Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3130382e302f32322d3232203d3e203238313335.roa
File:                     3137372e34362e3130382e302f32322d3232203d3e203238313335.roa (raw, json)
Hash identifier:          7Bsb9GHIKx7AMFOEcghOjtbm9PmdPgU8CPET9RWU62E=
Subject key identifier:   E6:E0:4D:C7:8C:2D:FF:FC:DD:D0:95:BA:06:29:44:A4:87:02:5E:33
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       5925308772E566277E081CCDCB730BE02543DE78
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3130382e302f32322d3232203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:11:38 +0000
ROA not before:           Wed 12 Apr 2023 11:06:38 +0000
ROA not after:            Wed 10 Apr 2024 11:11:38 +0000
asID:                     28135
IP address blocks:        177.46.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:25:30:87:72:e5:66:27:7e:08:1c:cd:cb:73:0b:e0:25:43:de:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:06:38 2023 GMT
            Not After : Apr 10 11:11:38 2024 GMT
        Subject: CN=E6E04DC78C2DFFFCDDD095BA062944A487025E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:de:5a:e8:09:17:bd:09:f7:01:b9:77:4d:a5:
                    1d:ff:6f:45:ca:57:a2:09:43:2a:3d:a6:f1:96:b5:
                    06:d5:c4:06:28:9f:95:15:7f:5a:cf:c9:8c:49:4e:
                    25:a8:88:74:6f:0d:ce:c7:f3:31:67:54:aa:91:53:
                    d4:be:bf:67:02:c3:ef:e6:fb:45:19:ec:34:fd:a7:
                    96:e8:9d:fc:7d:ba:ab:6c:7a:5f:23:a0:8e:cc:0e:
                    51:72:b0:ad:fa:4c:7a:7d:01:04:b3:a2:4d:2b:fe:
                    a5:34:b7:8b:f0:70:09:4e:16:a3:3b:17:e4:db:3a:
                    5a:72:64:15:c8:2d:9f:ca:cc:85:cf:f6:36:0c:11:
                    a2:b3:cb:4a:09:24:83:f3:19:f2:60:f4:c5:34:35:
                    c6:b5:8c:db:a9:b1:4a:02:60:98:a5:17:a7:94:c3:
                    7e:39:5e:dd:e3:44:32:5d:ac:e5:50:10:cd:44:16:
                    d2:2e:8f:09:f0:ad:56:1c:94:4e:a8:92:bf:6f:92:
                    30:08:c1:f5:05:09:cd:46:46:9e:d7:71:40:9a:28:
                    64:b5:9c:0e:0e:0b:25:29:56:22:c6:b5:e7:1b:60:
                    e9:2f:41:5f:a9:9e:f7:bb:48:71:c8:85:86:14:88:
                    70:91:9f:fa:08:b4:c6:89:65:96:bb:4f:f2:bc:6f:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E0:4D:C7:8C:2D:FF:FC:DD:D0:95:BA:06:29:44:A4:87:02:5E:33
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3130382e302f32322d3232203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:44:ac:21:f4:15:da:0b:c8:e3:f3:18:d6:ec:b5:65:90:46:
         c1:69:c5:66:96:08:c0:8b:00:a2:ed:f0:59:a0:3c:da:95:77:
         17:0f:e5:a1:08:be:d0:56:ff:e1:5a:98:e7:38:86:2c:d8:1a:
         48:cb:64:a3:45:b0:f3:f1:4f:06:33:5f:75:66:09:1f:38:5d:
         c8:6b:54:35:e6:36:5a:45:ec:a3:d4:99:2e:cb:19:b0:0a:e1:
         24:7f:06:33:5c:94:15:ce:ab:de:6d:92:6e:27:0d:05:3a:31:
         ec:3b:fd:c3:40:bc:3f:d1:e2:68:f3:f7:81:84:74:b7:41:f5:
         5a:c9:95:b4:2c:03:58:de:6f:ce:dc:d2:c0:ad:eb:eb:93:c3:
         bb:a5:6b:bc:09:5b:28:0b:68:02:ec:89:31:34:3b:b4:cd:71:
         a7:3b:a6:8d:ad:14:fa:c8:ba:6c:b8:db:99:65:ce:e9:b5:88:
         eb:c6:7e:cc:a8:83:68:61:da:43:3b:61:94:ab:29:79:86:24:
         ff:ae:31:39:c3:24:a0:40:0b:90:95:ad:d2:cc:af:24:0a:87:
         6a:b3:fb:10:c8:59:4e:74:cb:e3:1e:25:1d:96:f2:c7:c7:0e:
         16:c5:ec:3c:6e:05:d2:85:23:d4:34:1f:ce:8b:b0:15:32:57:
         38:6e:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org