Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/3137372e31302e3137322e302f32322d3234203d3e20323633363031.roa
File:                     3137372e31302e3137322e302f32322d3234203d3e20323633363031.roa (raw, json)
Hash identifier:          VgScNi3Vk/WIL7aqbkV+QDjPOLdjmGACwa0Ln5DW6Vg=
Subject key identifier:   1C:1C:6E:77:3F:A2:1C:5C:24:8D:68:B5:BB:99:8D:98:CA:68:52:59
Certificate issuer:       /CN=DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241
Certificate serial:       34763CCE7493AC8BBF45BE81D46693F2A84E3F81
Authority key identifier: DE:3B:24:29:AF:80:02:A6:DA:4D:D0:55:3A:09:E2:C9:A4:8E:F2:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/3137372e31302e3137322e302f32322d3234203d3e20323633363031.roa
Signing time:             Thu 12 Oct 2023 15:25:16 +0000
ROA not before:           Thu 12 Oct 2023 15:20:16 +0000
ROA not after:            Thu 10 Oct 2024 15:25:16 +0000
asID:                     263601
IP address blocks:        177.10.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:76:3c:ce:74:93:ac:8b:bf:45:be:81:d4:66:93:f2:a8:4e:3f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241
        Validity
            Not Before: Oct 12 15:20:16 2023 GMT
            Not After : Oct 10 15:25:16 2024 GMT
        Subject: CN=1C1C6E773FA21C5C248D68B5BB998D98CA685259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:a7:83:e1:cd:83:f4:49:cf:81:55:ca:7e:
                    d8:d2:d4:d4:19:9c:ef:2e:ba:b6:46:d3:3f:ed:86:
                    df:b4:02:6b:93:d8:dc:2a:87:94:3b:08:85:00:83:
                    7a:87:fb:5b:9b:5d:ee:99:66:d3:25:f0:22:e8:62:
                    46:0b:51:33:76:31:5b:2b:8e:fa:e9:a7:6f:e8:78:
                    d6:e8:b2:9e:21:0f:dd:c5:69:f7:b4:18:72:28:06:
                    07:1a:4a:b5:97:10:4e:63:22:9f:da:2e:52:56:3f:
                    79:40:1f:30:e1:35:1d:7d:2f:c7:09:1f:78:3a:9b:
                    e0:da:2e:ca:76:04:55:e6:3d:4c:9e:5c:7f:49:9a:
                    24:6a:7e:d1:e7:41:d8:c9:bb:46:16:c3:87:1d:13:
                    8a:62:f8:ea:96:46:82:6f:d3:c6:e6:f2:3e:51:46:
                    cf:e2:1c:ce:7c:49:aa:b4:92:65:4d:76:8f:b5:68:
                    9e:18:dc:f3:55:6d:8e:b5:33:54:9d:81:5e:b7:b9:
                    19:e8:58:f6:af:27:28:24:20:d2:b2:e6:51:a1:8e:
                    a4:13:c0:ba:cf:16:f6:d0:9d:cf:bf:2e:3d:b3:d4:
                    88:f2:29:e5:4f:b9:1c:87:b4:1c:05:c9:0d:2c:9d:
                    c7:62:02:1b:c2:04:99:ba:d1:21:a2:e4:07:aa:49:
                    ca:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1C:6E:77:3F:A2:1C:5C:24:8D:68:B5:BB:99:8D:98:CA:68:52:59
            X509v3 Authority Key Identifier:
                keyid:DE:3B:24:29:AF:80:02:A6:DA:4D:D0:55:3A:09:E2:C9:A4:8E:F2:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/3137372e31302e3137322e302f32322d3234203d3e20323633363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:28:13:2f:7b:b9:fe:26:1d:00:78:fa:b7:00:3b:39:68:61:
         30:55:23:71:8f:32:c7:1e:a1:a4:48:53:e7:5d:3f:07:19:c0:
         a3:21:25:f0:0f:89:a7:1d:5e:fc:f1:52:c2:9d:bc:4e:6c:99:
         5a:24:2e:7d:06:12:b9:8a:e8:90:b4:73:a1:03:ed:18:75:18:
         28:ef:a9:46:a5:f7:4b:aa:ab:07:1e:ea:bf:c0:2e:74:ed:59:
         38:77:2c:37:9f:eb:71:bb:a2:f5:6b:e9:92:2a:dc:be:aa:23:
         61:19:fc:23:39:12:25:0e:4a:23:6f:5d:35:99:72:41:67:3c:
         a1:90:f1:5d:f8:77:dd:f0:84:b8:c6:4b:77:ad:19:e6:c9:ed:
         42:b5:7f:4e:ac:e3:66:57:d5:b1:ae:3a:1b:11:d1:31:56:b4:
         4b:e1:a7:b5:fa:9c:94:50:10:10:62:d0:65:ba:fb:b5:e6:e2:
         a3:49:50:6f:b8:11:2b:70:d3:c8:48:4d:65:b9:ba:bd:93:f5:
         d3:fd:23:96:b3:eb:55:36:6d:3b:67:05:f0:65:38:9a:33:44:
         b8:2f:66:19:e5:3b:30:b1:ed:d0:32:a6:33:dc:3f:fb:f6:e0:
         ef:e0:1e:29:c0:c7:f7:80:b2:9d:3c:23:47:99:9d:4f:97:ba:
         69:67:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org