Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32342e302f32322d3232203d3e203238333338.roa
File:                     3137372e38372e32342e302f32322d3232203d3e203238333338.roa (raw, json)
Hash identifier:          tq2rWtK6sqWkNuZ0cGNTCRWIkpEgvCbxUdfMVFFs7kA=
Subject key identifier:   D9:98:7E:0F:A1:02:B2:46:40:65:68:6F:70:A7:F1:5E:2C:DA:19:67
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       772D088CFE60C1CE9E1CD692EE5E2FFBBAE4114E
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32342e302f32322d3232203d3e203238333338.roa
Signing time:             Thu 08 Sep 2022 17:00:00 +0000
ROA not before:           Thu 08 Sep 2022 16:55:00 +0000
ROA not after:            Thu 07 Sep 2023 17:00:00 +0000
asID:                     28338
IP address blocks:        177.87.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2d:08:8c:fe:60:c1:ce:9e:1c:d6:92:ee:5e:2f:fb:ba:e4:11:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Sep  8 16:55:00 2022 GMT
            Not After : Sep  7 17:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:d2:08:cb:4a:f0:2f:a7:a4:90:34:6b:45:
                    4d:23:f5:04:ee:4b:28:4f:7c:bb:40:29:02:d9:f9:
                    6a:23:33:7c:d1:cd:39:ea:8d:55:7b:fb:0f:eb:1f:
                    1c:3c:c0:73:63:a1:4a:1e:49:76:31:b2:a3:e3:69:
                    1a:6c:6d:27:59:a0:18:62:fa:5b:f8:48:f2:9a:74:
                    88:88:7b:ae:da:98:53:17:d1:0a:5d:fe:af:91:83:
                    61:95:9f:8f:d5:21:00:1f:02:8f:bf:cf:bb:e0:3b:
                    fc:0f:22:80:9f:38:07:67:9b:00:f4:23:76:3c:78:
                    10:8b:53:77:19:6a:95:78:a3:54:68:b4:e3:68:1b:
                    e9:65:5e:c3:02:97:7b:5a:64:a7:62:8b:c3:95:0a:
                    55:c6:54:db:bf:68:13:46:39:e1:58:fe:a2:91:e2:
                    64:0e:15:68:b3:10:13:ac:5c:25:59:0a:80:fc:67:
                    c6:03:b3:e7:89:81:fb:10:33:34:01:cf:39:1b:79:
                    ab:e4:6e:cd:48:46:82:f4:76:9f:39:05:93:44:12:
                    0e:9c:26:0c:94:e1:34:55:a9:d8:ac:1e:db:96:3a:
                    a8:19:38:81:c8:31:81:70:82:06:77:38:6b:b9:8f:
                    b3:0d:e0:68:5f:6f:7f:e2:a8:c1:bb:a8:a2:08:35:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:98:7E:0F:A1:02:B2:46:40:65:68:6F:70:A7:F1:5E:2C:DA:19:67
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32342e302f32322d3232203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:c4:07:d5:d1:44:d7:d7:b1:7f:37:4e:e9:00:0f:30:5c:48:
         ab:fe:e3:17:2e:3e:ab:00:9f:ce:87:42:b3:64:e6:e1:77:e7:
         52:57:b9:5e:32:f0:2d:0e:43:bc:f4:9b:81:0f:0c:5c:e9:c4:
         aa:6f:1a:8c:8c:45:46:7b:d9:56:8c:6d:5c:81:9e:db:cd:a2:
         f4:56:a9:f7:15:4a:df:cc:13:60:64:23:e2:6b:8e:6f:6a:f1:
         03:4b:1a:6e:93:b5:d0:46:cf:0a:99:14:20:84:df:ba:a6:9e:
         73:2a:bb:2c:ae:57:24:a2:8e:9d:95:e2:c9:3d:76:03:2b:f6:
         8c:c4:5a:c1:57:d3:75:ff:74:28:e7:b5:83:5b:45:94:06:45:
         8c:e9:2a:fb:7c:1d:ba:8f:0e:55:95:bb:7e:92:1b:74:8b:6c:
         93:2c:ae:5c:d6:79:dd:da:10:6a:ad:58:65:88:37:ae:8a:c1:
         72:00:08:c0:01:44:4f:06:cf:51:80:02:a5:e9:cc:9b:79:ce:
         61:c9:d2:75:f8:83:99:b5:3a:c0:ae:6b:86:44:57:40:f2:fc:
         fe:23:08:ec:ca:be:0d:f0:c9:60:66:8e:e0:64:2d:5e:ed:ab:
         f6:1b:1b:55:b9:fd:f0:41:91:a3:f8:0c:a6:fd:6a:35:96:87:
         01:38:d2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org