Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3137372e382e3232342e302f32302d3234203d3e203238313836.roa
File:                     3137372e382e3232342e302f32302d3234203d3e203238313836.roa (raw, json)
Hash identifier:          wctN+c4pC3Vzb4IjXzHE7DjZ8GQ6di9iDGsvukTAVAE=
Subject key identifier:   15:D8:AD:93:8A:15:FF:94:0E:51:0D:B4:A9:24:A9:BD:06:E6:C0:04
Certificate issuer:       /CN=89E9BA06D5A9468A2AFFB4B51EFB9780D4699056
Certificate serial:       6847C76882071C7E056CDB98814662827C3348F4
Authority key identifier: 89:E9:BA:06:D5:A9:46:8A:2A:FF:B4:B5:1E:FB:97:80:D4:69:90:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3137372e382e3232342e302f32302d3234203d3e203238313836.roa
Signing time:             Wed 22 Nov 2023 20:34:22 +0000
ROA not before:           Wed 22 Nov 2023 20:29:22 +0000
ROA not after:            Wed 20 Nov 2024 20:34:22 +0000
asID:                     28186
IP address blocks:        177.8.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:47:c7:68:82:07:1c:7e:05:6c:db:98:81:46:62:82:7c:33:48:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89E9BA06D5A9468A2AFFB4B51EFB9780D4699056
        Validity
            Not Before: Nov 22 20:29:22 2023 GMT
            Not After : Nov 20 20:34:22 2024 GMT
        Subject: CN=15D8AD938A15FF940E510DB4A924A9BD06E6C004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4f:30:8a:b2:e4:1f:71:75:6c:82:1f:d2:16:
                    72:81:a6:26:e5:3e:6f:f9:d8:ad:a3:78:0c:44:56:
                    e8:5c:8e:8c:8b:97:1a:29:f8:1e:39:b9:dc:86:bd:
                    52:6f:eb:38:56:0e:3f:83:ad:2d:9e:5a:fa:b0:05:
                    0d:03:6e:f6:93:98:69:3b:49:ee:a3:fc:b2:7b:fe:
                    ac:c9:84:fd:f7:76:78:e3:7d:49:6d:96:39:ad:d6:
                    c1:5b:29:aa:17:8e:76:67:9b:30:98:64:57:e0:8b:
                    f9:c9:c1:25:bc:2f:41:c4:f2:b2:27:6c:ec:0e:94:
                    0b:ac:62:ae:0e:69:32:b7:74:08:d3:a7:ac:33:de:
                    e4:86:50:db:95:e1:b8:0e:ad:60:7f:e6:fe:02:f0:
                    0d:54:d8:26:75:cf:e1:d8:af:c3:6c:eb:c6:c0:e6:
                    b7:98:04:dc:f3:f1:5a:7f:c1:20:bd:98:fd:1e:1d:
                    04:55:a1:37:67:cf:73:09:91:a4:de:ec:d0:55:d7:
                    fc:d8:37:b7:f6:43:9d:ef:c6:9c:14:45:0d:11:c7:
                    09:8f:52:5b:f7:f6:37:34:c0:fe:19:46:4a:67:99:
                    9e:c0:de:bd:21:e9:6c:5d:e8:c5:e9:39:27:01:7c:
                    b4:d0:a3:c5:cf:de:f0:ac:5a:e8:aa:91:4a:2e:20:
                    6f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D8:AD:93:8A:15:FF:94:0E:51:0D:B4:A9:24:A9:BD:06:E6:C0:04
            X509v3 Authority Key Identifier:
                keyid:89:E9:BA:06:D5:A9:46:8A:2A:FF:B4:B5:1E:FB:97:80:D4:69:90:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89E9BA06D5A9468A2AFFB4B51EFB9780D4699056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3137372e382e3232342e302f32302d3234203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:2e:d4:3c:95:6f:9f:8a:b8:5f:42:f2:f7:ad:59:95:43:73:
         e9:b1:19:96:41:dc:97:19:1c:28:33:73:92:4d:a4:66:3f:df:
         b9:90:6a:8b:67:6a:e4:d9:c7:49:f3:cb:c0:01:d1:5b:8e:d5:
         28:4c:9b:94:3a:7b:df:3d:fb:e8:8b:d7:8a:14:57:c4:f4:58:
         51:e4:cd:dc:b7:32:bd:95:ca:c7:47:18:ae:7d:a0:f8:8e:67:
         ec:16:d4:c8:c4:dd:50:43:b0:29:25:89:58:76:58:57:a9:c0:
         1d:44:23:29:3f:6d:63:50:58:a8:03:9b:76:42:b4:b3:4b:4b:
         95:32:b2:f0:c0:b2:05:9a:b6:4b:16:c9:7c:8a:fc:db:bf:31:
         62:97:28:67:9e:4a:43:60:2e:0a:01:d5:c5:24:a4:27:04:24:
         4a:fd:51:ea:a5:92:fa:f5:98:26:1c:cd:9a:00:44:da:c5:d0:
         4c:ee:54:3d:2b:ef:e0:3b:05:d7:4b:17:31:47:e9:b8:c8:05:
         2e:a5:82:de:95:bc:3c:f3:30:b3:74:c7:f9:e3:5c:30:da:b2:
         28:42:1b:d6:58:58:8b:22:ac:91:24:ab:59:6b:95:62:86:d2:
         3c:fa:98:33:33:bf:11:bd:65:b4:75:2e:1c:b9:8d:ed:e7:10:
         10:fe:8a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org