Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/2/3137372e33392e382e302f32322d3332203d3e20323639303936.roa
File:                     3137372e33392e382e302f32322d3332203d3e20323639303936.roa (raw, json)
Hash identifier:          2mhFGE6H6OU9BLnmdwrfBwdOPvbZw5YdGJbyGl+JwSQ=
Subject key identifier:   5D:B5:6D:DA:C0:FD:1F:5B:9A:09:88:81:B6:9B:51:10:2E:F0:D9:AB
Certificate issuer:       /CN=C1242EF4879B322A13C9D9D398E3937FA62B255E
Certificate serial:       44886C5192066191D27CE37CB18063521CDCA769
Authority key identifier: C1:24:2E:F4:87:9B:32:2A:13:C9:D9:D3:98:E3:93:7F:A6:2B:25:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1242EF4879B322A13C9D9D398E3937FA62B255E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/2/3137372e33392e382e302f32322d3332203d3e20323639303936.roa
Signing time:             Thu 04 Apr 2024 07:18:49 +0000
ROA not before:           Thu 04 Apr 2024 07:13:49 +0000
ROA not after:            Thu 03 Apr 2025 07:18:49 +0000
asID:                     269096
IP address blocks:        177.39.8.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:88:6c:51:92:06:61:91:d2:7c:e3:7c:b1:80:63:52:1c:dc:a7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1242EF4879B322A13C9D9D398E3937FA62B255E
        Validity
            Not Before: Apr  4 07:13:49 2024 GMT
            Not After : Apr  3 07:18:49 2025 GMT
        Subject: CN=5DB56DDAC0FD1F5B9A098881B69B51102EF0D9AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:3e:12:33:a0:07:cf:02:e9:73:f4:ad:fd:
                    8a:60:69:b8:f1:86:de:66:7a:44:45:c3:56:d9:9e:
                    b0:03:1c:97:67:c5:2e:55:fc:27:6e:49:4c:2b:21:
                    9d:76:33:70:6e:21:5f:49:d2:46:c7:10:ca:54:56:
                    75:52:a1:b5:82:c9:80:be:19:bb:0c:c8:b3:f3:3f:
                    e4:44:94:cf:18:c7:35:bb:fa:e7:bd:35:0b:df:f6:
                    41:1a:79:d8:b1:4f:af:fd:6c:74:75:c2:5f:89:13:
                    ad:6b:6a:0a:34:d7:1a:32:73:bf:39:3a:31:d1:62:
                    6a:32:4f:11:59:b1:8d:8c:d6:28:53:db:70:4a:68:
                    7e:25:15:e5:58:4d:df:6c:44:9c:84:a7:73:d8:14:
                    30:47:7e:06:80:24:98:1b:36:78:17:93:49:85:3a:
                    3d:17:fe:7c:de:87:84:28:06:3a:83:34:c1:5d:77:
                    c2:eb:bf:eb:8a:8b:98:1f:19:f1:0e:d6:7a:7c:5b:
                    b1:f8:ef:80:cf:f5:df:6d:ef:25:6c:1c:a0:aa:3d:
                    df:77:b1:3c:ae:43:8c:35:90:c5:ee:48:b7:6e:e5:
                    ba:e3:00:12:24:9a:7f:f5:0e:d7:91:4a:0d:bf:26:
                    57:6b:2e:94:24:6e:c0:e5:d9:e6:0f:c0:7b:aa:2e:
                    93:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B5:6D:DA:C0:FD:1F:5B:9A:09:88:81:B6:9B:51:10:2E:F0:D9:AB
            X509v3 Authority Key Identifier:
                keyid:C1:24:2E:F4:87:9B:32:2A:13:C9:D9:D3:98:E3:93:7F:A6:2B:25:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/2/C1242EF4879B322A13C9D9D398E3937FA62B255E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1242EF4879B322A13C9D9D398E3937FA62B255E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/2/3137372e33392e382e302f32322d3332203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:71:2e:bd:cf:4b:96:b4:04:2d:bb:0b:ad:3a:20:87:1e:90:
         6f:df:21:b2:cf:21:a7:53:5d:2b:8a:9d:4e:9d:ba:72:5e:de:
         fd:eb:27:9b:d2:a3:a7:29:40:a0:76:2d:96:6e:e2:cf:4e:b8:
         aa:20:c7:c1:16:24:17:6c:cb:9a:06:58:43:fc:73:3e:87:7e:
         e6:0a:69:2f:c5:1c:da:86:e0:56:b6:b2:6f:58:b9:a4:63:6a:
         d3:e6:fc:60:b8:2c:30:f5:92:7b:a2:e0:18:5e:c4:32:8f:ec:
         4b:89:14:4e:b8:fc:2a:32:ec:27:f0:9a:d0:ba:55:c0:87:af:
         f7:87:55:21:44:96:a0:45:d1:0b:28:ee:58:4b:f5:0c:06:03:
         6d:b2:1f:b6:a9:0b:e6:9a:0a:f4:cc:98:c4:db:a6:fc:e9:29:
         98:98:8b:e7:f6:0c:d6:47:15:f4:d1:e4:dd:d7:b5:30:bb:23:
         2f:34:a5:c3:07:07:7d:f3:c5:2b:ae:f0:62:64:de:fc:d1:20:
         e2:42:a9:10:89:72:11:e9:f8:c3:2f:01:9f:b2:f9:7d:fe:d8:
         5c:56:f0:f2:8e:1e:e0:aa:dc:ea:9c:37:c4:28:09:8f:5c:87:
         59:a6:30:77:10:79:a4:eb:0c:fc:fd:ea:75:db:b4:33:22:f3:
         06:7f:64:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org