Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3230302e302f32312d3231203d3e20323632373230.roa
File:                     3137372e382e3230302e302f32312d3231203d3e20323632373230.roa (raw, json)
Hash identifier:          s/KmtaaHxFE0O0yVOXWhjkPMaDh7Obu0UzXowaPjdZ8=
Subject key identifier:   82:48:97:54:9E:51:74:57:B7:BB:26:63:86:88:CA:79:D8:CC:FA:57
Certificate issuer:       /CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
Certificate serial:       5D7177948AEFDEEEC5BD1CFC6A16F902736F24AF
Authority key identifier: 1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3230302e302f32312d3231203d3e20323632373230.roa
Signing time:             Tue 28 Mar 2023 20:25:55 +0000
ROA not before:           Tue 28 Mar 2023 20:20:55 +0000
ROA not after:            Tue 26 Mar 2024 20:25:55 +0000
asID:                     262720
IP address blocks:        177.8.200.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:71:77:94:8a:ef:de:ee:c5:bd:1c:fc:6a:16:f9:02:73:6f:24:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Validity
            Not Before: Mar 28 20:20:55 2023 GMT
            Not After : Mar 26 20:25:55 2024 GMT
        Subject: CN=824897549E517457B7BB26638688CA79D8CCFA57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:66:16:39:0d:69:29:0d:9b:d4:bc:8f:85:0f:
                    c1:35:be:58:a7:36:e1:ba:c6:32:8b:4f:03:97:b7:
                    b2:dc:c0:be:63:93:1a:4e:20:b6:40:a8:4b:84:3a:
                    ad:a7:d5:40:39:3e:28:47:55:1f:a1:60:36:7b:e7:
                    e2:b5:24:d6:84:e6:0f:3a:5e:d0:2e:2a:d4:3e:e8:
                    c0:66:5a:5a:27:0c:3f:29:77:61:a9:a9:9c:59:57:
                    fe:fc:28:b8:c9:9c:e9:6c:aa:06:56:21:7a:1a:0b:
                    e0:fc:d6:2a:ce:0e:a1:69:25:5b:fd:cd:70:d7:00:
                    c5:29:c4:67:c7:88:78:16:d3:5d:1d:12:3c:e8:69:
                    f9:99:e2:b2:47:84:03:40:71:46:f7:0c:59:b8:7f:
                    11:74:d9:52:ca:10:6e:a6:ee:d2:25:55:a8:85:0e:
                    8a:5a:6f:eb:2b:f2:41:7b:2b:23:4d:31:fb:aa:7b:
                    e0:8c:10:8b:5c:9c:41:03:c6:93:e5:6c:55:fa:f5:
                    b1:dc:bb:07:d7:5d:c9:b9:0d:41:81:9e:3e:b9:fd:
                    af:a5:3e:28:d9:e5:a5:42:a0:4e:23:35:c0:6f:04:
                    e5:50:31:8e:cd:50:a9:10:a3:35:a6:b8:ce:4a:89:
                    ab:64:8b:e7:c0:f5:21:76:cb:3e:fe:09:3a:36:cc:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:48:97:54:9E:51:74:57:B7:BB:26:63:86:88:CA:79:D8:CC:FA:57
            X509v3 Authority Key Identifier:
                keyid:1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3137372e382e3230302e302f32312d3231203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:36:80:cc:90:5a:5c:d5:84:ac:ce:18:9f:31:d2:3b:5d:b4:
         46:ee:92:2d:48:ca:e4:39:b9:1f:ad:3d:d5:d7:43:1a:1e:78:
         ae:f4:7d:c2:08:70:f8:0e:d0:aa:dd:26:c6:ee:1e:ca:57:5f:
         ce:08:97:6c:66:64:a5:0a:26:4e:d9:43:eb:35:2a:1b:c8:0a:
         7e:d7:32:14:8e:e2:6c:6a:91:7b:48:8d:b4:84:1a:8d:4c:41:
         46:13:27:03:12:d9:3f:43:f0:e2:c6:26:bb:8e:f9:9a:b2:3d:
         60:8b:a1:d7:1c:f9:ee:bd:02:cb:11:85:3e:40:5c:63:f2:2c:
         81:e4:1a:ef:29:94:46:43:06:a9:1d:dc:9f:6f:79:05:ff:5e:
         b5:9f:6b:f2:cf:8c:dc:9a:40:d4:ff:50:fb:e5:f8:2c:66:1c:
         68:ab:fb:99:9a:7d:b2:1f:f6:42:f8:18:a3:03:54:88:a5:ad:
         56:b8:ff:a1:a9:37:e4:53:35:fa:a3:7e:45:9b:84:fb:1b:dc:
         b0:c7:43:77:af:57:69:f0:4b:90:82:dd:54:f5:77:48:27:6f:
         bc:46:0b:43:f2:c0:f7:e4:b5:6e:b5:ec:92:0f:01:36:d0:ef:
         70:f6:1c:95:4f:bb:c3:88:0e:f3:d6:cb:cb:ae:bb:a0:cc:4c:
         7e:9e:ce:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org