Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e39342e302f32332d3233203d3e20323632333532.roa
File:                     3137372e3132362e39342e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          ZX7qhVprwEBxAY2k45Dx7OhpMZWnO8SjvAacvdBTRwc=
Subject key identifier:   B4:F8:41:4C:AA:DE:C5:66:2F:E0:DD:19:32:66:41:70:70:CB:B3:89
Certificate issuer:       /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial:       12A119F66DB5FF61E7FDBB7F314AC0CC5BF8F537
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e39342e302f32332d3233203d3e20323632333532.roa
Signing time:             Mon 25 Sep 2023 17:01:27 +0000
ROA not before:           Mon 25 Sep 2023 16:56:27 +0000
ROA not after:            Mon 23 Sep 2024 17:01:27 +0000
asID:                     262352
IP address blocks:        177.126.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a1:19:f6:6d:b5:ff:61:e7:fd:bb:7f:31:4a:c0:cc:5b:f8:f5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
        Validity
            Not Before: Sep 25 16:56:27 2023 GMT
            Not After : Sep 23 17:01:27 2024 GMT
        Subject: CN=B4F8414CAADEC5662FE0DD193266417070CBB389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:95:f0:54:08:a0:d0:86:12:96:a6:7b:13:
                    af:7e:57:90:55:81:a5:bb:bb:2b:39:08:75:e2:f1:
                    74:c1:93:55:9c:88:cf:40:79:f1:aa:db:4a:12:6f:
                    4b:9d:a9:55:5a:86:2b:e8:30:6f:74:df:c2:f4:ef:
                    a8:cf:7e:5e:33:e1:4e:25:77:51:53:46:84:7a:f6:
                    13:df:23:cd:86:82:9d:c2:1d:0a:1e:ce:4b:d3:65:
                    44:ea:ea:1e:a4:b2:21:1d:a9:96:50:bf:04:67:bf:
                    c1:d0:32:e0:09:03:17:bc:b2:3c:eb:53:e8:81:70:
                    cf:eb:9e:80:32:0b:ef:0c:5d:c2:69:aa:65:91:63:
                    14:82:e9:74:2a:0b:e3:62:21:e1:7e:16:f4:e8:9e:
                    98:b4:e7:ef:16:0e:9d:de:24:32:33:53:c1:34:33:
                    78:a5:b3:8f:8b:12:b3:57:02:17:74:f9:1a:0d:9e:
                    3d:58:db:f7:3c:94:d6:09:a6:ae:4e:4c:47:d1:1d:
                    fc:f5:ca:00:ba:11:51:7a:f8:02:d6:8c:79:13:b1:
                    0e:d9:68:30:aa:b3:42:53:36:21:da:b0:7d:15:d5:
                    19:37:46:d3:96:62:cf:4e:ef:12:3c:99:4c:7b:6f:
                    6c:91:08:e9:54:e5:ed:b2:31:32:71:bc:0c:35:99:
                    3c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F8:41:4C:AA:DE:C5:66:2F:E0:DD:19:32:66:41:70:70:CB:B3:89
            X509v3 Authority Key Identifier:
                keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e39342e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:41:33:0f:3b:56:a4:09:57:db:77:2c:54:b1:92:6e:49:50:
         87:36:93:30:77:d3:c6:d8:1a:40:69:5e:45:75:29:56:77:5e:
         8c:49:50:b6:4d:92:2e:f2:5d:29:ab:40:39:0c:37:ab:96:c0:
         22:e4:f6:3f:ba:db:b1:4b:66:f7:dc:17:7f:ff:8f:16:84:5c:
         22:5d:89:b4:e6:a5:0f:9d:73:aa:bc:de:cd:d3:5a:c9:ed:12:
         16:53:cb:3a:6c:2a:73:85:0d:f5:cf:d6:c4:3f:0c:43:a0:43:
         df:51:46:8f:1a:5b:a4:75:e0:f6:0c:ab:c2:77:57:b7:55:b3:
         85:bd:35:d7:33:e7:85:c1:68:e1:eb:5e:d4:cd:bb:ec:dd:27:
         77:f2:c0:3f:14:fe:52:0c:a1:70:54:77:40:38:ea:fd:56:ee:
         1b:44:e8:c9:4c:36:86:34:d8:ea:aa:73:a0:6a:ab:96:68:69:
         b3:a4:d2:44:bc:76:0b:2c:65:2d:da:6a:c1:d7:3a:75:00:7a:
         e4:af:29:3e:d4:d6:09:b6:89:4d:d7:67:b0:a8:65:35:67:3e:
         9a:ee:58:6d:24:e4:cd:34:b6:4d:a2:ee:e9:91:36:8d:a0:3f:
         a6:03:22:75:06:d1:fb:95:b1:f4:1a:e0:c7:c8:ac:a0:79:12:
         61:c9:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org