Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137372e38372e3233322e302f32322d3232203d3e203532353933.roa
File:                     3137372e38372e3233322e302f32322d3232203d3e203532353933.roa (raw, json)
Hash identifier:          Drs+jv/XkYE7qFAL1HMiplWevlfrqCeGh2UHpcmx1dg=
Subject key identifier:   0B:AC:8B:65:C1:95:BF:C1:76:E3:12:09:F3:4B:FF:08:64:39:26:A4
Certificate issuer:       /CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
Certificate serial:       21EB31B9B06E2C44BA8BEE415F7CC2E2FC8D8A5C
Authority key identifier: 7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137372e38372e3233322e302f32322d3232203d3e203532353933.roa
Signing time:             Tue 19 Sep 2023 12:52:16 +0000
ROA not before:           Tue 19 Sep 2023 12:47:16 +0000
ROA not after:            Tue 17 Sep 2024 12:52:16 +0000
asID:                     52593
IP address blocks:        177.87.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:eb:31:b9:b0:6e:2c:44:ba:8b:ee:41:5f:7c:c2:e2:fc:8d:8a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
        Validity
            Not Before: Sep 19 12:47:16 2023 GMT
            Not After : Sep 17 12:52:16 2024 GMT
        Subject: CN=0BAC8B65C195BFC176E31209F34BFF08643926A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:dc:c2:81:57:6b:04:c8:4a:d3:6c:83:a4:
                    0a:07:b8:35:23:80:fa:73:df:ff:55:34:7e:a9:23:
                    9a:63:13:cf:96:54:f2:3c:5b:9d:39:6d:f2:98:bb:
                    ab:dc:b1:7b:3a:34:31:9d:e9:c8:b0:a7:71:bd:b7:
                    9b:32:40:c0:a8:ee:aa:8a:aa:6a:45:1d:a6:3b:ba:
                    26:38:6f:04:a8:e1:f6:0a:ca:d5:b2:6e:d0:bf:e7:
                    a4:35:b7:6a:fa:6f:fc:83:f4:21:1f:0c:d1:f7:f4:
                    16:ca:c7:2e:26:64:fe:27:79:50:ea:a9:40:28:fe:
                    27:7c:db:2d:b4:2c:fb:93:7a:27:17:7b:7a:ef:71:
                    57:26:99:74:80:45:32:25:ec:28:10:e3:e3:7c:a3:
                    69:f8:1c:44:5c:35:d7:8e:26:11:8c:cf:3b:32:4b:
                    f4:f1:82:12:0b:65:9c:67:65:99:20:93:6c:b7:ae:
                    f1:9e:b1:2a:ac:f6:ba:6a:48:a4:df:dd:92:2d:db:
                    c7:29:52:a3:0b:a2:00:76:32:fb:a7:6a:62:f2:d5:
                    86:cc:cb:88:1b:f6:5c:b4:35:bf:c7:37:7f:3d:a9:
                    a1:49:69:34:84:d5:23:01:e8:41:c2:71:51:d0:ae:
                    60:ab:b4:ab:61:36:a0:c5:5e:af:96:67:ee:c5:1c:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AC:8B:65:C1:95:BF:C1:76:E3:12:09:F3:4B:FF:08:64:39:26:A4
            X509v3 Authority Key Identifier:
                keyid:7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137372e38372e3233322e302f32322d3232203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:78:d4:b7:3c:1a:92:1c:e8:1d:67:3b:5f:4f:e6:87:a4:61:
         9a:5a:ca:d2:55:7a:e5:44:1d:42:42:46:25:33:18:02:39:6d:
         9c:1f:93:e8:f3:dc:49:ae:00:6d:dc:93:d3:7a:3c:90:4f:8a:
         34:c0:6f:d7:a9:e1:75:e6:92:fe:41:cb:d8:27:e1:1d:cd:87:
         6a:cf:32:46:29:0a:73:51:6c:de:0e:62:5b:f6:6d:c4:07:46:
         c5:d8:40:5b:39:f5:15:0e:b1:7f:5b:7d:f5:bd:bb:0f:6e:45:
         9a:78:7b:d3:4e:d8:18:06:59:70:82:ce:ca:5e:4d:96:45:c9:
         2b:38:fc:79:98:c0:f8:d1:77:99:4c:a6:b7:d0:f0:6e:72:ce:
         de:c0:a6:ec:51:5d:22:bd:69:e3:a8:1e:92:3e:ae:08:18:55:
         58:9e:a6:c9:f6:18:9f:bf:c5:02:f5:7b:ef:0f:ba:96:ba:40:
         73:bb:25:96:77:09:9a:c3:35:32:88:91:e3:a8:3a:82:dc:2b:
         56:55:c5:32:b4:50:c0:38:85:86:6e:08:8a:28:7b:3f:f3:b0:
         fa:72:22:30:c8:fb:8e:41:c5:b1:36:70:f0:50:63:ac:c8:27:
         b3:5a:cb:ce:cf:c0:89:df:9b:e9:d5:1b:7b:8a:87:44:8c:27:
         ac:73:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org