Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e38372e3134342e302f32312d3234203d3e20323632393932.roa
File:                     3137372e38372e3134342e302f32312d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          wprsEGisS8RR+eeAe9nKa9QzQPzXetWTxdKKhjSRiII=
Subject key identifier:   AA:C0:95:81:C9:3E:E5:C1:ED:47:FB:6F:F5:42:5D:3B:B3:EF:7D:23
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       794E1C9AF801005DACCF8A71B6A185673C978BB3
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e38372e3134342e302f32312d3234203d3e20323632393932.roa
Signing time:             Wed 01 Mar 2023 13:40:44 +0000
ROA not before:           Wed 01 Mar 2023 13:35:44 +0000
ROA not after:            Wed 28 Feb 2024 13:40:44 +0000
asID:                     262992
IP address blocks:        177.87.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4e:1c:9a:f8:01:00:5d:ac:cf:8a:71:b6:a1:85:67:3c:97:8b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Mar  1 13:35:44 2023 GMT
            Not After : Feb 28 13:40:44 2024 GMT
        Subject: CN=AAC09581C93EE5C1ED47FB6FF5425D3BB3EF7D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:5e:a3:aa:62:9e:4e:10:e7:40:1b:84:92:
                    58:27:b2:cd:3e:9f:e2:ae:27:2d:95:9c:e1:f3:1b:
                    19:23:56:76:1e:77:38:76:d8:b2:89:62:c1:59:af:
                    5a:76:fb:e3:68:ab:17:de:a7:6c:c0:32:39:04:83:
                    f2:e3:42:4b:48:4b:51:64:37:2c:b8:22:dd:ab:b8:
                    c0:bc:78:e1:a8:44:5c:09:a0:06:42:0a:54:c2:77:
                    cb:54:50:0c:33:95:b4:9c:a2:db:b1:bb:c8:12:e5:
                    54:7f:0e:d6:63:94:1c:fb:2f:c8:ff:29:f2:b9:a3:
                    ad:f0:9f:b1:92:e8:38:d1:d0:ee:94:7c:9f:6f:61:
                    d3:33:ea:f7:bf:88:d2:19:94:b3:f4:28:86:c5:5e:
                    12:0b:2d:40:0a:12:e9:6f:9a:19:bd:a7:2b:17:a2:
                    37:88:27:43:54:f4:b2:a3:d1:be:5b:99:3c:63:ba:
                    80:6a:7e:5f:64:12:b8:4d:2b:62:bb:61:94:07:08:
                    87:32:a9:47:21:38:3d:14:d8:16:f4:b8:a0:55:9a:
                    dc:76:02:2c:bd:c6:f4:53:8d:7a:1c:f6:b3:80:c6:
                    21:4a:9d:7d:63:92:cd:ea:3f:f9:e4:e9:5b:02:2b:
                    3c:03:b7:8f:eb:e5:63:22:7c:04:62:2a:8e:10:1f:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C0:95:81:C9:3E:E5:C1:ED:47:FB:6F:F5:42:5D:3B:B3:EF:7D:23
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e38372e3134342e302f32312d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:d5:42:87:8f:f8:71:b4:c6:4e:db:05:50:41:24:23:04:b4:
         9e:6e:c9:aa:73:79:88:89:e7:87:1e:b6:b8:9b:b2:b1:f0:47:
         e4:12:7a:c0:07:fc:2f:25:86:cf:8c:84:bc:9a:7c:2f:18:95:
         37:a6:83:f1:2a:4c:60:56:10:0e:fd:17:81:45:4c:a8:36:6c:
         04:65:46:56:f0:57:77:3a:3b:6f:1c:89:95:71:0d:ad:33:86:
         7f:ad:1f:e2:57:a0:fe:31:cf:5c:97:ca:02:10:db:61:0d:09:
         7d:af:81:e1:e2:c0:03:8b:52:0d:a4:0a:32:9e:07:7b:50:2e:
         4d:13:84:7c:f0:23:d8:69:20:35:03:f4:38:28:ab:a2:07:87:
         f9:cc:0f:43:e6:5b:47:bd:7f:d9:9c:05:68:ee:76:76:53:56:
         7f:1a:b0:72:72:b3:a2:96:4b:71:2e:a9:0c:2d:78:9b:08:e1:
         c2:8f:e0:41:39:47:e0:3a:a5:9d:ae:ce:5e:9f:11:4e:4a:ff:
         a5:4e:9c:b3:7a:36:f2:b1:fd:e5:b4:84:5e:da:5a:6b:e3:4c:
         c4:10:c4:99:1a:c8:d4:0e:35:50:44:9b:9b:61:b3:3c:e3:42:
         15:10:a6:3c:3d:06:2c:05:ff:d3:d7:7b:a2:1f:60:92:0b:41:
         3f:d6:c6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org