Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fvy97CxiQpK3L6MB8ragb6HqfRLzhmAotonYBe3j5v2/0/3137372e38372e37322e302f32322d3234203d3e20323632363530.roa
File:                     3137372e38372e37322e302f32322d3234203d3e20323632363530.roa (raw, json)
Hash identifier:          JNOIj3218959d2kPZlY6Fy+xPWWNe/+9S6hZh8u05sc=
Subject key identifier:   95:B8:39:1E:B5:45:23:56:C4:50:DB:56:94:67:57:09:BB:8D:16:D4
Certificate issuer:       /CN=08C2DACB943A740FC24C01AC1D462C8AC43B05B8
Certificate serial:       6DF6ED8DAF44CD0B8E4965327B88E7BCDB3CC798
Authority key identifier: 08:C2:DA:CB:94:3A:74:0F:C2:4C:01:AC:1D:46:2C:8A:C4:3B:05:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2DACB943A740FC24C01AC1D462C8AC43B05B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fvy97CxiQpK3L6MB8ragb6HqfRLzhmAotonYBe3j5v2/0/3137372e38372e37322e302f32322d3234203d3e20323632363530.roa
Signing time:             Fri 21 Jul 2023 19:04:00 +0000
ROA not before:           Fri 21 Jul 2023 18:59:00 +0000
ROA not after:            Fri 19 Jul 2024 19:04:00 +0000
asID:                     262650
IP address blocks:        177.87.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f6:ed:8d:af:44:cd:0b:8e:49:65:32:7b:88:e7:bc:db:3c:c7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C2DACB943A740FC24C01AC1D462C8AC43B05B8
        Validity
            Not Before: Jul 21 18:59:00 2023 GMT
            Not After : Jul 19 19:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:de:ba:a1:11:27:50:8b:25:5a:ce:7b:53:
                    2c:3b:6f:74:d4:ec:b3:f7:d3:d7:de:53:60:73:66:
                    28:1e:7c:3b:80:83:2a:42:9b:84:f1:8d:76:32:9d:
                    b6:3c:87:dd:bb:df:75:1f:f4:f3:37:89:8c:09:2c:
                    fe:99:44:ec:e9:da:62:4c:69:86:d2:56:f3:8f:d4:
                    66:af:26:6f:1d:01:3e:ca:95:88:4d:f3:dd:73:0b:
                    0b:93:cc:90:a0:88:5b:27:3e:bd:99:42:de:f6:4d:
                    66:eb:d6:5b:cb:f0:cc:6f:be:35:de:8c:e8:44:f1:
                    c3:a0:75:fe:5b:f1:70:cc:a7:a5:8e:fb:7b:44:fa:
                    cc:ba:62:66:c5:90:36:92:e6:02:c4:2a:61:89:bd:
                    62:61:1f:bc:dc:c3:39:fc:c4:12:50:42:e6:b4:d6:
                    38:dd:fd:97:57:b7:bb:80:cd:32:0f:2b:a0:fe:f7:
                    e1:3b:e2:a9:cd:2b:c8:4e:08:82:3e:56:4b:30:d4:
                    49:f3:9f:0a:13:7b:47:8e:8e:86:c8:7e:88:fb:b7:
                    47:40:42:37:f3:ce:3d:e1:86:b1:3b:30:1e:55:8b:
                    f7:eb:28:10:43:6e:8a:9a:cf:3d:e4:9f:21:8a:86:
                    6d:88:df:59:43:04:9b:3f:0a:0d:0e:b9:19:5f:14:
                    3c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B8:39:1E:B5:45:23:56:C4:50:DB:56:94:67:57:09:BB:8D:16:D4
            X509v3 Authority Key Identifier:
                keyid:08:C2:DA:CB:94:3A:74:0F:C2:4C:01:AC:1D:46:2C:8A:C4:3B:05:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fvy97CxiQpK3L6MB8ragb6HqfRLzhmAotonYBe3j5v2/0/08C2DACB943A740FC24C01AC1D462C8AC43B05B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2DACB943A740FC24C01AC1D462C8AC43B05B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fvy97CxiQpK3L6MB8ragb6HqfRLzhmAotonYBe3j5v2/0/3137372e38372e37322e302f32322d3234203d3e20323632363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:f3:fa:15:2b:d4:98:4f:07:79:70:61:a5:9d:d5:2b:9c:2f:
         31:29:05:b8:80:0d:56:08:58:9b:c4:85:60:4c:27:f7:ed:c6:
         60:bb:70:f9:ac:fe:f3:65:d7:55:f0:a1:75:5f:1c:42:63:cd:
         3b:5f:e9:bd:a8:9f:18:a4:f4:01:84:d6:e8:f0:d7:c0:de:74:
         35:a7:9e:f2:fd:46:32:e2:8e:28:2b:55:98:97:62:c2:cd:7e:
         bf:b1:68:4b:a2:11:e7:c7:7c:6f:1a:6e:73:9d:7d:28:fb:8a:
         7d:46:11:ca:87:b6:cb:d0:a6:1a:34:d1:49:d0:30:78:bf:ed:
         e9:17:12:68:f1:8b:7f:fb:63:6a:ad:3a:ba:14:18:09:1e:9e:
         e9:24:14:8b:e8:f4:75:c3:c7:e7:85:3c:1e:14:20:46:f5:94:
         19:d7:d1:ac:35:e1:ed:03:b8:f0:02:57:44:9e:4e:96:0b:15:
         ae:5d:5f:3a:0a:11:05:ff:36:18:ff:21:1e:6e:3f:8b:25:4e:
         1a:4c:90:73:09:0e:74:02:fd:23:49:79:c1:be:b8:3b:11:c6:
         57:83:19:f0:f0:fe:07:49:e1:80:b7:68:fc:4c:54:6c:24:f4:
         2c:e9:58:d2:82:3a:27:28:e6:b1:b7:cc:5c:ec:fe:64:ef:f7:
         98:4e:c5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org