52:50:6c:1f:3c:e6:46:af:fe:d2:0e:40:4e:8a:4f:6d:
         58:58:77:f8:48:79:87:1d:8d:48:33:77:88:61:ca:20:96:1b:
         bf:7a:fd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org