Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131382e302f32332d3233203d3e20323632343934.roa
File:                     3137372e36362e3131382e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          Xe7RsSD58JlgAbfJZ9UwVx54z+pJ1mRXAP5RVU1dkL8=
Subject key identifier:   BD:8E:E9:CA:64:C6:0C:34:1A:28:67:14:87:43:F1:EE:44:4A:4B:54
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       29F8CB11E00D973728DD6CFE23C00F1AEA12DE6A
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131382e302f32332d3233203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:53 +0000
ROA not before:           Thu 19 Sep 2024 14:06:53 +0000
ROA not after:            Thu 18 Sep 2025 14:11:53 +0000
asID:                     262494
IP address blocks:        177.66.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f8:cb:11:e0:0d:97:37:28:dd:6c:fe:23:c0:0f:1a:ea:12:de:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:53 2024 GMT
            Not After : Sep 18 14:11:53 2025 GMT
        Subject: CN=BD8EE9CA64C60C341A2867148743F1EE444A4B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:0a:3c:c6:f5:f9:ca:19:83:76:7f:b1:6b:
                    a6:e3:94:b0:4e:c0:9c:78:dc:f7:2d:9d:f5:b3:96:
                    9e:2b:7f:cc:14:2a:8c:0f:62:72:80:8c:13:0b:51:
                    b6:06:b4:a9:fc:39:c4:39:e0:12:c1:20:0a:2d:1c:
                    66:35:5d:a2:16:9a:5f:03:33:ad:3d:cd:e1:67:e1:
                    50:60:1b:59:d5:6f:20:a8:9a:2d:69:5f:91:24:1c:
                    2e:a0:00:fa:fa:85:02:da:79:a3:e7:a8:b6:b7:e3:
                    e1:50:2d:57:db:f5:7f:1b:96:2f:7f:39:b5:00:a4:
                    86:2d:22:b7:28:96:d6:a2:7f:fb:4a:a2:2e:ae:b7:
                    c7:a2:97:e3:5c:40:71:b6:7a:61:60:b4:fa:e1:b7:
                    1a:cb:38:e3:73:6d:b0:d9:b6:2b:39:71:cb:79:62:
                    c2:45:16:39:ec:ff:de:3c:f4:40:01:90:01:52:3b:
                    c1:44:ec:26:0b:75:98:f1:3b:fa:e8:18:bf:00:ed:
                    c4:1a:28:b1:24:1d:18:1d:f6:6f:79:62:fa:8f:4c:
                    81:62:20:06:93:53:3e:73:1f:5d:e5:a7:a1:66:84:
                    d6:5c:0a:75:40:92:71:78:2b:7d:20:8f:31:1c:25:
                    20:6a:71:2d:50:ba:24:92:56:d6:98:81:89:3e:60:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8E:E9:CA:64:C6:0C:34:1A:28:67:14:87:43:F1:EE:44:4A:4B:54
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131382e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:2a:88:6e:e5:d7:e3:3f:47:d6:95:14:3e:0e:16:cb:49:31:
         38:64:36:1c:f7:25:04:5f:a5:76:e2:25:2d:d8:90:29:f5:c3:
         8a:a2:c9:44:24:a5:56:01:93:ca:13:e7:5d:09:8d:26:cc:b2:
         49:5d:34:22:df:4f:da:e9:99:5d:9e:eb:fe:27:a1:e7:ed:64:
         54:6c:27:8a:e0:4e:71:ad:71:a4:51:d4:9c:ee:f2:5a:78:91:
         e5:64:fb:ab:d9:db:2f:90:b6:8b:7f:7c:21:da:ba:32:d8:61:
         0b:df:5f:e2:dc:23:17:a3:f3:fa:ec:86:8e:9d:51:37:46:15:
         8b:4e:05:0d:b2:d4:4d:5a:86:90:5b:4b:49:cc:76:a8:c9:86:
         7e:b1:4f:d6:c0:ed:1a:18:02:73:e1:38:5c:e9:01:62:88:54:
         03:52:e0:20:61:f7:71:cd:3e:79:7e:be:d5:ec:5f:e2:11:e9:
         7a:7c:d4:67:c2:5d:c8:c0:87:aa:65:31:d5:ff:d7:37:ee:9e:
         e6:6d:b0:e8:66:bc:5d:f4:69:b5:2e:6f:9c:41:97:da:2b:5e:
         cd:9d:10:29:08:0e:f9:1e:94:f3:48:50:0c:9e:5c:50:d1:77:
         0a:65:61:cd:41:53:a6:37:98:d1:6a:f4:d4:5d:e5:97:a3:4a:
         b6:d3:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:35:09 2024 by rpki-client on console-ams.rpki-client.org