Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/3137372e33392e382e302f32332d3233203d3e20323639303936.roa
File:                     3137372e33392e382e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          xCzpP/MWM4lrLbMtKiC1BfWV8lkB/qWOc5gLh+rowq4=
Subject key identifier:   7B:74:DB:56:ED:E0:59:54:D2:94:FD:C3:C2:15:D1:ED:9D:90:BB:5E
Certificate issuer:       /CN=824C1C971930641F52CF76D6607DED5BB03BA15F
Certificate serial:       5DC11CCC3B0F513A365FB73CC6668C5FA37A7EA9
Authority key identifier: 82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/3137372e33392e382e302f32332d3233203d3e20323639303936.roa
Signing time:             Wed 05 Apr 2023 15:01:32 +0000
ROA not before:           Wed 05 Apr 2023 14:56:32 +0000
ROA not after:            Wed 03 Apr 2024 15:01:32 +0000
asID:                     269096
IP address blocks:        177.39.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c1:1c:cc:3b:0f:51:3a:36:5f:b7:3c:c6:66:8c:5f:a3:7a:7e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824C1C971930641F52CF76D6607DED5BB03BA15F
        Validity
            Not Before: Apr  5 14:56:32 2023 GMT
            Not After : Apr  3 15:01:32 2024 GMT
        Subject: CN=7B74DB56EDE05954D294FDC3C215D1ED9D90BB5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:f3:8e:73:89:5b:54:11:3e:f6:bf:71:b8:
                    19:4d:49:6f:c9:26:91:b2:9c:73:13:f1:d2:0b:d3:
                    8e:f1:e2:35:eb:1f:8b:c7:2e:c2:eb:3c:a5:7b:a1:
                    a7:0b:fc:6c:e4:dd:81:d1:44:ea:4f:4f:e3:f7:40:
                    8e:56:3a:17:e1:93:76:e6:53:8f:90:9a:87:ef:ea:
                    a4:5b:ee:b3:7e:b5:d0:a6:5a:c7:9b:f2:90:57:72:
                    72:1f:c0:c6:5c:c3:a9:95:d8:c8:29:bd:5b:88:94:
                    75:cb:d4:61:af:b3:27:43:17:45:23:3d:91:48:7f:
                    8d:05:6e:bb:c9:2c:32:d1:d6:9b:50:b2:7e:bd:71:
                    b2:5c:98:3a:09:2e:0d:49:2d:81:be:f7:fc:f4:63:
                    32:f5:31:d3:e5:07:63:c4:60:58:43:22:a5:99:76:
                    91:01:b3:68:bd:e3:2e:22:4a:cd:c2:5f:dc:1a:f4:
                    cb:80:f1:8e:a6:79:ec:a8:41:ce:ba:a5:5a:40:96:
                    20:43:f4:fb:9a:9a:94:4c:96:ca:38:85:33:87:1a:
                    62:5c:4b:e9:d5:e2:ab:cc:f9:e1:8d:01:c5:ff:76:
                    ea:b7:18:f6:8b:14:4a:3b:e2:b8:93:e7:b6:57:5c:
                    a8:4d:01:8d:5e:39:4c:dd:85:d6:cc:4c:a2:b2:9c:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:74:DB:56:ED:E0:59:54:D2:94:FD:C3:C2:15:D1:ED:9D:90:BB:5E
            X509v3 Authority Key Identifier:
                keyid:82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/824C1C971930641F52CF76D6607DED5BB03BA15F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/3137372e33392e382e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:48:e0:70:aa:d0:07:85:23:3d:2a:0f:17:5e:78:5a:b6:9c:
         11:06:be:7e:b7:4b:91:0f:9c:d8:20:b5:01:61:dd:dc:87:bd:
         a9:f9:10:b8:26:ad:09:09:25:cb:b5:18:bf:c7:eb:12:16:14:
         4a:d1:dd:d2:d4:69:67:aa:a0:9a:35:93:26:dd:10:24:ab:6c:
         c9:0b:65:13:ab:f2:44:a3:0b:8c:ee:2b:22:49:21:47:dc:db:
         27:26:b6:a2:07:20:a5:2f:54:02:06:7b:c5:41:a2:7c:0b:f0:
         dd:59:be:f8:1e:8f:47:0e:40:37:8c:11:c9:37:2f:13:1a:4e:
         9e:d1:8c:f6:23:83:7c:d7:12:f3:83:d0:93:7b:b6:30:7b:76:
         52:1b:54:eb:93:d8:a1:6b:a7:5d:b7:29:25:23:06:e3:88:bd:
         79:3c:8b:b6:0e:97:a1:8d:c9:30:89:3b:d2:43:84:b5:7d:92:
         96:b0:b2:a8:e0:fd:a2:00:38:87:76:a7:4c:e5:dc:62:8d:45:
         6e:e2:a5:56:aa:cf:75:c7:7c:45:a8:8a:96:d6:b0:d1:97:d5:
         4c:28:17:b1:06:21:94:ef:a8:44:4e:88:3b:09:cb:21:cb:5e:
         c5:76:bc:69:07:43:a4:8c:c7:62:ab:58:d3:f8:43:ca:e2:bb:
         88:cf:a7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org