Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fvy97CxiQpK3L6MB8ragb6HqfRLzhmAotonYBe3j5v2/0/3137372e38372e37362e302f32322d3234203d3e20323632363530.roa
File:                     3137372e38372e37362e302f32322d3234203d3e20323632363530.roa (raw, json)
Hash identifier:          tPpmqr6iqGk9HQieGIin/GsFfFNW2IwQHpt88KnHVGQ=
Subject key identifier:   15:EF:CD:57:20:F2:58:F7:37:4B:93:B7:BF:C2:2B:86:9A:A4:E2:D7
Certificate issuer:       /CN=08C2DACB943A740FC24C01AC1D462C8AC43B05B8
Certificate serial:       6B59770E185BCC6F3EE9466AC2B5EBE81A33F77B
Authority key identifier: 08:C2:DA:CB:94:3A:74:0F:C2:4C:01:AC:1D:46:2C:8A:C4:3B:05:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2DACB943A740FC24C01AC1D462C8AC43B05B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fvy97CxiQpK3L6MB8ragb6HqfRLzhmAotonYBe3j5v2/0/3137372e38372e37362e302f32322d3234203d3e20323632363530.roa
Signing time:             Fri 21 Jul 2023 19:02:00 +0000
ROA not before:           Fri 21 Jul 2023 18:57:00 +0000
ROA not after:            Fri 19 Jul 2024 19:02:00 +0000
asID:                     262650
IP address blocks:        177.87.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:59:77:0e:18:5b:cc:6f:3e:e9:46:6a:c2:b5:eb:e8:1a:33:f7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C2DACB943A740FC24C01AC1D462C8AC43B05B8
        Validity
            Not Before: Jul 21 18:57:00 2023 GMT
            Not After : Jul 19 19:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:bc:f1:26:e7:30:7a:9d:b4:9a:98:d1:3a:
                    c8:de:6c:46:0d:cf:0f:45:35:98:90:12:43:fe:35:
                    8f:95:66:a6:22:ea:ec:65:17:cc:eb:2c:b8:bf:1c:
                    94:61:06:d2:b0:ca:44:cc:2e:45:2b:fe:f4:50:7f:
                    84:ad:81:f0:cb:c3:d4:49:fe:ab:e8:aa:e0:78:e2:
                    49:0d:d9:83:3d:7a:1e:b1:cf:41:3f:2e:27:fe:98:
                    a5:7e:35:2a:59:9a:c2:52:6c:cd:f4:98:c1:9b:82:
                    12:51:af:e5:e5:69:b4:fa:70:fa:f8:65:dc:5c:cf:
                    d2:7d:89:41:8d:12:33:7b:b6:0d:10:80:36:0f:5a:
                    fc:eb:6a:54:28:15:49:03:65:44:a9:da:92:cc:9d:
                    f2:90:fa:1b:2e:f1:a5:16:1a:68:31:e5:4b:f8:5a:
                    40:3f:55:3f:39:73:f7:21:30:6c:72:05:5f:44:21:
                    02:7d:03:9b:a2:d0:fd:f9:24:43:9a:a6:57:d9:13:
                    98:ef:e6:f4:05:1f:a6:8a:09:8e:77:d4:c3:80:6d:
                    81:1a:0e:7e:76:1b:de:99:0d:b4:50:bb:15:29:3c:
                    7e:da:9d:6b:d6:e5:a7:d7:05:cf:2c:76:56:9e:73:
                    c3:9e:d7:c3:06:26:59:05:93:a4:00:01:76:0d:30:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EF:CD:57:20:F2:58:F7:37:4B:93:B7:BF:C2:2B:86:9A:A4:E2:D7
            X509v3 Authority Key Identifier:
                keyid:08:C2:DA:CB:94:3A:74:0F:C2:4C:01:AC:1D:46:2C:8A:C4:3B:05:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fvy97CxiQpK3L6MB8ragb6HqfRLzhmAotonYBe3j5v2/0/08C2DACB943A740FC24C01AC1D462C8AC43B05B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2DACB943A740FC24C01AC1D462C8AC43B05B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fvy97CxiQpK3L6MB8ragb6HqfRLzhmAotonYBe3j5v2/0/3137372e38372e37362e302f32322d3234203d3e20323632363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:37:19:f8:9e:ed:58:fc:17:bd:2a:9b:e7:7c:d6:df:5f:ea:
         d9:48:f4:9f:07:4b:67:7d:cb:30:a4:07:94:cd:77:4e:1b:e1:
         10:8c:6d:62:e0:f7:eb:25:d7:1d:d9:08:50:96:a4:2f:9d:74:
         9b:1f:79:d3:b3:f3:a1:22:0f:ab:ba:8e:17:e9:15:38:1e:67:
         d8:86:05:ca:d4:9e:76:3b:1f:0d:a4:69:cc:ef:27:f9:bd:84:
         fa:31:48:d4:c5:21:0b:52:e4:5c:9b:22:13:ce:79:9e:51:f4:
         f3:15:90:a6:01:87:9d:05:f6:34:fd:f6:39:2e:a1:a8:96:bd:
         1a:2d:73:e4:99:18:11:f5:3d:e2:3c:8e:b4:c0:4c:77:4f:75:
         bb:f3:c7:ee:f6:92:68:24:1c:89:87:a8:23:0e:d6:55:34:48:
         ae:2f:91:95:1d:48:f7:b1:be:5f:df:cf:e8:50:f3:fd:73:8f:
         46:c7:46:0d:a3:5c:47:94:a8:9e:66:1a:be:32:c1:87:78:71:
         70:f7:f9:6b:59:c6:ce:9f:98:57:f5:f4:1a:cb:f4:17:d7:55:
         41:90:1c:09:d5:83:2b:b4:b8:b0:e6:8d:1e:67:c8:10:2b:e1:
         cc:f1:04:6c:d7:b7:7a:11:db:c7:1d:d7:d0:0e:2a:f9:14:28:
         60:66:7b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org