Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/3137372e37312e3130312e302f32342d3234203d3e20323731333336.roa
File:                     3137372e37312e3130312e302f32342d3234203d3e20323731333336.roa (raw, json)
Hash identifier:          CQeiRSYaPdcbDwVSTg0+dwKB4aVHci+LWldFmfPmL+4=
Subject key identifier:   65:81:5F:AC:47:8B:19:82:D1:57:E4:14:16:DE:51:C3:65:FF:1D:BC
Certificate issuer:       /CN=C8395D8D16513ABA5BCE3876BC86946E464F3BC7
Certificate serial:       3FDD86D455F7DBDDCDA55D242482A39615B23067
Authority key identifier: C8:39:5D:8D:16:51:3A:BA:5B:CE:38:76:BC:86:94:6E:46:4F:3B:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/3137372e37312e3130312e302f32342d3234203d3e20323731333336.roa
Signing time:             Wed 12 Jul 2023 01:23:46 +0000
ROA not before:           Wed 12 Jul 2023 01:18:46 +0000
ROA not after:            Wed 10 Jul 2024 01:23:46 +0000
asID:                     271336
IP address blocks:        177.71.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:dd:86:d4:55:f7:db:dd:cd:a5:5d:24:24:82:a3:96:15:b2:30:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8395D8D16513ABA5BCE3876BC86946E464F3BC7
        Validity
            Not Before: Jul 12 01:18:46 2023 GMT
            Not After : Jul 10 01:23:46 2024 GMT
        Subject: CN=65815FAC478B1982D157E41416DE51C365FF1DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:b1:51:ed:e6:91:b8:42:c6:c3:84:9b:f3:
                    a7:97:d3:e9:2b:c2:f1:c6:ba:97:cb:81:ec:f4:69:
                    ac:23:1b:8a:c2:94:6d:e4:86:43:61:69:39:78:bf:
                    c1:1d:d1:7c:b6:a9:82:20:f7:65:50:1a:d2:df:03:
                    f1:38:8f:74:8b:ab:d7:d5:94:bd:79:45:26:83:32:
                    ad:22:e8:e8:05:73:fd:10:7f:89:f3:f8:75:4c:ee:
                    2e:27:b0:c9:67:f4:fd:8b:5d:95:03:a1:07:50:f6:
                    6f:39:f8:d9:ad:d2:48:42:0a:8e:a3:d3:78:5a:70:
                    12:26:57:10:8b:66:f1:c1:29:2d:7d:b0:3d:12:30:
                    f8:87:4b:ef:9a:c7:e2:ee:c9:f3:88:ef:f2:27:35:
                    34:d7:45:5e:5d:85:75:eb:b9:67:9f:b1:f2:84:42:
                    9e:3f:f0:10:ad:d8:51:63:26:d7:b6:75:d2:36:42:
                    2d:5e:c4:71:b0:cd:00:85:34:4c:86:f1:11:57:b2:
                    ad:2d:4f:b3:31:87:f2:dd:c6:6e:85:40:41:03:fc:
                    94:fc:8f:8f:ed:54:77:0e:34:16:4a:48:c2:c6:5b:
                    a9:fc:17:6e:08:ab:11:d9:30:af:a5:42:84:c3:5f:
                    61:a7:0f:14:ea:cb:6e:c1:fc:a4:a5:d5:21:98:93:
                    5c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:81:5F:AC:47:8B:19:82:D1:57:E4:14:16:DE:51:C3:65:FF:1D:BC
            X509v3 Authority Key Identifier:
                keyid:C8:39:5D:8D:16:51:3A:BA:5B:CE:38:76:BC:86:94:6E:46:4F:3B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/3137372e37312e3130312e302f32342d3234203d3e20323731333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:62:79:e0:bb:9a:96:7b:61:88:57:69:83:ff:1c:2f:21:95:
         3c:b8:12:47:81:eb:83:41:80:b1:44:f9:1e:95:5a:e7:b5:e5:
         2a:47:ee:88:9c:10:0b:09:ea:67:6c:26:9c:a2:8e:40:37:d1:
         c5:4c:fe:49:d8:bd:27:17:85:a9:73:e5:d0:67:38:ba:bb:70:
         28:96:9d:38:47:ff:8d:19:7c:f0:1e:a0:c5:a1:6a:a6:01:fc:
         e2:00:8f:31:3b:3d:73:43:a7:e4:4f:22:c3:4a:3b:72:5a:1a:
         3f:58:70:e9:40:cc:40:d0:df:05:e4:0e:2a:1e:37:1e:ee:33:
         42:31:e9:dd:b5:15:20:ee:ae:fa:71:54:8f:f8:6b:1d:c5:87:
         9e:1f:f6:92:42:cd:6d:b7:d5:af:cd:b6:bc:34:b4:57:44:d7:
         42:da:f7:56:b4:10:eb:09:de:ce:64:2a:37:17:f6:d5:e1:e2:
         f2:55:73:61:cb:4c:0b:c5:60:e9:42:ac:37:98:0f:69:74:54:
         a6:20:78:91:11:8e:bb:79:39:5d:68:74:50:52:92:cd:2a:91:
         68:19:5c:a0:67:85:88:10:60:e9:90:00:ee:b9:6c:c8:bf:eb:
         d1:f6:b2:36:a2:98:be:1d:39:e3:b8:fa:b5:04:59:e4:a0:56:
         bd:9d:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org