Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130302e302f32332d3233203d3e203631363732.roa
File:                     3137372e31312e3130302e302f32332d3233203d3e203631363732.roa (raw, json)
Hash identifier:          fwA0kk3vs/O+PMrGTCvT9zjcjpC64NxCMbW0t940+aE=
Subject key identifier:   87:EC:07:DA:17:52:5A:19:A3:12:A3:C3:18:8C:23:EF:E5:CF:C5:97
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       6A34971888DA9F386629551204AE0D2CDB1B93E6
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130302e302f32332d3233203d3e203631363732.roa
Signing time:             Thu 27 Jul 2023 13:56:08 +0000
ROA not before:           Thu 27 Jul 2023 13:51:08 +0000
ROA not after:            Thu 25 Jul 2024 13:56:08 +0000
asID:                     61672
IP address blocks:        177.11.100.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:34:97:18:88:da:9f:38:66:29:55:12:04:ae:0d:2c:db:1b:93:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Jul 27 13:51:08 2023 GMT
            Not After : Jul 25 13:56:08 2024 GMT
        Subject: CN=87EC07DA17525A19A312A3C3188C23EFE5CFC597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:90:44:24:f7:f9:23:c3:12:04:af:eb:8b:42:
                    6a:51:1b:fc:4b:a1:80:fe:a4:fe:4a:e5:37:52:c6:
                    23:e4:c5:e5:0b:53:33:e3:c3:b3:ac:3d:15:4b:87:
                    9c:34:b4:0e:7b:e1:21:71:88:e2:6e:7f:5d:11:4e:
                    c2:ea:7d:21:bd:77:c6:17:1a:07:3d:7d:e4:a3:a4:
                    b8:74:f4:1a:9c:15:32:8e:70:82:f8:e8:02:f8:d9:
                    02:18:05:b7:92:cc:ab:95:6f:e1:ec:13:60:03:99:
                    90:d9:cb:6c:f5:56:b8:98:2f:ff:eb:13:8c:be:fa:
                    7e:39:32:77:93:c4:5b:b0:62:33:ff:19:16:29:11:
                    1b:47:12:c0:54:5c:61:60:e6:41:7d:26:d1:ef:93:
                    50:b8:1c:53:55:17:d2:dd:ac:ae:61:18:12:e0:5c:
                    f0:fc:70:01:c6:8c:6a:b3:62:21:9b:21:bf:f9:18:
                    70:7d:53:b9:00:c3:d2:8a:14:2c:bf:b7:10:1f:65:
                    dc:2c:ad:16:ed:12:fc:7d:ea:de:98:66:07:d6:69:
                    cc:b4:e9:3e:09:85:72:98:49:3b:c4:2f:0c:ce:98:
                    49:0c:5e:5b:13:0e:6f:07:e7:de:d4:41:7e:b3:38:
                    d9:88:f7:1c:d0:7d:71:86:2d:d0:4d:a8:43:ee:22:
                    2c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EC:07:DA:17:52:5A:19:A3:12:A3:C3:18:8C:23:EF:E5:CF:C5:97
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3137372e31312e3130302e302f32332d3233203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:83:d3:25:f6:66:42:27:fc:e0:8d:7a:53:b7:af:83:bd:
         95:a5:a5:e2:37:22:ca:7a:df:ba:16:12:30:03:01:90:a6:59:
         94:05:8e:a6:39:b9:67:bf:f9:05:cd:98:f0:56:51:5a:99:53:
         f7:7d:eb:71:6b:64:10:c0:a2:01:1b:53:3b:3e:1a:1f:dd:68:
         20:ea:6f:95:e1:14:2d:1b:34:e8:45:5a:c3:62:ba:25:00:63:
         b8:8f:89:34:26:2b:5f:69:36:e6:46:a3:ae:61:d2:5c:2b:8a:
         e4:a8:6c:e7:a9:bb:0b:1f:c7:39:ed:aa:b5:d5:bd:62:71:ae:
         2a:b2:be:10:9d:b9:24:fb:98:f8:f9:fa:0a:ab:14:5d:4c:80:
         f2:55:c2:4c:3b:1e:6c:69:0d:28:d9:0c:35:71:31:74:6b:a3:
         88:08:41:f7:75:7d:b1:1e:ce:e6:dd:55:d5:e9:a2:9e:ce:14:
         dd:53:45:a1:76:e1:c3:49:58:b6:9b:09:14:ae:6d:6e:1c:4e:
         37:e2:f7:fa:c1:7a:8f:7e:4d:24:6a:75:a2:31:1e:77:9e:92:
         e4:ca:a6:c5:2b:86:18:f1:23:e2:ba:8c:9f:9a:40:e4:b2:94:
         68:89:93:ea:8c:de:57:9b:bf:68:86:ff:ce:16:93:f8:80:ac:
         dd:c2:38:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org