Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32322d3234203d3e20323633313331.roa
File:                     3137372e3132382e3134302e302f32322d3234203d3e20323633313331.roa (raw, json)
Hash identifier:          drlPkm1qoZdo1EXNyfiU2kxHf2zveSGgHaGAAVV9og4=
Subject key identifier:   94:53:F4:72:61:18:29:11:2A:DB:3C:B9:F4:4A:D0:EF:F6:DE:97:36
Certificate issuer:       /CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
Certificate serial:       7F35BB499D070471B6FDFFA780A604DF7B5276D5
Authority key identifier: C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32322d3234203d3e20323633313331.roa
Signing time:             Sat 29 Jul 2023 17:50:53 +0000
ROA not before:           Sat 29 Jul 2023 17:45:53 +0000
ROA not after:            Sat 27 Jul 2024 17:50:53 +0000
asID:                     263131
IP address blocks:        177.128.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:35:bb:49:9d:07:04:71:b6:fd:ff:a7:80:a6:04:df:7b:52:76:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
        Validity
            Not Before: Jul 29 17:45:53 2023 GMT
            Not After : Jul 27 17:50:53 2024 GMT
        Subject: CN=9453F472611829112ADB3CB9F44AD0EFF6DE9736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:c4:50:40:9a:b2:31:c2:5f:d4:26:3a:01:
                    d6:2c:39:70:83:91:db:61:cd:75:c5:b9:2c:96:fb:
                    4c:70:f6:24:b7:78:dd:3c:de:1a:81:eb:c6:64:f6:
                    fd:ee:4d:8c:26:12:35:8b:67:19:61:ab:4c:fb:36:
                    01:ce:ce:e6:be:6c:46:b4:eb:ab:53:f9:7a:ed:4e:
                    10:14:2e:7a:4a:69:05:ab:85:06:96:8c:bb:8f:b6:
                    cb:38:52:95:78:1d:bc:61:99:e3:2b:d4:65:27:4d:
                    03:07:3a:ab:fd:94:b5:74:e8:cb:56:d9:27:6a:8b:
                    4e:2a:8c:8e:6b:f4:1f:2f:81:ca:f5:0b:61:46:d7:
                    b1:9f:7d:97:8e:e3:fc:fc:e4:83:bc:01:8c:5e:89:
                    ff:6d:44:d3:b5:dc:5b:cf:3e:7a:ea:e1:0c:8b:88:
                    cc:26:83:ed:e9:4d:ef:77:f5:6b:2e:e2:25:48:f3:
                    51:02:df:47:91:c5:76:64:f5:ac:e9:ed:30:a8:81:
                    f4:0b:92:bc:d9:3d:ad:c6:9b:3e:7e:83:50:6a:33:
                    45:ff:6b:9c:d8:fa:5b:1f:57:61:e7:1a:26:99:fc:
                    96:49:96:f0:27:46:26:99:11:81:e0:63:f8:4e:0f:
                    be:08:6e:c1:71:de:25:67:96:ef:c8:03:f5:ec:2d:
                    e7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:53:F4:72:61:18:29:11:2A:DB:3C:B9:F4:4A:D0:EF:F6:DE:97:36
            X509v3 Authority Key Identifier:
                keyid:C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32322d3234203d3e20323633313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:74:71:9e:02:b5:6a:e9:df:a1:6f:09:f3:ed:48:7f:f9:41:
         ab:6f:02:74:11:91:e9:9f:eb:79:06:06:26:f5:06:f3:1a:e5:
         27:40:f3:4b:e0:45:95:d8:56:6a:32:6f:13:24:e4:56:ac:79:
         6e:3c:dd:c3:e3:84:98:fd:1c:f3:d8:4f:57:15:33:bb:5e:1e:
         d3:d9:2f:7c:4c:26:8d:3b:f5:29:ac:b1:03:5e:82:2e:bf:56:
         79:91:e7:21:cc:35:19:92:65:cc:7f:fc:53:3b:69:4d:c4:d5:
         df:b4:c2:de:ec:1a:23:a2:74:d0:d3:ff:84:d8:7f:47:81:cb:
         6b:3d:a1:86:3f:de:3c:19:2e:3f:8d:4e:de:96:5b:5a:82:b8:
         3e:c7:8e:37:b8:ac:12:4d:2e:0e:64:fa:dd:76:af:49:97:4f:
         6f:ce:93:e8:36:5a:1c:f3:2b:3d:87:96:a6:83:fb:09:91:61:
         df:df:3c:6b:6a:79:2f:d8:64:10:97:f2:33:64:a6:c6:39:83:
         ed:28:13:1d:40:2d:04:09:18:26:a9:91:cf:bc:9d:cf:82:44:
         ba:2c:6b:86:a5:cd:07:c3:63:1a:b9:a8:7e:de:60:13:29:64:
         60:5e:5e:6b:e5:1c:1f:9c:fe:f9:fa:eb:ec:ce:ec:20:29:79:
         3a:2b:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org