Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/3137372e31302e3230322e302f32332d3233203d3e20323633303235.roa
File:                     3137372e31302e3230322e302f32332d3233203d3e20323633303235.roa (raw, json)
Hash identifier:          fZ94F43JZwpAi8FLM5xtqlg0yQkZdhbbWPXeX9AYxFk=
Subject key identifier:   A8:D2:54:A1:31:DB:65:81:4A:42:CF:0F:4C:8C:07:4D:3C:12:43:78
Certificate issuer:       /CN=BE78E81D49E7625AB24753E446C34EB55D3199D2
Certificate serial:       03210F1F6705A5AF1067C47717DBC06D3C57FEB7
Authority key identifier: BE:78:E8:1D:49:E7:62:5A:B2:47:53:E4:46:C3:4E:B5:5D:31:99:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE78E81D49E7625AB24753E446C34EB55D3199D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/3137372e31302e3230322e302f32332d3233203d3e20323633303235.roa
Signing time:             Fri 27 Oct 2023 18:13:34 +0000
ROA not before:           Fri 27 Oct 2023 18:08:34 +0000
ROA not after:            Fri 25 Oct 2024 18:13:34 +0000
asID:                     263025
IP address blocks:        177.10.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:21:0f:1f:67:05:a5:af:10:67:c4:77:17:db:c0:6d:3c:57:fe:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE78E81D49E7625AB24753E446C34EB55D3199D2
        Validity
            Not Before: Oct 27 18:08:34 2023 GMT
            Not After : Oct 25 18:13:34 2024 GMT
        Subject: CN=A8D254A131DB65814A42CF0F4C8C074D3C124378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:43:c9:aa:37:87:46:7b:0b:45:b3:61:85:
                    f8:40:9e:da:6b:f6:ce:fa:2b:ff:97:6c:8d:34:92:
                    ab:88:13:a6:95:2e:e9:73:b7:45:63:42:e0:80:e6:
                    6e:cc:20:b9:00:71:1d:0b:b0:05:1b:3e:25:24:4a:
                    32:ec:76:cd:f5:ed:0b:be:96:a3:db:74:c0:df:7f:
                    db:7a:6c:27:b0:d2:5a:c1:4e:6e:dd:84:eb:39:1e:
                    6b:6c:01:dc:5b:64:f5:89:53:29:5d:b4:8b:14:31:
                    eb:04:81:74:54:50:ee:cb:95:45:91:9d:ea:aa:45:
                    e4:45:e2:40:18:c2:78:f8:88:fb:ac:7a:fa:63:86:
                    e8:d1:62:fc:b5:45:6b:c2:23:28:55:3d:2e:e5:51:
                    22:c2:68:22:e0:39:08:e8:fa:53:6d:7f:b4:0e:07:
                    c3:55:8c:c6:2c:ea:ec:29:04:17:4a:e6:27:6c:ff:
                    19:37:7c:9a:f9:fd:49:37:f2:88:b3:d4:91:dd:1f:
                    e5:99:c4:90:07:ff:e3:b0:04:d4:2d:cf:5f:08:e5:
                    d4:cb:77:2e:0e:58:d2:5d:a0:ad:b7:f1:cf:fe:0d:
                    f4:23:31:7e:34:7e:ec:a7:3c:c4:66:4a:f6:6e:9d:
                    de:9b:df:67:e4:2a:d9:49:c6:36:59:2c:f7:6b:17:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D2:54:A1:31:DB:65:81:4A:42:CF:0F:4C:8C:07:4D:3C:12:43:78
            X509v3 Authority Key Identifier:
                keyid:BE:78:E8:1D:49:E7:62:5A:B2:47:53:E4:46:C3:4E:B5:5D:31:99:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/BE78E81D49E7625AB24753E446C34EB55D3199D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE78E81D49E7625AB24753E446C34EB55D3199D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uoNCwCJBkPHKu2SyiY2fw6HLn8ts41xw2WTiaSpDrBJ/0/3137372e31302e3230322e302f32332d3233203d3e20323633303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:37:4a:cb:05:b0:f2:9f:b6:76:8f:e1:fa:86:dd:54:f7:2c:
         f5:ce:5f:e1:e6:57:d5:2f:19:49:48:36:a0:b2:d2:24:17:0a:
         b9:3d:18:35:7f:8f:f5:89:76:0e:6b:aa:55:28:29:b8:8a:dd:
         bf:cd:ca:8f:7c:50:64:40:11:e2:59:5f:2b:f6:39:40:ba:06:
         9e:cc:a6:19:3d:dd:e6:ce:40:18:a3:ff:e9:68:f0:82:6f:fa:
         ae:c6:32:ce:ae:83:dd:4c:84:30:95:d5:e1:0f:61:26:fe:87:
         36:1b:f3:3b:ee:ed:96:80:98:d4:66:ee:4f:a0:5d:6d:7e:2f:
         71:ba:e7:ed:ae:2b:90:79:55:ca:ab:f2:77:fe:af:6e:f3:9f:
         bd:45:ac:a3:1d:1f:a7:05:7f:dc:fc:68:7b:fa:ce:52:78:12:
         c7:22:44:ef:f0:c8:a0:e2:3d:7b:a2:82:54:36:fc:c3:8c:03:
         f8:fb:c0:e5:1e:8a:26:95:30:40:79:b9:f0:3a:08:89:b4:85:
         9f:92:01:f1:51:02:f0:16:1e:42:cc:97:cf:8f:14:89:82:7b:
         6b:72:bc:ce:6c:d1:c9:dc:16:d2:81:1d:f9:ec:c8:a0:1f:cb:
         d8:99:07:d1:68:14:b9:95:89:0e:7d:d3:02:98:90:1b:e3:5b:
         cb:0f:11:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org