Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230362e302f32332d3233203d3e20323636343437.roa
File:                     3137302e38322e3230362e302f32332d3233203d3e20323636343437.roa (raw, json)
Hash identifier:          OVJ8EX3gaFapXa8iU/VBMnbRpUpU8SPQdiO93Rg1oMY=
Subject key identifier:   03:7D:24:CD:2B:19:C8:79:8D:9B:6B:92:8C:03:11:E0:F4:56:D6:66
Certificate issuer:       /CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
Certificate serial:       2384CD20493AC1A6EAA7AE11A882855C7477F40C
Authority key identifier: 77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230362e302f32332d3233203d3e20323636343437.roa
Signing time:             Sat 10 Feb 2024 15:27:44 +0000
ROA not before:           Sat 10 Feb 2024 15:22:44 +0000
ROA not after:            Sat 08 Feb 2025 15:27:44 +0000
asID:                     266447
IP address blocks:        170.82.206.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:84:cd:20:49:3a:c1:a6:ea:a7:ae:11:a8:82:85:5c:74:77:f4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
        Validity
            Not Before: Feb 10 15:22:44 2024 GMT
            Not After : Feb  8 15:27:44 2025 GMT
        Subject: CN=037D24CD2B19C8798D9B6B928C0311E0F456D666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:1b:a7:23:91:0c:21:20:dd:15:ca:0a:59:
                    11:d2:8b:d2:1d:ed:89:31:44:61:ae:74:01:7a:7c:
                    ae:4e:0a:98:f8:ed:96:2a:09:f0:0e:c3:4f:fa:f3:
                    fe:d6:8b:0e:dc:c6:0a:1d:c2:a7:af:01:1b:78:73:
                    13:14:02:b4:7d:88:6a:11:3b:27:b7:6d:51:1c:e3:
                    6f:ff:40:c3:dd:d2:3d:2d:8c:04:5f:ea:d9:26:93:
                    c2:b6:c0:8e:ff:14:99:c7:dd:8c:73:ed:22:46:ba:
                    79:83:2d:f3:a4:e5:23:c6:fd:16:2d:d6:a4:68:38:
                    17:e9:69:b2:9b:82:35:90:75:8b:b7:75:69:3d:2e:
                    7e:51:f7:76:9e:11:21:a7:26:94:7c:75:b6:f6:29:
                    a2:43:ac:07:64:f1:23:27:d8:df:f1:ca:19:92:d9:
                    35:97:fc:df:0f:28:01:89:26:1c:ff:f2:3d:2f:02:
                    ef:c6:71:ec:f1:46:c6:75:46:3e:ee:28:68:a5:f2:
                    b4:f7:ff:5d:40:8a:0d:99:d4:a8:ef:65:dd:50:fe:
                    67:e8:74:b4:aa:f2:3b:04:fc:6c:34:b6:ec:80:38:
                    4d:3c:ec:ce:1a:56:19:3a:43:69:8e:cb:cc:c6:b8:
                    83:48:5f:34:9c:eb:ca:91:79:b6:ad:c2:c7:ee:6e:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7D:24:CD:2B:19:C8:79:8D:9B:6B:92:8C:03:11:E0:F4:56:D6:66
            X509v3 Authority Key Identifier:
                keyid:77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/3137302e38322e3230362e302f32332d3233203d3e20323636343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:4d:b8:b9:6a:00:67:5b:e5:db:a3:c2:51:0f:e9:8e:00:af:
         31:df:02:d7:d9:e2:bb:3b:b8:cd:c9:e6:cb:37:c5:ed:97:67:
         54:13:80:51:5f:a6:b0:1e:4d:30:72:5d:e3:b3:d1:d8:58:f5:
         2b:3a:1c:a2:3e:ea:c4:82:d1:bf:8b:51:13:6c:9b:4a:f8:cc:
         10:be:15:97:c1:9a:6a:d0:7d:ab:64:56:a1:4a:90:01:8a:20:
         c6:2b:70:a1:2d:9f:3f:d0:70:43:10:36:ea:9f:08:18:cc:60:
         37:06:5f:88:c5:40:29:13:bd:79:26:c9:d2:f2:4e:03:52:ca:
         7a:f6:42:7e:31:a1:8f:d3:be:aa:44:68:e9:bb:20:d7:fc:f1:
         d3:61:b0:2d:37:ca:d1:71:97:6c:c9:aa:10:cc:01:d1:6d:77:
         af:b2:32:f2:50:2a:56:51:de:09:51:ca:85:a3:1d:dd:cf:d9:
         ee:44:e9:59:70:8b:c8:f8:1f:6e:a2:f1:02:fd:0b:4f:7f:33:
         47:a9:74:f2:1a:18:6e:be:c2:0b:c7:04:20:72:cc:45:21:d9:
         ce:d4:0b:46:e2:e7:99:fa:c5:11:45:ed:7a:c5:e3:8a:68:d2:
         aa:cc:8e:88:1e:75:bd:09:2e:07:04:60:dc:ba:44:61:15:9c:
         8d:84:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org