Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38302e302f32312d3231203d3e20323632333532.roa
File:                     3137372e3132362e38302e302f32312d3231203d3e20323632333532.roa (raw, json)
Hash identifier:          n96GW1/GA5ZZJirOcS2fSzVyZ6Q44YlsQItd7IZttO0=
Subject key identifier:   5B:F1:FE:BB:71:58:82:BA:BE:1E:70:4C:79:FC:D9:E0:C6:F3:43:7F
Certificate issuer:       /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial:       4BB08C1724B76E630F7F8DEDFC5A6758F2CB0DEA
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38302e302f32312d3231203d3e20323632333532.roa
Signing time:             Mon 25 Sep 2023 17:01:28 +0000
ROA not before:           Mon 25 Sep 2023 16:56:28 +0000
ROA not after:            Mon 23 Sep 2024 17:01:28 +0000
asID:                     262352
IP address blocks:        177.126.80.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b0:8c:17:24:b7:6e:63:0f:7f:8d:ed:fc:5a:67:58:f2:cb:0d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
        Validity
            Not Before: Sep 25 16:56:28 2023 GMT
            Not After : Sep 23 17:01:28 2024 GMT
        Subject: CN=5BF1FEBB715882BABE1E704C79FCD9E0C6F3437F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:04:70:a5:27:b0:5c:7d:44:d0:d4:23:a0:
                    ac:e4:76:ed:05:8b:55:0b:39:a6:05:95:28:14:ab:
                    88:ac:e5:98:67:d0:0f:0e:8e:56:b1:02:56:67:f2:
                    bb:f5:fa:8d:a7:28:1d:f3:c8:82:c3:c8:f8:6f:48:
                    5e:95:14:90:91:0d:06:25:c7:4d:c2:81:d6:57:54:
                    c2:8a:4a:b9:9f:a8:f7:f0:2e:77:8b:8d:e7:4e:1c:
                    c4:4d:07:60:1c:77:a0:86:e2:c5:1c:40:f0:a0:12:
                    14:8e:b5:72:b6:b8:2c:81:55:f5:37:7d:30:66:db:
                    b5:88:ea:17:2f:0f:e1:31:ac:6e:a6:01:e0:fd:8d:
                    ec:be:fc:5a:85:f9:ca:50:d3:29:ed:ec:37:6a:28:
                    c1:85:d0:96:24:8f:77:a3:b9:e8:88:7c:b0:67:4c:
                    a5:41:48:c3:f8:c5:73:1d:4b:13:88:8a:53:51:1d:
                    50:67:97:ee:73:d8:17:0b:73:8e:9b:04:6f:40:df:
                    2f:82:7d:4d:8c:4e:b7:66:9c:e6:08:b1:af:80:14:
                    6a:98:6e:ce:2d:e1:2e:5a:de:e8:50:47:0b:d1:39:
                    b4:06:69:db:ba:75:e1:4c:f2:b3:88:6b:b3:a8:72:
                    5f:72:ce:30:6b:04:98:c0:10:a5:e5:06:36:a5:71:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F1:FE:BB:71:58:82:BA:BE:1E:70:4C:79:FC:D9:E0:C6:F3:43:7F
            X509v3 Authority Key Identifier:
                keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38302e302f32312d3231203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:f2:a5:64:21:c9:26:b0:f6:2e:e4:f9:84:91:6c:10:70:92:
         fa:1d:2b:e8:dd:13:4b:62:15:13:01:4c:5e:4b:c2:a3:36:17:
         4a:0f:e0:62:85:40:3c:36:3a:f0:11:de:7d:c3:f0:e8:d3:2a:
         35:88:e8:a7:86:4b:0f:be:49:ba:5b:da:fb:73:14:c9:af:5e:
         37:76:db:03:1a:fa:6b:70:61:c5:73:fa:31:06:32:3f:e6:be:
         76:c3:2f:92:07:45:5e:ae:b3:7c:16:b5:07:0b:21:c7:1d:1c:
         60:f4:81:cd:60:c9:de:cb:b3:d6:74:aa:5f:76:64:b8:75:57:
         fe:ca:eb:4a:49:1c:f8:a0:4c:18:32:87:a6:97:54:9b:4d:c0:
         48:24:0a:dc:66:6f:1a:cd:5b:4b:f7:e6:7e:d7:7c:96:fb:cd:
         d3:a3:84:bc:1d:cc:8a:a6:d3:49:90:6e:49:9f:7f:f7:9f:c8:
         ef:2e:75:08:bb:ac:5b:9d:a6:d5:bf:79:82:23:36:f9:50:a7:
         0b:f6:93:78:cd:b8:8d:6d:ad:44:1d:03:51:ca:b2:ce:1c:95:
         34:bd:81:86:bf:54:45:24:4e:5b:51:bc:9d:c7:95:d8:be:6e:
         39:be:2d:7d:17:eb:07:61:f0:29:b1:7d:7a:bc:3b:00:c2:50:
         82:5e:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org