Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BXWDtWtwyu4z8cnJBT4hpn1yyh5peWhywJ3PLxuzU25/0/3137372e3232312e3139322e302f31392d3234203d3e203532363832.roa
File:                     3137372e3232312e3139322e302f31392d3234203d3e203532363832.roa (raw, json)
Hash identifier:          laUQm7BiZk37EesDbRrcEPxokH/uv5eYFilAzlp8eeo=
Subject key identifier:   23:58:52:B1:45:08:73:57:8D:07:3C:89:52:AD:6C:DD:C9:33:51:2E
Certificate issuer:       /CN=871DE338B0AD69AA6F0631338AE08DB27D7D8F6B
Certificate serial:       43B47AA0AB639D6093EA048A5831E642FB8F404A
Authority key identifier: 87:1D:E3:38:B0:AD:69:AA:6F:06:31:33:8A:E0:8D:B2:7D:7D:8F:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/871DE338B0AD69AA6F0631338AE08DB27D7D8F6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BXWDtWtwyu4z8cnJBT4hpn1yyh5peWhywJ3PLxuzU25/0/3137372e3232312e3139322e302f31392d3234203d3e203532363832.roa
Signing time:             Thu 11 Jan 2024 18:56:20 +0000
ROA not before:           Thu 11 Jan 2024 18:51:20 +0000
ROA not after:            Thu 09 Jan 2025 18:56:20 +0000
asID:                     52682
IP address blocks:        177.221.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b4:7a:a0:ab:63:9d:60:93:ea:04:8a:58:31:e6:42:fb:8f:40:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871DE338B0AD69AA6F0631338AE08DB27D7D8F6B
        Validity
            Not Before: Jan 11 18:51:20 2024 GMT
            Not After : Jan  9 18:56:20 2025 GMT
        Subject: CN=235852B1450873578D073C8952AD6CDDC933512E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:12:71:f1:06:53:75:2c:5f:b7:10:30:c2:7b:
                    e0:88:12:e4:83:49:75:d3:70:4a:f0:42:cf:ad:b3:
                    81:f3:e2:52:5d:c1:c7:63:d1:40:7b:21:07:d9:e5:
                    84:09:7a:e9:1d:b7:27:52:2a:63:44:ca:86:5c:33:
                    2b:8f:5c:6f:22:87:dc:30:bd:19:a5:27:9d:4c:c2:
                    5c:8d:07:02:c9:b6:d6:47:9a:9d:a5:b1:5b:90:7c:
                    c4:aa:bf:d9:85:7b:5d:3b:64:41:5b:b7:ce:7a:f4:
                    2c:1e:04:9c:c1:d2:d9:d4:c0:69:1d:f9:f4:b5:ed:
                    dd:15:67:e7:1d:1a:39:4f:85:bb:54:3d:11:be:01:
                    ba:5f:47:c9:d3:7c:ee:54:84:20:91:09:29:91:ab:
                    b2:20:22:72:7c:52:4c:e4:0f:57:dc:d4:d1:8f:ca:
                    a5:16:9f:fb:ef:40:08:ef:46:8a:29:2e:e3:86:e6:
                    37:32:79:98:ef:38:03:a8:ee:17:73:1f:55:64:31:
                    a6:d6:c2:5f:f3:bd:c3:27:bf:15:b3:b8:82:21:26:
                    91:8f:fe:ee:3a:fa:20:47:22:17:64:16:be:3c:b0:
                    86:57:17:ad:74:e5:e7:7e:6c:17:f8:e8:29:09:dd:
                    36:70:c4:4a:28:c3:e3:df:a6:3e:dc:89:a6:a9:2a:
                    5e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:58:52:B1:45:08:73:57:8D:07:3C:89:52:AD:6C:DD:C9:33:51:2E
            X509v3 Authority Key Identifier:
                keyid:87:1D:E3:38:B0:AD:69:AA:6F:06:31:33:8A:E0:8D:B2:7D:7D:8F:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BXWDtWtwyu4z8cnJBT4hpn1yyh5peWhywJ3PLxuzU25/0/871DE338B0AD69AA6F0631338AE08DB27D7D8F6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/871DE338B0AD69AA6F0631338AE08DB27D7D8F6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BXWDtWtwyu4z8cnJBT4hpn1yyh5peWhywJ3PLxuzU25/0/3137372e3232312e3139322e302f31392d3234203d3e203532363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b2:f3:65:ca:e7:35:83:c9:15:b7:22:38:21:2c:8f:51:1c:17:
         7b:22:87:cd:4f:42:fb:dc:29:16:9e:51:a6:0b:fa:d4:60:1a:
         49:53:bd:53:e5:b9:a2:60:57:b4:8f:9f:f1:ef:29:42:9b:29:
         b3:2f:7a:92:6c:fe:8c:38:c3:50:5c:f5:50:f3:31:9f:e9:f8:
         8b:bb:d7:0e:f9:83:fb:e8:99:42:b4:00:a0:6c:b2:c0:b9:ba:
         ba:99:e7:93:f1:04:5d:d0:8a:b8:f4:f2:d4:98:e3:bd:7a:f0:
         65:09:b2:3b:27:9d:04:9c:39:1a:90:a3:ab:5b:1d:fb:ee:99:
         18:f3:e4:f8:81:31:f4:02:3c:38:9b:80:a0:3f:55:54:d4:36:
         c5:96:6f:e4:63:dd:b8:b3:56:86:39:3f:a3:db:cc:8f:31:d6:
         dc:49:98:ea:02:50:b6:2e:41:a3:13:be:ae:5f:75:9a:ad:82:
         31:3a:77:a1:67:fb:1a:d2:43:60:63:81:cd:1f:22:34:67:73:
         d8:c6:e0:a6:f1:28:f3:16:8e:50:82:2e:6d:64:aa:29:33:b6:
         bb:89:01:8d:c8:8d:49:87:81:dc:f7:24:7b:57:bf:93:04:0f:
         9c:f6:13:0d:fd:d2:5c:d1:94:6f:cb:a0:ad:1e:44:15:2d:55:
         f1:76:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org