Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137372e38372e3233322e302f32332d3233203d3e203532353933.roa
File:                     3137372e38372e3233322e302f32332d3233203d3e203532353933.roa (raw, json)
Hash identifier:          Y4W95paPfS8cueYnzscedicZBfsa0UpgAuxt5fcRCsE=
Subject key identifier:   7F:A3:7A:43:FF:DD:36:10:6F:FB:0B:02:93:17:54:D1:0F:4D:D6:DC
Certificate issuer:       /CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
Certificate serial:       030BCAE58B94EF42615571895D09E9313BDD434A
Authority key identifier: 7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137372e38372e3233322e302f32332d3233203d3e203532353933.roa
Signing time:             Tue 19 Sep 2023 12:52:16 +0000
ROA not before:           Tue 19 Sep 2023 12:47:16 +0000
ROA not after:            Tue 17 Sep 2024 12:52:16 +0000
asID:                     52593
IP address blocks:        177.87.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0b:ca:e5:8b:94:ef:42:61:55:71:89:5d:09:e9:31:3b:dd:43:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C37FFCC1D615C16EF1298A3443587FBF6361EE6
        Validity
            Not Before: Sep 19 12:47:16 2023 GMT
            Not After : Sep 17 12:52:16 2024 GMT
        Subject: CN=7FA37A43FFDD36106FFB0B02931754D10F4DD6DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:8f:d5:9c:3f:0a:b6:2d:77:a0:2f:0e:48:
                    05:05:de:a9:73:ca:35:bf:01:20:1b:8f:36:de:46:
                    1c:e2:98:4c:16:6b:7f:90:b6:c5:d4:27:99:4d:cb:
                    09:ae:21:23:a2:b4:e3:3c:ce:6e:1e:a2:90:db:8b:
                    88:71:e0:46:91:5f:51:97:54:2a:03:41:d1:f3:f7:
                    15:7a:e8:89:f4:bb:33:84:d1:e7:35:13:a1:e5:7b:
                    09:2e:62:bc:ab:0a:4b:2c:1a:51:18:5e:98:02:56:
                    ab:93:9f:2e:f2:f5:84:6a:14:72:ac:74:7b:d5:a1:
                    25:cd:85:3c:25:f5:35:f1:af:11:44:0f:24:32:c1:
                    27:5e:fe:98:e8:ac:66:b0:f2:c9:9e:a6:af:d9:c7:
                    87:1f:44:1e:e1:a9:34:ef:d1:01:37:18:40:4a:3a:
                    de:06:e4:c8:19:09:57:24:9c:17:2b:40:bc:a2:ef:
                    b7:9a:8a:d2:ea:31:0f:13:52:86:8b:8f:ac:81:03:
                    ce:ab:1a:c4:d5:e4:ab:d2:5e:2f:b3:d0:3e:15:92:
                    72:ea:bb:69:57:75:e5:9e:97:ea:96:02:f5:b1:c8:
                    05:8e:7f:77:61:7b:75:3f:a4:f0:60:d3:c3:5d:39:
                    df:b7:8e:06:73:19:3f:92:d0:f3:e1:c6:07:1a:b0:
                    44:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A3:7A:43:FF:DD:36:10:6F:FB:0B:02:93:17:54:D1:0F:4D:D6:DC
            X509v3 Authority Key Identifier:
                keyid:7C:37:FF:CC:1D:61:5C:16:EF:12:98:A3:44:35:87:FB:F6:36:1E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C37FFCC1D615C16EF1298A3443587FBF6361EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/3137372e38372e3233322e302f32332d3233203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:1d:93:88:81:b1:8a:b1:27:4e:eb:f3:ec:c8:b1:b2:95:c9:
         8d:a8:46:2a:cb:4c:5a:9e:ef:9d:bc:ce:cc:04:03:f7:2e:ea:
         a2:c9:05:e2:a3:81:6b:31:d0:cf:95:58:8d:a6:12:51:d7:8c:
         26:3a:43:39:57:6e:32:b7:0a:30:78:7c:be:29:9b:63:d2:65:
         94:e5:88:d1:26:b5:3e:af:0e:2d:4b:e3:ba:e4:34:91:54:0b:
         9a:40:d4:17:04:eb:42:3a:58:d0:d1:65:80:be:a1:02:b2:59:
         31:ac:1f:19:48:b8:fd:0a:cc:b6:a1:89:ca:84:cc:34:ba:ba:
         7f:87:5e:97:2b:d4:b8:73:c7:fc:fe:4d:47:b8:13:5f:7b:51:
         2e:20:66:3b:e0:65:2a:50:6e:99:1a:3f:ae:55:cb:58:b7:1f:
         05:37:90:af:c8:b1:eb:3f:87:ab:f9:05:0c:4f:19:4f:d6:ad:
         75:99:9a:24:96:78:14:08:d4:ba:c6:63:80:d1:e7:55:ba:b9:
         9e:c1:60:d0:8d:13:7a:6b:be:fc:89:12:48:9f:d3:22:3e:92:
         b4:3c:4c:cf:8c:c1:af:dc:36:b4:a5:f8:13:e1:dc:9c:5e:1c:
         76:51:aa:22:81:07:41:e7:69:ad:87:70:f6:e9:2a:af:94:8c:
         ad:69:59:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org