Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/3137372e3232312e3135302e302f32342d3234203d3e20323730373432.roa
File:                     3137372e3232312e3135302e302f32342d3234203d3e20323730373432.roa (raw, json)
Hash identifier:          SRKj6ZjFS0SF056d8h2UdmnMk8X1qEaUJLP1vt9EzWY=
Subject key identifier:   E7:03:A8:7C:CF:2B:66:BA:B7:3F:0D:20:FA:1B:19:C5:AD:F9:74:17
Certificate issuer:       /CN=8BDC3395A20790E2B58712C45CC172352B05BB02
Certificate serial:       0F9BF9B62ADB02EB18A58671688D7BD3F8E91CAE
Authority key identifier: 8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDC3395A20790E2B58712C45CC172352B05BB02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/3137372e3232312e3135302e302f32342d3234203d3e20323730373432.roa
Signing time:             Thu 23 Feb 2023 04:02:29 +0000
ROA not before:           Thu 23 Feb 2023 03:57:29 +0000
ROA not after:            Thu 22 Feb 2024 04:02:29 +0000
asID:                     270742
IP address blocks:        177.221.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9b:f9:b6:2a:db:02:eb:18:a5:86:71:68:8d:7b:d3:f8:e9:1c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BDC3395A20790E2B58712C45CC172352B05BB02
        Validity
            Not Before: Feb 23 03:57:29 2023 GMT
            Not After : Feb 22 04:02:29 2024 GMT
        Subject: CN=E703A87CCF2B66BAB73F0D20FA1B19C5ADF97417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:69:e5:94:51:4a:07:a6:7a:a8:0f:6b:c5:
                    d3:e0:62:60:f9:9b:c6:ce:72:71:7a:c2:74:2e:41:
                    30:f6:d6:6f:27:5f:56:37:25:66:2b:f1:ab:91:c5:
                    8d:9c:43:70:5c:e0:06:cb:07:72:0f:91:dd:25:96:
                    20:70:e1:ce:47:60:7b:a5:7f:b4:31:65:ea:6c:b0:
                    f3:bc:63:52:3c:34:66:00:b5:f4:70:a9:49:4b:dc:
                    29:ad:eb:a1:64:7b:82:2b:1b:c0:09:62:e2:27:27:
                    5c:1f:11:2c:1e:e0:55:39:21:b9:0d:f1:52:50:3c:
                    11:e9:69:3a:93:a5:ee:8c:9e:44:d0:fc:91:ae:c2:
                    fd:16:c3:b0:18:1d:a4:6a:fa:61:af:62:cc:6a:96:
                    2c:4d:af:c1:91:c7:c8:c1:69:e0:e4:03:ea:93:61:
                    3d:d7:8f:e1:af:60:79:b4:6f:1a:61:45:24:9b:44:
                    5f:ed:96:a6:ce:82:57:63:63:40:9f:40:ce:c2:24:
                    88:58:dc:28:c0:3f:80:e0:aa:43:09:3d:76:6e:77:
                    67:61:94:a0:11:53:5f:d7:5a:a1:7f:89:48:8f:a0:
                    57:23:62:61:63:71:e5:28:fc:21:f1:44:50:0d:ad:
                    2d:dc:5a:5a:57:ae:7d:7f:18:da:42:8f:ad:2f:c7:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:03:A8:7C:CF:2B:66:BA:B7:3F:0D:20:FA:1B:19:C5:AD:F9:74:17
            X509v3 Authority Key Identifier:
                keyid:8B:DC:33:95:A2:07:90:E2:B5:87:12:C4:5C:C1:72:35:2B:05:BB:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/8BDC3395A20790E2B58712C45CC172352B05BB02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDC3395A20790E2B58712C45CC172352B05BB02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZkqGNN3aQi2tSj9i2zJVXtd556QKswFWacWToPfgkZk/0/3137372e3232312e3135302e302f32342d3234203d3e20323730373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:05:4b:14:94:b9:70:21:7d:49:6e:60:e3:a9:ac:73:e9:2d:
         b8:4b:cf:a7:87:44:49:d9:c9:27:50:df:d6:dc:63:bf:85:6b:
         07:4c:94:61:c9:7d:d7:17:95:13:f5:e8:26:03:f4:86:ce:0f:
         97:60:5e:e4:8d:1c:41:7a:9b:38:b9:7c:32:06:98:f8:4b:d1:
         f7:63:33:14:06:c4:f6:cd:49:1b:53:71:8f:66:70:ba:74:1e:
         54:9d:5c:9a:ad:b3:14:d2:2f:42:fe:f3:b1:d9:82:f8:00:4b:
         8f:34:7b:68:6d:c7:ab:ed:c1:1a:e7:20:db:9d:c4:bb:39:b7:
         cf:17:c7:c8:9c:8c:b2:97:5b:cd:e7:f6:b3:d8:13:71:77:e1:
         76:55:1f:82:0e:14:b2:a3:a5:4a:2c:bd:23:d6:63:68:3f:92:
         04:19:28:a0:7d:ac:fe:f0:5b:6c:2c:e9:2d:3b:b1:c2:63:c6:
         46:2c:c8:38:29:1c:5c:9f:6f:e0:6f:21:53:cc:8e:92:06:69:
         eb:0c:cb:34:f0:d1:df:3a:2a:75:e8:9c:9b:ab:72:ae:b2:f3:
         22:46:b5:c3:19:bd:c2:e6:c4:34:12:37:4e:39:dc:41:05:61:
         a5:25:94:6c:2f:19:c8:8d:a1:ee:4e:a7:8a:53:03:d7:21:2c:
         d7:33:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org