Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32342d3234203d3e20323633313331.roa
File:                     3137372e3132382e3134302e302f32342d3234203d3e20323633313331.roa (raw, json)
Hash identifier:          xQ9w803eDdKS55xJS3GeC9BbDSindKCX4j0xiZQG5Sk=
Subject key identifier:   3E:13:E6:39:0C:CF:38:C7:F6:91:71:0E:98:34:D6:83:B6:77:02:91
Certificate issuer:       /CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
Certificate serial:       40A0F9C5BD2E4D14491CF7306E02EF4E176F3D7B
Authority key identifier: C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32342d3234203d3e20323633313331.roa
Signing time:             Tue 25 Jul 2023 20:06:48 +0000
ROA not before:           Tue 25 Jul 2023 20:01:48 +0000
ROA not after:            Tue 23 Jul 2024 20:06:48 +0000
asID:                     263131
IP address blocks:        177.128.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a0:f9:c5:bd:2e:4d:14:49:1c:f7:30:6e:02:ef:4e:17:6f:3d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
        Validity
            Not Before: Jul 25 20:01:48 2023 GMT
            Not After : Jul 23 20:06:48 2024 GMT
        Subject: CN=3E13E6390CCF38C7F691710E9834D683B6770291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ce:29:10:f7:61:1d:41:c7:e5:41:0d:5a:bc:
                    f3:91:1d:54:be:d7:12:d1:77:1a:ff:91:0e:d1:f3:
                    64:2c:33:a1:ff:30:59:12:9c:5e:97:b7:82:1c:13:
                    30:56:79:27:07:8f:ed:54:71:10:4b:35:96:33:74:
                    ee:a6:2a:a7:09:7e:5e:2d:a3:c9:1d:83:aa:ac:11:
                    7b:b8:8f:0f:f4:d8:f4:c7:6d:c0:7b:58:3a:99:42:
                    ea:d2:01:f7:ef:16:80:b4:ca:1b:a3:98:6a:41:59:
                    ad:3c:71:0f:8d:07:74:5e:9a:86:3c:77:a5:00:6e:
                    a7:3c:64:6f:5e:42:0d:65:dd:a4:92:c5:22:7f:9d:
                    b6:2a:6c:ac:c6:7c:fd:a9:ae:59:36:87:db:f6:aa:
                    e6:7f:fb:89:96:5b:b5:ec:d8:db:8f:2c:c6:c1:a5:
                    dc:47:3b:96:cc:97:f3:66:2c:b4:db:75:8b:aa:6e:
                    1f:47:ab:1f:f2:cd:8a:7f:cf:49:f0:9e:88:cb:d0:
                    6d:d8:0d:1d:3c:00:0f:ba:a0:3f:5b:bc:3d:53:7c:
                    f9:73:ae:23:f3:c3:c6:ca:62:55:76:31:21:60:cb:
                    b2:c1:50:c8:c6:30:7c:b7:dc:09:04:c0:b5:c5:68:
                    bb:75:9b:67:7e:18:cb:df:5b:96:b3:1d:6d:a7:7d:
                    32:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:13:E6:39:0C:CF:38:C7:F6:91:71:0E:98:34:D6:83:B6:77:02:91
            X509v3 Authority Key Identifier:
                keyid:C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32342d3234203d3e20323633313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:d3:1c:02:2c:30:fd:6e:6a:ce:99:48:71:84:c2:1a:f1:2a:
         c0:c4:77:04:04:79:d8:71:45:93:95:07:3d:d4:b5:f6:47:4a:
         a8:5a:46:fa:f0:8b:28:85:f9:b0:7a:04:b6:98:74:ed:48:eb:
         63:d3:25:58:38:de:c5:65:b4:9d:9b:1e:8c:bb:4d:07:b5:1a:
         b0:13:5b:f2:ef:b6:89:24:37:2d:9f:13:b0:b3:cc:db:a6:9f:
         c5:bb:98:d9:2e:9c:f8:57:0b:ab:83:d0:fc:1e:86:fe:d8:d8:
         79:e3:77:bf:ac:a0:14:c8:89:a5:48:7c:a4:41:73:08:6c:e7:
         82:80:e1:0d:74:0c:bc:38:1a:2d:60:70:09:9d:f7:6f:7f:c3:
         9f:35:eb:6a:ec:74:cb:48:94:88:51:4f:17:a3:e4:79:61:50:
         2e:11:37:a1:bc:b8:50:1f:fe:f1:44:b1:21:38:ce:86:e6:4f:
         dd:63:09:e0:49:f1:c1:b9:1a:57:13:fa:d4:50:70:4f:f5:df:
         7c:c1:aa:b8:e7:b0:a1:c2:80:c9:8a:06:a9:a6:99:7b:7a:a0:
         4f:d0:0e:03:9a:99:c9:4d:3f:72:19:58:7e:a8:4c:e5:d6:7b:
         3a:ff:3b:50:2e:b0:8f:4a:dc:9e:7d:c7:bc:57:8f:92:cc:54:
         12:30:28:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org