Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38362e302f32332d3233203d3e20323632333532.roa
File:                     3137372e3132362e38362e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          cHMfO9Hb02FlJnEXNIX5opIxCei1tZ0DfIZMxaLF+Cc=
Subject key identifier:   CB:A3:93:85:D5:7F:74:84:ED:EF:98:73:F0:28:F6:B8:C4:6C:F3:10
Certificate issuer:       /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial:       75FACD68EFAE5FFAE2BA788E48CEE2E010204B42
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38362e302f32332d3233203d3e20323632333532.roa
Signing time:             Mon 31 Jul 2023 20:07:25 +0000
ROA not before:           Mon 31 Jul 2023 20:02:25 +0000
ROA not after:            Mon 29 Jul 2024 20:07:25 +0000
asID:                     262352
IP address blocks:        177.126.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fa:cd:68:ef:ae:5f:fa:e2:ba:78:8e:48:ce:e2:e0:10:20:4b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
        Validity
            Not Before: Jul 31 20:02:25 2023 GMT
            Not After : Jul 29 20:07:25 2024 GMT
        Subject: CN=CBA39385D57F7484EDEF9873F028F6B8C46CF310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:af:f2:e2:55:96:ec:97:ee:79:20:bb:d1:
                    83:0b:d8:2e:ce:7b:e0:0d:76:57:3d:6c:65:a8:e7:
                    6b:d3:e5:52:01:79:85:cc:f2:97:43:6c:06:ff:3f:
                    00:b9:bd:8f:83:2c:9b:df:41:4c:15:4e:9c:be:3b:
                    fc:f9:8f:45:28:10:17:dc:5e:80:77:2b:82:d5:56:
                    21:46:3f:80:a0:dc:03:49:a5:ec:38:54:b9:9d:37:
                    22:f1:6c:5f:97:66:c4:d7:8e:9f:75:a8:24:23:5c:
                    12:f0:80:85:dc:46:ee:5f:47:9d:6b:88:11:65:af:
                    b4:46:be:87:bf:18:86:c1:ea:78:5f:bf:42:65:eb:
                    9b:40:59:a5:3a:02:dc:e9:1c:fd:69:5c:b6:d9:80:
                    cc:c3:89:be:91:54:13:19:8a:79:33:39:12:11:36:
                    f2:a5:6a:b5:56:37:ca:4e:f0:5e:b4:e5:ca:1c:3b:
                    a8:3a:38:18:80:73:ab:65:56:d8:f7:85:9d:eb:95:
                    c7:42:b6:bc:db:22:8a:08:1c:d3:c7:70:c2:6c:04:
                    fd:9f:f0:de:de:96:c5:3b:a3:7c:d0:7b:24:12:ee:
                    e6:a9:30:c4:be:77:c1:42:bb:89:33:cf:cf:18:4f:
                    43:71:9a:e6:44:cf:72:32:0a:5f:fb:ea:15:5f:47:
                    9d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A3:93:85:D5:7F:74:84:ED:EF:98:73:F0:28:F6:B8:C4:6C:F3:10
            X509v3 Authority Key Identifier:
                keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38362e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:f6:e8:12:a5:6a:8e:56:aa:e6:14:54:fe:f1:f5:fd:a3:12:
         57:05:0b:47:7d:e5:61:14:35:d9:87:ac:7c:43:fd:a6:49:47:
         b8:a9:65:9d:cd:f5:9e:7a:30:15:1e:b2:f1:83:09:b2:36:eb:
         95:6f:b6:e5:55:b0:3e:a3:64:4b:65:49:a8:23:99:93:e0:01:
         3f:2c:dd:d7:4a:13:dd:7a:a4:d1:82:2e:0a:17:14:86:c9:f2:
         37:a0:15:a3:85:1a:a9:92:cf:36:51:9a:c9:93:99:a2:84:d7:
         b8:93:b5:94:80:e5:35:0b:8e:ed:89:6e:f4:9f:63:4d:5b:10:
         6e:d6:a5:0c:29:3e:fd:9c:ae:cc:67:65:c5:bb:bd:6f:1b:c7:
         17:b9:7b:32:b9:16:93:cb:e8:0e:89:22:24:97:78:71:64:23:
         18:aa:a4:74:0f:fe:fc:f1:11:5a:0e:bc:2a:f6:82:43:ee:8c:
         6d:97:20:85:a2:2e:da:14:c0:55:f6:62:c5:19:40:8b:7b:18:
         51:b7:09:ff:95:e1:b2:6b:ad:ac:60:6e:7c:5d:ee:f7:3d:26:
         f8:52:4f:53:46:32:71:b8:4a:ef:c9:b2:f1:4f:f1:a7:0a:12:
         19:bf:a8:ef:18:41:f3:06:38:7d:86:11:d0:92:6c:d1:73:d2:
         cf:36:13:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org