Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38382e302f32322d3232203d3e20323632333532.roa
File:                     3137372e3132362e38382e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          B9XLTYvMyXLK8LVnJRUcYD7WE4KpPf0kaOureUrZn80=
Subject key identifier:   C5:2A:B5:64:9A:1E:86:AE:BB:1E:65:88:79:17:84:2C:70:33:75:3A
Certificate issuer:       /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial:       43BFD4C2DE87FE98856638B9F4EDDF655368E508
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38382e302f32322d3232203d3e20323632333532.roa
Signing time:             Mon 25 Sep 2023 17:01:29 +0000
ROA not before:           Mon 25 Sep 2023 16:56:29 +0000
ROA not after:            Mon 23 Sep 2024 17:01:29 +0000
asID:                     262352
IP address blocks:        177.126.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bf:d4:c2:de:87:fe:98:85:66:38:b9:f4:ed:df:65:53:68:e5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
        Validity
            Not Before: Sep 25 16:56:29 2023 GMT
            Not After : Sep 23 17:01:29 2024 GMT
        Subject: CN=C52AB5649A1E86AEBB1E65887917842C7033753A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:60:3c:51:56:60:01:43:b4:af:15:0c:15:
                    58:5b:ea:a5:73:bd:69:6e:45:9e:36:6c:a6:c8:8d:
                    f0:69:b0:4c:2f:73:c3:8f:90:6f:84:0c:1c:a1:19:
                    88:bf:d1:d2:48:53:2d:ca:bc:be:7c:31:52:3b:be:
                    d4:b8:58:54:dc:3c:7c:a9:6a:7f:05:da:12:c8:7a:
                    b3:61:cd:e4:f1:39:2e:1d:b7:aa:c3:10:bc:84:6c:
                    90:67:c6:bf:c4:98:9d:ee:a4:44:80:67:73:2c:8b:
                    16:b1:aa:ed:5c:74:24:00:6e:d5:5d:ea:4b:60:47:
                    e2:49:48:f8:30:db:ce:8e:e5:f4:06:5c:ff:15:63:
                    6c:33:61:11:99:15:18:03:4f:67:76:1a:8a:22:55:
                    0c:b0:20:82:2d:cd:c8:13:25:e6:53:f9:42:d5:09:
                    99:60:2b:ec:6e:ee:48:57:a8:dc:3f:b9:f0:f6:c0:
                    9f:da:f9:8a:1f:4d:6c:63:0d:ef:bb:e7:3e:97:74:
                    02:8b:17:3b:73:c7:81:93:b7:4f:ec:93:ec:d6:08:
                    c8:d3:96:bd:8c:6f:20:51:18:84:c3:9b:60:a5:f6:
                    0f:35:9e:8c:13:fa:4e:2e:14:9e:8a:6b:77:5f:d0:
                    41:64:e6:16:a8:f0:17:7e:20:5a:17:e5:03:30:18:
                    7f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2A:B5:64:9A:1E:86:AE:BB:1E:65:88:79:17:84:2C:70:33:75:3A
            X509v3 Authority Key Identifier:
                keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38382e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:ca:03:a9:81:35:c5:e4:1d:62:cd:04:ee:3e:5a:02:dc:a9:
         37:5c:ea:f6:e0:f0:aa:74:1a:b2:32:7e:a3:65:1e:17:2a:7f:
         30:b1:43:db:72:76:83:81:0c:0c:20:41:c2:7b:cc:02:c9:97:
         e7:4a:5b:9a:59:0f:96:f5:e3:f0:90:d9:ce:fa:d9:2b:6f:97:
         2a:f5:16:70:b4:58:1e:e3:76:f1:c2:35:d3:ca:b6:89:d9:cb:
         f2:cc:da:c1:bc:10:6a:46:8a:1c:74:f9:24:46:45:2d:82:5d:
         31:9a:f8:08:f7:11:a4:8a:6b:81:2a:23:ba:e2:fb:35:9d:57:
         29:b0:d1:bc:96:7f:f9:1b:0d:d6:d2:d9:ac:90:4f:59:d4:7b:
         6c:62:0f:bc:06:b4:f7:77:1e:65:d9:16:a3:58:7d:00:bb:b5:
         9e:8b:e5:06:d5:35:0a:db:6c:81:07:b7:49:0c:75:bb:ff:6e:
         20:48:9c:95:45:4f:12:76:40:9e:d5:4e:bd:2c:1a:6f:d4:08:
         d2:b6:77:3a:91:00:10:93:3c:fb:e9:44:23:1e:61:fd:50:18:
         a1:24:a5:6b:d1:55:5d:80:94:c4:3b:db:ab:2a:10:33:8e:97:
         bc:bd:6a:84:83:76:33:a3:1f:c7:55:d4:d1:9a:07:8c:d9:f2:
         2e:2a:1a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org