Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38372e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38372e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          18vOQsdaN4fMibizZhS2XZPNXFzZr4f5fZSTG/OXRks=
Subject key identifier:   E9:DC:B4:D4:DF:B4:6A:CA:F7:66:4E:90:E2:B0:57:9E:9C:54:24:3A
Certificate issuer:       /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial:       515DF37419ED5E1009DBA53FDED65D373CBFA653
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38372e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 31 Jul 2023 20:07:47 +0000
ROA not before:           Mon 31 Jul 2023 20:02:47 +0000
ROA not after:            Mon 29 Jul 2024 20:07:47 +0000
asID:                     262352
IP address blocks:        177.126.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5d:f3:74:19:ed:5e:10:09:db:a5:3f:de:d6:5d:37:3c:bf:a6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
        Validity
            Not Before: Jul 31 20:02:47 2023 GMT
            Not After : Jul 29 20:07:47 2024 GMT
        Subject: CN=E9DCB4D4DFB46ACAF7664E90E2B0579E9C54243A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:8b:f6:88:fd:b4:0f:07:0b:c2:21:0c:9b:
                    14:b1:17:4f:33:88:b9:80:d5:ea:ee:c6:aa:fe:07:
                    40:05:9b:35:7a:80:54:e8:19:e0:d5:f1:04:40:03:
                    82:df:57:4c:4a:5f:9a:48:ea:62:90:13:89:8b:ac:
                    aa:c7:a3:ee:97:4f:cd:d7:4f:94:d5:91:08:4d:aa:
                    68:8c:8c:2b:ef:aa:87:87:9d:52:db:d1:ce:df:f9:
                    b4:29:2f:1a:ac:c7:f3:47:8b:6f:3a:43:5a:ae:f7:
                    f7:88:2d:9d:3a:7e:a2:a5:2c:eb:74:c5:f5:93:5a:
                    f4:2b:88:b1:ac:6a:d0:be:94:d7:61:ba:22:9b:60:
                    f6:b0:6f:6b:13:e1:ac:85:ea:38:56:c3:99:0c:71:
                    42:7f:54:e8:b6:96:45:7f:6a:0e:b1:3e:5d:fc:3a:
                    47:8f:6a:43:65:bf:cf:3b:9a:ac:4d:67:4c:95:fd:
                    b6:eb:c2:e3:7f:67:f7:f8:45:42:2a:d9:e6:82:47:
                    8b:b4:4d:a3:37:dc:4e:17:fd:db:22:2b:2c:c8:d6:
                    57:5f:e6:93:66:58:69:e4:67:8d:25:b8:db:77:02:
                    aa:4d:00:23:1a:55:cf:fe:7f:06:47:68:8d:8b:4e:
                    e0:0d:26:62:5b:91:1b:4c:09:fc:5d:3f:3f:a6:e2:
                    da:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DC:B4:D4:DF:B4:6A:CA:F7:66:4E:90:E2:B0:57:9E:9C:54:24:3A
            X509v3 Authority Key Identifier:
                keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38372e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:dd:ee:1c:c7:d5:3a:7d:29:29:f8:44:90:79:61:15:a6:80:
         ed:d2:74:eb:ce:f9:39:04:f4:38:1c:a0:4a:94:35:e7:92:55:
         07:7c:79:ab:d9:3d:d8:38:d1:c1:a0:06:21:c5:8e:4f:e1:e7:
         aa:98:39:cf:85:cb:a0:6e:ed:20:86:f5:a6:3d:da:94:35:55:
         5e:ed:6a:48:66:51:8e:15:0f:78:67:05:7e:e7:1b:b3:85:be:
         70:49:c6:07:b4:41:c9:94:f6:58:8d:29:20:6d:41:84:a7:5a:
         3e:61:0c:d3:34:0e:43:f5:26:63:06:47:ef:ae:c1:10:c4:8f:
         fe:53:0f:6e:01:41:8b:31:56:88:39:02:d1:03:0a:ef:f6:d0:
         c7:2c:3e:a4:55:33:e3:59:20:2c:85:92:62:cb:ba:ec:c6:a5:
         39:6e:50:76:aa:65:25:f6:bb:11:3a:04:ff:b3:f1:db:0e:70:
         ba:df:cf:6d:75:e6:dc:db:3f:ea:b2:54:3c:55:94:24:f5:8e:
         22:56:6b:5d:c6:69:e4:26:b6:5d:b6:3a:ad:c6:ab:76:58:07:
         f4:99:ef:d0:85:b3:8c:31:05:5f:04:82:ce:3c:1b:81:ae:1d:
         12:70:8c:f7:18:9a:a3:ac:34:85:8e:13:05:21:21:4b:69:c2:
         cd:80:47:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org