Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e38382e302f32322d3234203d3e203238313335.roa
File:                     3137372e34362e38382e302f32322d3234203d3e203238313335.roa (raw, json)
Hash identifier:          A4Nk84QzMcfkqQvIcAV897EGgKr7GEH+5nU3xil0UpY=
Subject key identifier:   85:2B:0C:B0:83:82:3E:59:2D:DB:3A:D1:BF:A7:34:51:83:96:B6:48
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       792067F7AE756C40C24D7792AB5D0FDBFAC2653F
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e38382e302f32322d3234203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:10:11 +0000
ROA not before:           Wed 12 Apr 2023 11:05:11 +0000
ROA not after:            Wed 10 Apr 2024 11:10:11 +0000
asID:                     28135
IP address blocks:        177.46.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:20:67:f7:ae:75:6c:40:c2:4d:77:92:ab:5d:0f:db:fa:c2:65:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:05:11 2023 GMT
            Not After : Apr 10 11:10:11 2024 GMT
        Subject: CN=852B0CB083823E592DDB3AD1BFA734518396B648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:42:19:83:c5:dc:90:db:ac:62:f4:ab:8f:
                    ca:b8:c3:6b:fd:18:44:86:21:54:d0:dc:a5:b5:c5:
                    10:c0:5b:79:7e:6d:0c:33:1e:d4:2c:d8:d2:00:f3:
                    e4:6c:b9:6f:02:f6:57:f8:84:61:e8:e6:07:56:0f:
                    a7:3e:35:13:d5:59:4b:c8:33:8c:3a:3e:05:b4:25:
                    4f:e4:8d:2c:3f:58:2a:06:1d:fd:8e:eb:03:f2:80:
                    72:14:bb:87:84:14:71:33:2f:fd:1e:d0:82:11:33:
                    8d:39:8b:26:8b:f9:ef:e2:72:27:85:77:28:b8:ec:
                    f9:db:75:19:82:af:d4:ee:cc:d7:1a:9b:b5:62:08:
                    62:a8:68:77:5f:0b:fa:c7:2c:d6:ba:fc:f7:e1:10:
                    57:af:0f:22:73:a1:9e:40:72:3e:72:ba:ca:de:32:
                    60:71:90:60:0c:d5:54:2e:10:5f:bb:12:bb:d6:85:
                    33:97:ec:2e:3a:d6:c3:6d:0a:fc:0b:b5:59:99:8e:
                    4d:e5:95:d5:84:ec:f4:67:1b:84:60:78:ac:28:4e:
                    82:78:b6:21:10:07:39:48:96:a2:6f:cb:3c:10:08:
                    e2:aa:cb:cd:ca:7a:67:35:b8:e3:69:cb:3e:a2:e9:
                    72:b4:6b:5a:5e:7a:24:a0:58:4f:8e:37:9c:ce:9f:
                    98:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2B:0C:B0:83:82:3E:59:2D:DB:3A:D1:BF:A7:34:51:83:96:B6:48
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e38382e302f32322d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:ef:ed:34:3c:2e:dc:63:4a:00:5c:22:ee:49:9d:24:e5:3a:
         59:68:e2:49:0b:67:37:a8:65:67:29:25:98:80:4a:61:80:ca:
         1c:53:e1:f3:22:52:a6:fa:dc:a8:b2:25:aa:8e:de:89:5b:f8:
         17:05:c5:04:f7:80:1c:a9:28:5f:0f:7b:b2:f6:88:27:04:3b:
         b5:43:6e:6b:5b:29:cf:98:49:fe:ec:32:93:dc:05:82:07:e7:
         4a:8c:66:2a:ab:c6:60:ad:43:84:22:ee:c5:eb:ee:2a:2b:09:
         97:77:d9:8b:54:d6:b0:9d:f9:c9:55:a7:67:33:0c:d0:9f:6a:
         eb:04:17:af:e2:5a:b7:8b:a4:d8:67:72:f3:e3:cf:ec:e9:2f:
         ba:63:96:fa:7e:9e:ab:af:da:77:06:ce:b2:7e:cc:64:22:0b:
         ce:14:8f:6b:2b:13:98:f3:4c:8e:3b:bc:1e:ac:10:a7:5d:d8:
         07:3d:65:6f:8c:95:5e:9d:99:74:39:10:fd:82:4d:85:96:67:
         7b:81:e1:f2:71:fe:22:da:0a:14:ea:da:aa:23:4f:41:27:80:
         ba:c6:9e:74:91:4a:bb:49:b2:ee:f0:3a:3a:e3:b8:c6:19:50:
         28:82:80:38:eb:43:4b:06:e1:c9:1b:85:8d:98:ea:dd:75:5c:
         c3:e4:d0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org