Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e38392e302f32342d3234203d3e20323633303134.roa
File:                     3137372e31302e38392e302f32342d3234203d3e20323633303134.roa (raw, json)
Hash identifier:          V8S3Ga5SrZV6bSFa68O3r7teC2BKh47UP7Mcc5RjPqQ=
Subject key identifier:   85:DA:34:FF:B7:3B:07:D7:AE:81:AE:F8:94:EB:9A:61:F8:DD:67:10
Certificate issuer:       /CN=9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4
Certificate serial:       5C504DD0BEBB13657768BA97AD67E86F8FF12341
Authority key identifier: 9B:D9:F6:50:7D:7F:5B:C4:E7:62:D6:1F:E6:38:E4:19:F1:AB:34:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e38392e302f32342d3234203d3e20323633303134.roa
Signing time:             Thu 11 Apr 2024 21:00:00 +0000
ROA not before:           Thu 11 Apr 2024 20:55:00 +0000
ROA not after:            Thu 10 Apr 2025 21:00:00 +0000
asID:                     263014
IP address blocks:        177.10.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:50:4d:d0:be:bb:13:65:77:68:ba:97:ad:67:e8:6f:8f:f1:23:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4
        Validity
            Not Before: Apr 11 20:55:00 2024 GMT
            Not After : Apr 10 21:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f0:d8:95:26:59:ff:65:4e:d0:76:a3:b9:27:
                    59:3e:4f:8d:53:68:37:5e:28:51:9d:93:bb:b6:c4:
                    53:59:03:5d:dc:a2:52:6b:ed:43:31:93:8f:81:48:
                    1b:87:fe:c5:8a:91:10:0c:82:5f:6d:74:3c:82:98:
                    77:1f:74:a5:5b:09:96:16:a5:76:a6:17:47:60:53:
                    3f:50:d4:72:67:b6:b0:d3:0b:c8:18:f5:ef:25:91:
                    2b:2e:f7:8d:f6:85:34:77:38:28:a5:09:8d:27:d3:
                    86:fc:ec:03:cc:19:20:d8:0b:37:25:08:84:40:83:
                    21:fa:c1:e8:13:92:3c:74:2f:71:dc:b2:fe:08:e7:
                    20:5e:e8:aa:66:af:a9:85:3c:9a:cd:1e:bb:14:14:
                    5c:7f:c7:56:f0:73:15:3e:a4:e6:f2:cd:1b:30:5f:
                    80:42:35:ae:02:8a:49:26:00:07:f4:39:09:54:36:
                    d4:8b:02:42:91:fa:63:83:40:3a:c8:6f:29:1b:b9:
                    55:a8:28:fe:33:31:4f:fd:e3:f4:36:01:99:76:45:
                    12:c8:fd:bd:17:ce:a2:38:44:2e:5c:cc:d0:8b:f9:
                    ff:31:a2:c1:70:cb:21:f3:dc:ff:5e:dc:76:32:35:
                    b4:4f:12:43:67:32:30:f2:a8:9c:72:28:ee:34:da:
                    af:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DA:34:FF:B7:3B:07:D7:AE:81:AE:F8:94:EB:9A:61:F8:DD:67:10
            X509v3 Authority Key Identifier:
                keyid:9B:D9:F6:50:7D:7F:5B:C4:E7:62:D6:1F:E6:38:E4:19:F1:AB:34:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e38392e302f32342d3234203d3e20323633303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:81:e8:5b:bb:f4:a3:c9:cf:92:dc:e4:1f:c2:9f:cf:76:31:
         15:20:c3:80:a4:82:85:64:6e:8c:c2:c5:af:e6:43:fd:86:5a:
         74:93:d2:9d:b5:e9:57:76:19:70:99:40:cf:13:54:49:92:32:
         1c:0a:84:9e:f6:5a:23:05:6b:1e:bf:4e:2f:4d:0c:b5:55:c2:
         57:74:6d:0c:0a:9d:54:dc:99:ee:54:84:a0:11:a7:90:27:f0:
         41:b1:09:e9:27:2a:bd:31:3b:65:d0:94:54:00:67:43:0c:3a:
         d2:12:8c:71:b3:ae:38:f3:5b:59:2c:36:3a:05:f5:46:cb:31:
         ab:42:78:b9:bd:05:86:70:39:c7:a6:42:6e:f0:e7:70:c7:3e:
         8d:e5:b7:2c:1b:3a:48:68:9b:32:00:4a:6d:27:ba:ad:e7:47:
         f5:29:5b:5c:b1:be:78:88:2a:24:89:fc:54:16:93:da:af:69:
         9e:ea:23:c2:74:86:4e:a9:b4:3b:11:7b:07:a4:d4:43:58:38:
         52:ff:c0:7e:e6:ef:2f:8f:51:fa:17:d4:a5:68:d8:0d:65:17:
         d3:fa:0f:4d:28:db:a7:70:96:05:a8:96:b6:76:40:fc:92:01:
         f6:80:cf:81:49:b8:31:50:d7:fd:6d:75:07:cc:3e:20:cf:d5:
         24:40:ec:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org