Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38382e302f32332d3233203d3e20323632333532.roa
File:                     3137372e3132362e38382e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          LOJGgTr+G0liHg+5QdQDiF4BOWIqjpGu8XrBnY81lMU=
Subject key identifier:   09:68:A9:EF:C5:21:65:F6:D8:3A:23:5A:8F:0E:AC:8A:46:65:21:A9
Certificate issuer:       /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial:       2D8E60FFD43A06FB74654712B9BABB473D9B2898
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38382e302f32332d3233203d3e20323632333532.roa
Signing time:             Mon 25 Sep 2023 17:01:29 +0000
ROA not before:           Mon 25 Sep 2023 16:56:29 +0000
ROA not after:            Mon 23 Sep 2024 17:01:29 +0000
asID:                     262352
IP address blocks:        177.126.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8e:60:ff:d4:3a:06:fb:74:65:47:12:b9:ba:bb:47:3d:9b:28:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
        Validity
            Not Before: Sep 25 16:56:29 2023 GMT
            Not After : Sep 23 17:01:29 2024 GMT
        Subject: CN=0968A9EFC52165F6D83A235A8F0EAC8A466521A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:c2:fd:57:a5:b7:d2:19:6d:fd:c5:e7:75:
                    58:bc:74:c7:7d:80:19:9e:e8:93:42:81:5d:a0:25:
                    c6:d2:8c:45:e9:4e:f1:4f:ca:cd:13:b9:38:b7:a0:
                    3e:32:c7:4d:fa:c3:f3:de:1d:47:35:e3:d7:da:56:
                    8d:8b:7c:35:47:94:10:cb:9d:87:4f:28:4d:96:97:
                    09:4b:11:63:d8:f2:ad:fe:5f:42:4e:2f:79:c2:9d:
                    d7:2d:6d:19:c3:f5:25:e3:33:3a:08:48:54:51:c7:
                    79:fb:e3:92:b2:0e:9b:bf:2b:83:7b:ab:22:0d:7b:
                    87:86:33:3d:72:4b:f9:cd:18:f0:e0:31:1d:64:5c:
                    db:c6:2c:4c:02:35:6b:ce:60:e7:89:4d:fe:74:39:
                    c0:bc:79:8a:16:98:06:f4:28:a7:99:30:15:ca:45:
                    15:3f:4f:d7:bf:fb:90:d4:00:6f:f2:d3:a7:07:b5:
                    18:43:54:04:bd:cb:25:49:02:8e:8c:de:c5:9f:a0:
                    44:7c:bd:26:87:09:7e:16:89:9d:58:a5:8f:d5:92:
                    d4:e8:49:f0:4a:0b:dd:fb:fb:f3:ce:43:f1:85:09:
                    a6:48:cd:89:74:4a:4e:a6:a2:16:bd:e6:14:e5:20:
                    25:97:02:85:97:68:cf:8f:87:36:63:39:77:e8:30:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:68:A9:EF:C5:21:65:F6:D8:3A:23:5A:8F:0E:AC:8A:46:65:21:A9
            X509v3 Authority Key Identifier:
                keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e38382e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:6e:b4:07:63:15:c5:49:61:9c:06:b0:60:36:f5:7f:ca:cc:
         76:b2:aa:2d:e7:a2:08:a3:e5:c5:19:b4:86:13:a1:d1:79:a0:
         54:84:d0:50:30:ac:3f:d9:a0:82:b8:84:98:e1:69:2b:0d:15:
         20:f7:40:bf:3f:9f:4f:3c:63:8f:dd:90:ad:d2:87:3f:a4:b6:
         12:f5:65:09:d1:29:e4:ff:6a:bc:10:51:c9:ce:bc:63:ed:44:
         55:1b:50:ec:14:36:76:c7:b6:30:04:ea:da:9a:b3:79:0c:a3:
         a7:5e:5f:a1:6f:67:b1:82:04:70:84:dd:7e:e8:ec:df:c4:82:
         cb:6b:dc:b1:ef:dd:46:d1:5b:09:52:8e:fc:3d:5e:a0:7d:d9:
         e7:f4:ad:b9:9f:83:cb:22:e9:84:e3:aa:d9:a2:e8:22:38:9c:
         98:03:06:7f:e1:6c:d0:05:1d:3d:8a:ce:02:5c:a1:99:02:9b:
         31:05:fe:9e:bc:af:25:11:cd:ed:3d:15:fd:ea:23:fc:e5:ff:
         0d:f6:59:ef:28:15:13:9b:ee:97:ec:14:d7:ab:dc:01:9a:76:
         aa:88:f5:a6:36:a0:7e:54:ca:ab:35:eb:b5:16:96:c2:7f:9a:
         85:9f:95:5b:0e:53:11:8c:fc:da:50:75:e5:74:92:99:5b:a5:
         0e:50:8a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org