Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa
File:                     3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          BaZYuhuCIYVDeLYhMvOESSi1AIF3nmxxsIQZ5Y7FCMc=
Subject key identifier:   CE:DE:37:CD:78:AB:35:22:AA:EB:21:6B:FF:BE:8F:84:1A:E9:27:3C
Certificate issuer:       /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial:       21C8A2FA8A1D9933D907BE6DA6562D445A9B60D5
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa
Signing time:             Mon 25 Sep 2023 17:01:29 +0000
ROA not before:           Mon 25 Sep 2023 16:56:29 +0000
ROA not after:            Mon 23 Sep 2024 17:01:29 +0000
asID:                     262352
IP address blocks:        177.126.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c8:a2:fa:8a:1d:99:33:d9:07:be:6d:a6:56:2d:44:5a:9b:60:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
        Validity
            Not Before: Sep 25 16:56:29 2023 GMT
            Not After : Sep 23 17:01:29 2024 GMT
        Subject: CN=CEDE37CD78AB3522AAEB216BFFBE8F841AE9273C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:28:b5:df:7b:b0:fa:0d:cf:54:77:bf:ec:39:
                    28:4c:ff:96:36:90:7b:7c:4c:dd:0d:5d:ef:45:da:
                    b9:90:6f:a5:bf:e4:fa:6f:a3:2c:de:7a:49:c5:c0:
                    90:43:21:12:86:be:da:2b:09:58:69:fa:54:c2:35:
                    69:5e:f2:40:2d:fd:32:81:1b:44:e7:55:26:2e:d8:
                    ef:31:63:52:d0:f4:9e:df:e2:e6:21:e9:72:38:4f:
                    c7:8a:b9:0c:6b:c8:89:9e:cf:14:81:6b:bc:52:0e:
                    fc:5b:22:53:46:4e:41:6b:e6:d1:be:4d:86:a1:b4:
                    d3:8f:85:0c:4f:b0:e9:04:48:df:23:a2:f3:13:52:
                    93:42:66:b4:b3:0d:ff:9e:e4:7d:b2:c2:e2:0d:15:
                    95:51:1c:58:04:31:1d:7d:f9:ea:ae:fa:68:ae:ef:
                    4b:93:b1:58:9e:d8:72:63:a8:15:a7:9f:57:c5:69:
                    be:28:70:4d:10:19:b5:51:4b:a0:c3:85:0f:01:e8:
                    4a:96:07:db:1c:0e:93:a1:11:90:ff:a6:e8:13:34:
                    8b:25:8f:85:b0:c9:8d:76:3a:b8:82:91:6f:4a:1c:
                    ec:f1:cf:6e:fe:3e:9b:2e:e0:f3:87:28:a0:91:ca:
                    ef:79:12:04:08:6f:3e:f7:f0:fc:6e:f4:a6:14:8d:
                    d6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DE:37:CD:78:AB:35:22:AA:EB:21:6B:FF:BE:8F:84:1A:E9:27:3C
            X509v3 Authority Key Identifier:
                keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:fa:66:95:2f:b4:b8:a6:1c:f0:54:e0:ba:34:92:bf:cd:70:
         41:9f:8d:3c:f6:f1:67:a9:cb:4c:78:62:b7:fc:52:f1:0e:1d:
         16:2d:b9:ed:63:7c:d7:d9:d3:a9:03:a3:8e:94:34:48:0c:bd:
         00:47:6b:a3:12:4c:60:ed:38:5c:df:ca:92:a4:95:5a:87:a8:
         f1:ce:06:7f:20:74:44:68:79:cd:31:3a:73:7d:4c:e3:64:69:
         17:52:62:46:45:86:e9:45:64:5a:d5:9b:3f:97:cc:e9:89:ee:
         4a:97:14:e2:9c:17:a0:2f:d9:39:87:14:93:08:b9:9b:c4:d8:
         3a:fb:3f:5f:75:6f:4a:be:61:01:81:24:7b:96:ec:54:a5:8c:
         b9:3a:7c:68:ab:bc:3a:57:5f:89:be:27:d6:43:25:38:7b:96:
         02:8f:df:ab:2f:41:cf:a2:1d:13:4f:8b:10:54:d8:02:de:00:
         bb:ab:27:e1:44:b4:ff:44:00:df:41:93:6c:b9:d0:f1:bc:b3:
         fb:5c:11:12:2d:c8:b2:1d:ff:2b:53:18:55:3e:49:f9:a6:2e:
         87:07:08:ca:cd:95:68:20:70:ad:44:2b:c4:48:30:a6:d6:04:
         5e:99:45:25:c3:78:fc:31:a6:24:e3:96:58:48:d1:49:e6:d7:
         3d:9b:f8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org