Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137372e38362e302e302f32312d3234203d3e203238313436.roa
File:                     3137372e38362e302e302f32312d3234203d3e203238313436.roa (raw, json)
Hash identifier:          tZTNuSoRTK12vuGxyo5hdjcNxNeblSk01ECrxDlB8Co=
Subject key identifier:   80:8E:CB:FE:68:4A:05:D1:26:70:28:99:CF:F2:77:C1:93:D4:A2:78
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       5EAD69F6BC99C1047240F0717B25CF87D8E45CAD
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137372e38362e302e302f32312d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:51 +0000
ROA not before:           Wed 21 Dec 2022 17:11:51 +0000
ROA not after:            Wed 20 Dec 2023 17:16:51 +0000
asID:                     28146
IP address blocks:        177.86.0.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ad:69:f6:bc:99:c1:04:72:40:f0:71:7b:25:cf:87:d8:e4:5c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:51 2022 GMT
            Not After : Dec 20 17:16:51 2023 GMT
        Subject: CN=808ECBFE684A05D126702899CFF277C193D4A278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:54:fe:3b:31:d1:7f:29:39:00:7c:0a:03:7a:
                    25:0e:0e:99:bd:45:8d:c3:00:6a:ea:a2:e9:5a:26:
                    09:53:02:2b:0d:0c:1f:14:86:42:d6:d3:5a:2f:11:
                    63:f5:6a:cc:60:ef:62:02:77:48:34:e0:d3:cd:97:
                    23:f9:5b:43:0d:88:e6:61:56:e4:d5:13:34:96:00:
                    2b:18:87:5d:5c:46:35:dc:d2:cd:6e:5a:2b:4c:c8:
                    a2:7b:77:d4:bd:b8:37:08:52:2a:98:d1:17:f2:4d:
                    03:bf:3b:08:69:c9:05:d2:88:15:d8:d2:99:ad:0e:
                    ad:b2:85:d6:ba:c9:42:b5:4f:fd:42:f5:e2:85:2e:
                    74:27:69:48:3d:ad:35:cd:90:a4:92:50:db:01:2f:
                    d5:64:25:40:89:ec:e7:06:97:2d:54:8e:cc:a1:a2:
                    88:e6:dc:51:63:5a:40:da:86:6e:c1:73:87:5d:87:
                    49:1f:ee:36:4b:5a:07:e3:af:6c:5b:48:81:4f:c3:
                    fe:15:59:50:7f:8a:e9:9b:ea:e1:91:b8:38:0e:d0:
                    85:94:a9:26:f2:58:59:fd:63:1f:2b:0c:7d:56:bd:
                    46:fa:0b:77:af:41:3d:57:ae:5c:cb:92:0b:4c:e9:
                    56:34:3c:62:95:de:25:73:c3:58:a6:d4:89:33:fd:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8E:CB:FE:68:4A:05:D1:26:70:28:99:CF:F2:77:C1:93:D4:A2:78
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137372e38362e302e302f32312d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:9e:75:65:dc:5e:68:0a:40:1a:e1:e0:cb:2c:65:7b:b8:15:
         4a:4d:48:38:6b:6a:b2:fb:cc:0e:ef:48:df:76:de:7b:38:a6:
         19:5a:37:fc:66:62:32:c5:1a:3b:ab:34:b9:3a:38:6c:1c:2a:
         15:3a:6e:e6:cf:76:8d:88:ff:66:4b:94:1e:e4:9c:8b:a5:77:
         4c:9f:8e:ef:1c:b0:c6:9a:ae:c8:36:dd:bb:2d:38:50:59:d6:
         89:63:62:04:65:8f:c4:ae:6d:3f:71:d5:5b:b8:e6:02:da:b9:
         ec:2b:d6:11:e4:8f:fe:54:a7:57:76:eb:a0:cd:c5:a9:ac:90:
         8a:70:cb:69:c5:d7:e6:db:32:3d:4f:f1:48:6c:df:66:49:17:
         b7:4e:7b:1b:16:2a:85:42:01:5c:5f:30:7e:35:b2:ef:a1:31:
         c0:44:87:6e:bf:02:db:f0:61:4f:fc:d0:b5:d3:d2:25:8e:0f:
         ee:ab:28:09:49:45:4b:44:fc:8f:93:b3:6f:20:72:a0:6f:16:
         88:d5:2f:4e:81:0b:4a:55:4f:13:db:b0:66:92:9a:04:18:60:
         c0:47:36:63:8e:ee:7e:99:8e:ae:8a:6f:29:b8:fb:54:44:75:
         5a:61:50:3a:e4:00:32:6e:91:fc:40:38:f5:57:a2:70:ec:d1:
         3e:2f:8f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org