Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BJqrt6RCHtySujTSUqinqVWGqH419kbuo3QXhddNeYs/0/3137372e33392e3131322e302f32312d3231203d3e20323632343233.roa
File:                     3137372e33392e3131322e302f32312d3231203d3e20323632343233.roa (raw, json)
Hash identifier:          n+4r/akHPq8avWaMa3wSs/ZDkaV73kBAKYGaSNlU29U=
Subject key identifier:   E7:54:0F:E9:15:23:22:5D:97:29:91:6A:2A:39:05:3F:D6:1A:0E:7B
Certificate issuer:       /CN=F1E672D1C3D7AF666633FFB5FCC3445E93C570E6
Certificate serial:       7D91DDFDDE1B7A5A788232EACD2895E37CA17A34
Authority key identifier: F1:E6:72:D1:C3:D7:AF:66:66:33:FF:B5:FC:C3:44:5E:93:C5:70:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1E672D1C3D7AF666633FFB5FCC3445E93C570E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BJqrt6RCHtySujTSUqinqVWGqH419kbuo3QXhddNeYs/0/3137372e33392e3131322e302f32312d3231203d3e20323632343233.roa
Signing time:             Tue 10 Oct 2023 22:16:38 +0000
ROA not before:           Tue 10 Oct 2023 22:11:38 +0000
ROA not after:            Tue 08 Oct 2024 22:16:38 +0000
asID:                     262423
IP address blocks:        177.39.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:91:dd:fd:de:1b:7a:5a:78:82:32:ea:cd:28:95:e3:7c:a1:7a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E672D1C3D7AF666633FFB5FCC3445E93C570E6
        Validity
            Not Before: Oct 10 22:11:38 2023 GMT
            Not After : Oct  8 22:16:38 2024 GMT
        Subject: CN=E7540FE91523225D9729916A2A39053FD61A0E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:49:21:bb:05:b7:2f:4f:56:66:e5:d7:f4:
                    3a:e8:5a:3d:be:ad:e9:39:f8:79:46:81:d3:ce:e5:
                    6d:b1:be:ba:c1:0d:c7:12:f1:1c:4e:f9:c4:37:38:
                    0c:ce:80:e1:3e:85:8a:bb:03:65:78:be:ec:de:6d:
                    c3:a5:e2:6e:b4:35:21:1c:5a:81:72:5b:7e:fa:4d:
                    2b:f1:1a:82:33:89:64:ee:96:f3:16:34:49:6b:6e:
                    36:74:ed:55:22:8e:79:d9:3b:ec:7d:ba:4f:c6:97:
                    78:db:5c:7d:7c:ff:1a:7d:2e:15:d8:3e:bd:73:f4:
                    d3:8e:81:5e:32:ec:ab:6d:6c:9f:da:d1:10:e4:29:
                    50:70:38:60:af:dd:fc:04:8f:54:4c:ee:bb:8a:3f:
                    97:d1:80:9e:7a:0a:d0:35:cd:40:3c:55:4d:e3:5a:
                    c1:3b:97:f6:98:81:a1:c8:82:ac:3e:a1:2c:4c:e3:
                    a2:ae:c7:24:5d:b6:7d:01:ba:ea:e8:ef:98:14:52:
                    7e:ef:b9:cb:5f:ba:60:05:c9:ee:12:79:25:f7:0c:
                    a4:b0:3d:1e:18:e3:8e:c5:72:62:c2:30:96:7d:0e:
                    ab:e3:84:06:8d:82:c3:e6:54:16:76:56:f4:d5:26:
                    68:4e:af:68:05:e2:c1:60:ef:fb:46:9f:23:2a:fe:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:54:0F:E9:15:23:22:5D:97:29:91:6A:2A:39:05:3F:D6:1A:0E:7B
            X509v3 Authority Key Identifier:
                keyid:F1:E6:72:D1:C3:D7:AF:66:66:33:FF:B5:FC:C3:44:5E:93:C5:70:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BJqrt6RCHtySujTSUqinqVWGqH419kbuo3QXhddNeYs/0/F1E672D1C3D7AF666633FFB5FCC3445E93C570E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1E672D1C3D7AF666633FFB5FCC3445E93C570E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BJqrt6RCHtySujTSUqinqVWGqH419kbuo3QXhddNeYs/0/3137372e33392e3131322e302f32312d3231203d3e20323632343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:85:c3:e7:2b:58:57:e7:91:60:a6:43:de:da:be:d4:5b:1e:
         1c:3f:8e:47:38:ee:1d:9f:8c:56:59:56:b4:d3:12:f1:93:9b:
         d4:5a:f4:50:1e:e1:17:9e:39:93:90:5e:2d:57:5b:f8:86:d1:
         04:1d:7b:15:3a:fc:0c:9e:a0:f9:f8:d1:fe:f6:20:fb:d8:b7:
         3b:75:e3:7c:a0:08:ea:d2:2a:68:58:25:1b:a7:4a:a4:45:75:
         e2:6a:a1:cd:01:fd:a4:94:4b:a2:10:25:01:ae:0a:f0:0e:c6:
         a0:14:a9:68:0a:b1:6d:81:e8:24:5a:f1:49:8c:a9:3f:0f:25:
         eb:c9:f6:69:b1:90:43:e7:98:3b:46:93:24:f0:3f:43:98:9f:
         82:cf:2d:30:ba:fd:b4:ea:d0:f1:1b:13:ee:8c:6e:58:47:c2:
         3f:33:57:0c:56:b0:f5:f1:60:83:c0:ce:e7:c2:cd:f9:ad:23:
         3a:39:e3:39:2a:42:14:e8:6a:d6:b8:f2:5b:c6:be:a0:f6:65:
         7e:2b:28:02:4e:94:54:f4:f7:9c:9d:96:98:8a:20:2c:7b:b8:
         76:1a:80:29:7c:38:5e:22:79:84:6c:af:df:d4:9a:f9:77:ea:
         9b:3c:26:ec:d8:18:d4:3f:9f:c6:66:87:68:eb:91:84:80:ee:
         aa:9f:48:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org