Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/3137372e3133362e3130342e302f32312d3234203d3e20323633303439.roa
File:                     3137372e3133362e3130342e302f32312d3234203d3e20323633303439.roa (raw, json)
Hash identifier:          26Ix/wABO/A6S9tv92zHDOQ14X4xBFHmh99DskBwExs=
Subject key identifier:   4E:CD:3A:27:6A:A9:5A:B2:7A:1F:75:15:9F:6A:0D:63:2A:4B:C8:48
Certificate issuer:       /CN=173D80B7F844B5ACF5FE6739453CBE860C0FE753
Certificate serial:       0EBCFCCFF8D13A7D428C6717044A9C04685694AB
Authority key identifier: 17:3D:80:B7:F8:44:B5:AC:F5:FE:67:39:45:3C:BE:86:0C:0F:E7:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/3137372e3133362e3130342e302f32312d3234203d3e20323633303439.roa
Signing time:             Wed 25 Oct 2023 17:38:46 +0000
ROA not before:           Wed 25 Oct 2023 17:33:46 +0000
ROA not after:            Wed 23 Oct 2024 17:38:46 +0000
asID:                     263049
IP address blocks:        177.136.104.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bc:fc:cf:f8:d1:3a:7d:42:8c:67:17:04:4a:9c:04:68:56:94:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173D80B7F844B5ACF5FE6739453CBE860C0FE753
        Validity
            Not Before: Oct 25 17:33:46 2023 GMT
            Not After : Oct 23 17:38:46 2024 GMT
        Subject: CN=4ECD3A276AA95AB27A1F75159F6A0D632A4BC848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:60:06:44:7a:12:54:15:47:bb:6f:4c:1b:
                    b9:78:b1:c6:22:c3:4b:b5:14:d4:57:e5:44:ed:b8:
                    d3:dc:13:a6:6e:cc:f8:40:98:26:ed:a4:1d:c9:8a:
                    de:5d:ed:70:14:cd:71:77:d4:01:1c:8e:a0:18:04:
                    29:0e:33:2f:22:70:01:53:68:9a:dd:d6:67:94:1e:
                    90:1e:5d:2f:b5:0f:4b:58:bb:f0:eb:bc:f7:3e:3b:
                    98:74:a8:4c:b6:eb:fc:7d:a1:a5:75:84:e3:4e:72:
                    90:3c:db:00:14:34:5d:38:c0:ad:2c:1e:a2:e8:a5:
                    b9:47:ff:70:a1:36:18:a1:91:7b:dc:c3:d2:42:99:
                    f9:06:0e:11:27:2c:c0:55:c0:e1:99:b0:ed:56:53:
                    06:32:fd:79:3a:af:d8:64:85:d6:a3:5d:41:6b:38:
                    b0:62:d2:87:2f:18:e4:64:65:13:d8:fa:0d:40:88:
                    91:34:f8:c5:4f:19:04:1d:84:17:4b:a3:29:82:e3:
                    bf:6f:c1:80:b1:a2:30:c2:b1:d9:7e:a9:19:b1:b3:
                    78:85:e0:43:f4:ba:e8:aa:94:bb:6b:82:4d:2d:39:
                    da:5e:f7:94:9f:58:d9:0f:55:12:88:0f:aa:f4:f9:
                    85:0f:f1:18:ed:bc:2e:08:47:a3:4a:bb:71:21:52:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CD:3A:27:6A:A9:5A:B2:7A:1F:75:15:9F:6A:0D:63:2A:4B:C8:48
            X509v3 Authority Key Identifier:
                keyid:17:3D:80:B7:F8:44:B5:AC:F5:FE:67:39:45:3C:BE:86:0C:0F:E7:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/173D80B7F844B5ACF5FE6739453CBE860C0FE753.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/3137372e3133362e3130342e302f32312d3234203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:b7:98:02:bb:c6:a0:81:5f:5c:9e:b9:0e:10:87:cb:89:78:
         67:ff:24:80:71:51:c2:da:d9:ca:bb:38:76:33:ec:13:d6:a6:
         a0:ce:c2:91:48:56:48:f1:30:22:69:9d:2a:cc:d5:be:0d:ac:
         8b:65:76:ba:72:a0:44:91:13:55:ff:b2:a9:d1:f4:b9:24:3c:
         09:6b:76:5a:a7:db:16:c5:a0:56:23:30:01:8d:36:93:20:b4:
         10:53:1f:2e:f9:2f:e9:0a:d2:e1:08:7c:1c:f1:62:19:0f:d9:
         c3:10:24:cc:91:67:fd:ff:a5:97:e4:f3:d1:32:bb:c9:28:13:
         b1:e8:c5:ff:83:2d:30:4b:85:62:5a:bd:ec:c4:d7:21:ee:31:
         76:1a:9c:23:8d:f8:4e:c0:a6:c3:6d:2c:c4:a7:6e:97:64:2e:
         b0:1c:d9:d2:a2:57:ee:cc:3c:84:dd:08:25:39:2d:4d:cd:30:
         4a:c3:6f:fd:77:b7:64:53:e1:31:e7:cf:c0:d4:14:20:93:68:
         d9:86:2b:bf:bf:6e:f5:3d:d5:db:a1:3d:76:9a:be:6b:47:3f:
         30:87:8b:06:d2:3b:fb:9b:8a:a5:6c:97:32:89:5e:37:1b:35:
         3f:e7:8d:ef:d1:99:49:25:a9:c5:12:c4:98:42:ba:cf:1a:ea:
         06:84:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org