Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38382e302f32312d3231203d3e20323632333532.roa
File:                     3137372e3132362e38382e302f32312d3231203d3e20323632333532.roa (raw, json)
Hash identifier:          tMgDn0lyoaRk6xpj93KKgrFd+YXgfjvqjjipnT/ZZPA=
Subject key identifier:   62:1C:F2:95:56:73:6A:18:4C:16:AD:F8:9A:81:CF:14:4E:97:A4:DA
Certificate issuer:       /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial:       145CF8E8560BADDC2C570EE629FAFE092688AFCF
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38382e302f32312d3231203d3e20323632333532.roa
Signing time:             Mon 25 Sep 2023 17:01:28 +0000
ROA not before:           Mon 25 Sep 2023 16:56:28 +0000
ROA not after:            Mon 23 Sep 2024 17:01:28 +0000
asID:                     262352
IP address blocks:        177.126.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5c:f8:e8:56:0b:ad:dc:2c:57:0e:e6:29:fa:fe:09:26:88:af:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
        Validity
            Not Before: Sep 25 16:56:28 2023 GMT
            Not After : Sep 23 17:01:28 2024 GMT
        Subject: CN=621CF29556736A184C16ADF89A81CF144E97A4DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:d0:bb:b0:66:be:9e:b6:2e:6e:4a:50:7a:
                    e9:53:ab:d8:01:a5:59:97:82:af:c1:6c:c9:f9:44:
                    9f:7f:37:5c:b5:46:f2:a6:c3:04:5e:fc:ed:64:0e:
                    e7:85:b9:05:d1:d9:2a:2f:ab:b6:d4:1a:b7:0e:1c:
                    4d:4b:2d:ad:65:5f:df:8e:3a:ff:22:78:9f:fe:46:
                    8d:ea:78:7f:83:bb:eb:52:e1:ca:d2:4e:40:f1:45:
                    e8:a5:6d:05:e6:a4:d8:38:1d:00:87:f7:f9:03:7d:
                    ba:24:1f:d7:09:9b:2b:da:71:f8:57:06:48:4e:4b:
                    7c:9b:bd:03:16:13:b8:3f:db:b1:06:fb:f7:95:fe:
                    8d:18:c3:64:d1:31:87:51:ea:81:e2:f2:33:9a:2a:
                    40:03:e8:7d:95:ed:24:c1:31:4f:24:26:8d:e3:79:
                    ac:14:51:a2:9e:14:ed:20:24:55:f7:83:21:90:8a:
                    e6:68:e7:90:41:e7:d7:bf:39:93:a2:0a:d4:0f:88:
                    57:f0:59:18:1b:3b:40:d9:c6:1a:bd:63:15:32:27:
                    fd:a2:2c:95:4c:f9:20:5b:77:3c:c9:1d:53:eb:df:
                    d8:ca:92:e6:59:94:40:92:c3:a8:72:50:7e:01:96:
                    c4:ea:20:96:26:e6:5d:52:3d:3e:56:20:f4:56:e5:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1C:F2:95:56:73:6A:18:4C:16:AD:F8:9A:81:CF:14:4E:97:A4:DA
            X509v3 Authority Key Identifier:
                keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38382e302f32312d3231203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:e2:93:2c:01:ea:fa:be:4e:4e:ae:c8:fb:7d:23:09:4f:5d:
         1d:82:cf:80:5f:21:22:96:75:cb:a5:b2:53:8e:fd:db:89:fb:
         d9:a5:2e:52:ac:25:8e:bf:8e:fe:aa:70:ce:e4:ff:8b:0b:88:
         8a:13:48:5d:d7:d7:48:a3:1e:3e:b7:1d:0b:40:cd:32:4b:ed:
         29:be:1e:b3:81:7b:87:ac:e8:d8:57:79:21:10:b0:4a:85:85:
         72:bf:32:99:96:a7:fe:11:29:62:49:4b:0a:0b:c6:0d:fa:7b:
         b2:5d:f2:aa:83:67:dc:49:59:d0:88:ee:6c:81:67:bd:81:44:
         3d:c5:0d:45:77:68:76:e2:73:e0:6f:11:f0:1a:70:fe:8c:62:
         de:0a:6d:01:42:99:e8:c0:58:08:bb:89:51:e5:be:e5:01:9e:
         7e:0b:7e:97:c8:6f:10:72:f7:93:da:b7:7c:ef:a9:54:8b:b3:
         80:61:e3:fc:74:46:85:0a:63:06:02:53:59:75:cd:dd:11:8c:
         8c:be:2c:fc:34:52:48:ef:0f:f6:56:ae:1b:3b:cb:3c:07:f7:
         9d:4a:c8:ff:e7:46:af:17:23:ba:14:2c:bf:c1:1b:6b:db:c3:
         37:32:13:02:0f:5d:d1:a7:5a:95:ef:a1:5a:74:b1:91:58:72:
         ce:5b:8b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org