Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/3137372e32332e3133362e302f32312d3234203d3e203532363939.roa
File:                     3137372e32332e3133362e302f32312d3234203d3e203532363939.roa (raw, json)
Hash identifier:          Q+HZBGq7br/Me4vQu2L0RUgjy2U9nDcjS2/tvwgFjEQ=
Subject key identifier:   7B:DA:8C:29:A2:9E:B7:03:51:8D:5B:E4:FC:26:11:BD:EB:34:70:F1
Certificate issuer:       /CN=B787B0A23C983808EDAFAA5C7934BC004F741D62
Certificate serial:       312C97081C14DD565AA33D9647393AA2E9E343C7
Authority key identifier: B7:87:B0:A2:3C:98:38:08:ED:AF:AA:5C:79:34:BC:00:4F:74:1D:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B787B0A23C983808EDAFAA5C7934BC004F741D62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/3137372e32332e3133362e302f32312d3234203d3e203532363939.roa
Signing time:             Tue 01 Aug 2023 18:12:54 +0000
ROA not before:           Tue 01 Aug 2023 18:07:54 +0000
ROA not after:            Tue 30 Jul 2024 18:12:54 +0000
asID:                     52699
IP address blocks:        177.23.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2c:97:08:1c:14:dd:56:5a:a3:3d:96:47:39:3a:a2:e9:e3:43:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B787B0A23C983808EDAFAA5C7934BC004F741D62
        Validity
            Not Before: Aug  1 18:07:54 2023 GMT
            Not After : Jul 30 18:12:54 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:13:94:51:c6:2c:6c:96:17:b8:c8:e7:40:
                    91:8a:a3:aa:5d:14:67:6a:10:56:01:19:46:14:68:
                    0d:b3:ad:de:e4:91:b7:3a:f9:07:72:ce:dd:05:ba:
                    e2:de:48:d6:7f:f9:19:fe:c6:9a:5d:36:00:5a:fb:
                    76:aa:df:96:cf:65:bf:d0:18:8a:d5:c9:6e:5d:66:
                    d7:d8:ca:54:e4:3e:01:10:3a:da:88:f9:8b:03:98:
                    4d:40:d7:c8:9e:e9:30:82:33:c2:73:ec:e7:3b:db:
                    9c:9d:cf:f2:cc:24:63:6a:54:f4:b7:26:40:b5:87:
                    9d:af:09:d3:fa:76:30:a2:a1:aa:7a:d7:ca:78:ed:
                    8e:35:de:8d:4b:3d:d8:3d:8c:d4:35:d0:ed:c0:37:
                    ba:d7:9f:77:7c:56:e0:d1:f8:16:3d:23:7a:40:93:
                    4e:58:87:01:d7:ea:c1:68:29:2b:9f:2c:4f:7b:60:
                    42:d3:7d:0c:8b:06:e2:69:2f:eb:a8:fd:d1:1a:ca:
                    88:42:79:ab:f0:6f:05:2c:12:1d:21:23:0f:4c:10:
                    4f:16:34:01:a5:15:32:60:03:b0:ef:62:f2:64:4f:
                    0c:8e:dd:4a:a1:e0:7d:0c:b6:a2:b6:ec:d6:11:05:
                    85:72:97:9f:18:a3:f4:80:bf:42:f4:2e:72:46:32:
                    23:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DA:8C:29:A2:9E:B7:03:51:8D:5B:E4:FC:26:11:BD:EB:34:70:F1
            X509v3 Authority Key Identifier:
                keyid:B7:87:B0:A2:3C:98:38:08:ED:AF:AA:5C:79:34:BC:00:4F:74:1D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/B787B0A23C983808EDAFAA5C7934BC004F741D62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B787B0A23C983808EDAFAA5C7934BC004F741D62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/3/3137372e32332e3133362e302f32312d3234203d3e203532363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:60:07:5e:82:e9:80:4c:27:09:23:73:51:39:25:14:44:28:
         80:f6:f5:4f:cb:a4:49:09:07:91:24:15:e0:37:04:de:99:b2:
         7a:59:6f:32:6f:85:aa:9c:d7:35:06:3c:da:3f:b2:ba:5b:30:
         e7:18:8f:e9:fa:23:d3:70:64:33:d9:d3:60:d3:9c:ed:3a:ef:
         fa:9f:da:5a:6d:a0:48:a1:69:34:ea:bc:3e:01:65:9a:9a:74:
         ff:67:23:05:c7:83:e6:c3:8e:42:de:09:71:bd:09:9d:bb:07:
         d9:0d:3d:d0:02:10:be:4b:82:21:d2:c4:6f:88:f1:1a:c1:e8:
         4d:e6:58:e9:47:9e:07:ec:93:ae:b8:bc:22:0e:00:49:82:68:
         e3:ef:7a:57:62:6e:84:5a:44:73:63:67:ab:c3:03:23:6f:33:
         1a:0c:9d:1c:f8:7a:cd:db:de:36:23:e8:c3:00:85:4d:09:c8:
         92:8e:de:ac:1e:a0:0a:b8:81:86:31:32:75:73:ca:92:3c:48:
         6b:3f:fa:6b:36:fc:d9:8a:b4:5d:4b:69:65:98:bf:49:ba:5a:
         d4:32:c5:ba:6f:35:e1:c7:b8:d0:5d:32:d2:a9:ed:c3:7a:cc:
         31:e0:2b:74:e3:2c:4e:ad:e4:55:8b:f6:a7:fa:42:56:4e:a8:
         85:26:3d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org