Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e38372e3134342e302f32312d3231203d3e203238323730.roa
File:                     3137372e38372e3134342e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier:          D1B+Gh/6/ZQN18E3AfcTV31EDyOomzdG9KbY7DBwLSU=
Subject key identifier:   6E:6D:93:9A:CD:EC:DC:19:56:CB:CF:85:70:90:22:C3:3B:E4:82:88
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       4C9B4B401AA06C06B4AE6B46E18533B3FFCAF791
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e38372e3134342e302f32312d3231203d3e203238323730.roa
Signing time:             Thu 07 Nov 2024 20:40:16 +0000
ROA not before:           Thu 07 Nov 2024 20:35:16 +0000
ROA not after:            Thu 06 Nov 2025 20:40:16 +0000
asID:                     28270
IP address blocks:        177.87.144.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9b:4b:40:1a:a0:6c:06:b4:ae:6b:46:e1:85:33:b3:ff:ca:f7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:16 2024 GMT
            Not After : Nov  6 20:40:16 2025 GMT
        Subject: CN=6E6D939ACDECDC1956CBCF85709022C33BE48288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:6a:ef:ef:b1:b3:19:f9:66:3a:db:39:1f:
                    4c:f6:d8:05:97:72:45:bd:1d:fc:c9:6a:e4:38:23:
                    82:a4:14:b5:50:ca:22:72:3a:cd:50:f5:6a:a0:33:
                    73:2f:1a:8e:ea:46:30:b5:43:c3:c7:28:57:b1:62:
                    db:bb:e9:85:b9:fc:4b:9d:a2:e4:64:44:3e:ee:9f:
                    7d:69:e4:64:99:d7:b6:92:94:7e:0c:2d:f4:cb:81:
                    d4:82:76:90:84:11:0c:6d:f0:20:29:7c:32:c5:bf:
                    73:0a:1f:a5:f6:9c:15:b6:48:14:f0:c3:fd:e8:2d:
                    4e:a7:60:8d:02:da:e3:f3:6c:20:7f:2e:10:03:b9:
                    01:94:a6:58:ec:cb:31:e0:9b:ce:eb:6f:76:5c:85:
                    00:94:03:ed:8b:b1:07:67:e0:69:6f:85:5c:75:b4:
                    b8:d3:14:74:e9:a5:c1:4f:bf:64:93:f2:37:c3:b1:
                    a8:ac:e4:dd:8f:c1:e7:69:35:57:27:c6:ee:26:bb:
                    b6:99:2b:da:10:f5:b4:5b:71:6a:c2:7b:d7:89:ac:
                    ad:93:95:f6:e2:b2:c4:91:63:e9:ed:b2:dd:4d:75:
                    77:f9:e9:2d:86:dd:63:cf:59:ae:59:9d:56:70:0e:
                    83:77:60:41:60:d9:e8:e4:a5:7e:12:c6:19:6a:26:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6D:93:9A:CD:EC:DC:19:56:CB:CF:85:70:90:22:C3:3B:E4:82:88
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e38372e3134342e302f32312d3231203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:65:13:e7:14:ca:f7:dc:fb:ce:68:c8:d1:c7:0f:a8:6e:93:
         dc:bf:3d:a2:ec:71:dd:4a:e4:fd:8f:68:2f:ee:f5:21:b1:e9:
         80:c3:c8:6b:de:0a:ef:f2:c9:a7:8b:40:dd:f1:36:5c:fe:7b:
         3f:bc:40:08:63:86:7e:ca:23:0c:51:53:b3:62:5d:03:5d:13:
         ac:41:b7:9a:59:0d:48:62:e7:3e:f5:d5:48:94:bb:05:13:7f:
         75:d8:34:e1:7a:85:9d:43:86:f0:4e:9f:a0:af:10:07:af:9a:
         5e:5b:6e:61:73:6d:4b:14:8a:ea:b8:d0:57:03:74:d6:13:1e:
         ae:b9:6d:2b:96:ed:92:bf:2c:c7:ad:7d:63:60:cc:d5:1d:f0:
         66:14:44:fe:28:08:98:49:10:58:81:a3:00:43:0e:60:d8:42:
         1d:d8:ef:fb:8b:aa:7b:71:cf:8f:76:9b:6c:25:9e:56:25:00:
         b4:f2:82:00:55:2e:ee:6f:22:68:7b:66:28:39:eb:50:bb:04:
         47:8a:09:b6:bf:9c:79:52:5d:35:43:d6:fd:31:cb:79:a4:b5:
         ac:c1:a3:57:98:42:8c:b0:c8:c5:e1:84:01:a3:69:48:fc:c7:
         bb:3a:09:7b:e4:1a:db:ae:ea:02:40:06:66:b6:e2:17:c2:52:
         e3:6f:2c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org