Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e302e302f32332d3233203d3e20323632353337.roa
File:                     3137372e37322e302e302f32332d3233203d3e20323632353337.roa (raw, json)
Hash identifier:          jAiXnZ0OXJjoCpyjeSN6mHbk1jozn6qe32wXyOaO2K8=
Subject key identifier:   28:E5:22:A8:3C:F9:13:C2:C6:8E:EA:3E:2E:87:73:25:5B:52:DA:A4
Certificate issuer:       /CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
Certificate serial:       160399188C657800F113F8712859B7AF5FA81083
Authority key identifier: 2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e302e302f32332d3233203d3e20323632353337.roa
Signing time:             Fri 06 Oct 2023 18:52:39 +0000
ROA not before:           Fri 06 Oct 2023 18:47:39 +0000
ROA not after:            Fri 04 Oct 2024 18:52:39 +0000
asID:                     262537
IP address blocks:        177.72.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:03:99:18:8c:65:78:00:f1:13:f8:71:28:59:b7:af:5f:a8:10:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
        Validity
            Not Before: Oct  6 18:47:39 2023 GMT
            Not After : Oct  4 18:52:39 2024 GMT
        Subject: CN=28E522A83CF913C2C68EEA3E2E8773255B52DAA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:0a:b1:8f:15:05:e9:16:be:fd:42:ef:b2:
                    c8:e9:1a:2b:c0:f9:ac:e3:3d:1a:50:4f:90:74:6e:
                    9b:a4:f9:c4:96:d8:e1:db:cb:98:5b:b3:ac:ed:76:
                    f2:1f:11:a4:79:a5:28:43:a6:87:e4:34:51:0e:42:
                    67:31:ca:03:49:f1:0b:f7:e0:67:43:fd:94:cb:ed:
                    bd:38:24:9b:8f:4b:2a:fe:7e:cf:fe:aa:f2:77:6d:
                    14:50:22:54:13:73:93:dc:5a:0e:c7:6f:41:7e:c3:
                    6b:51:84:e3:1a:e3:be:2b:bf:93:d5:42:48:7b:c1:
                    33:c5:9d:f1:e4:54:bc:aa:b6:b2:68:f7:54:05:57:
                    88:38:86:2d:f9:97:e0:c0:29:43:e1:66:b7:c7:f6:
                    6f:58:b3:3d:23:33:c7:02:99:b0:5d:d8:bf:f2:cf:
                    8c:6f:e4:35:a0:2a:2c:e2:f8:cc:de:1b:5d:3c:a3:
                    c4:1f:84:18:b0:32:15:a5:48:34:9e:4a:e3:d8:61:
                    4a:80:1f:41:ef:43:89:55:e1:31:0d:6b:26:57:e9:
                    35:17:c4:d0:c6:31:a3:9d:eb:2e:2c:8c:da:3c:43:
                    0e:14:74:5b:f1:b1:46:42:99:6f:33:38:1d:23:fc:
                    a3:8d:b4:11:c2:9f:b5:d1:e1:c3:02:13:82:bb:2e:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E5:22:A8:3C:F9:13:C2:C6:8E:EA:3E:2E:87:73:25:5B:52:DA:A4
            X509v3 Authority Key Identifier:
                keyid:2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e302e302f32332d3233203d3e20323632353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:02:61:c6:3e:f4:7f:e1:c0:96:1f:6a:6c:74:d6:3a:a3:a2:
         a3:d8:8e:2c:89:9f:37:49:be:82:e4:23:86:dd:76:c4:d3:d0:
         b0:09:34:e7:ab:74:ae:b3:9d:d0:35:e9:26:24:41:31:ad:9f:
         41:3b:bf:34:b1:e2:c6:6b:91:04:67:c1:42:05:11:cc:10:71:
         bb:7f:58:90:7b:b3:ed:c1:84:d0:9d:a5:f6:ca:4b:96:a1:d3:
         10:82:09:33:3e:9a:02:b0:96:c6:3f:8a:56:1b:2a:89:3e:2c:
         8d:1c:55:cd:ef:35:65:c3:2f:b7:21:85:9f:c1:b9:df:dc:a5:
         8a:f6:57:3e:f5:0b:f7:b0:af:db:73:f1:b0:b3:65:9a:d4:fe:
         27:cc:87:f8:f2:d1:37:99:8d:90:d3:9f:83:d6:23:06:a5:c6:
         5e:9c:f4:9d:d2:aa:69:9e:be:ce:1a:56:bf:11:4a:ea:54:7e:
         2f:1a:b6:bf:64:0a:5d:df:63:2a:dd:a5:b6:1b:43:fb:b6:37:
         f1:1c:2b:6c:3f:ef:62:19:6c:8d:00:b7:2e:ee:7b:d5:14:8b:
         46:06:7f:63:72:b4:88:d2:c9:60:4c:26:bb:57:b9:97:71:6f:
         2b:c2:ca:eb:08:05:b3:5f:c1:21:fe:94:5b:15:b9:33:07:b2:
         a7:24:4d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org