Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32342d3332203d3e20323633313331.roa
File:                     3137372e3132382e3134302e302f32342d3332203d3e20323633313331.roa (raw, json)
Hash identifier:          SYkd4x7a0WmgbC6vY+9v1z7aVrEryrs6ACAc2et+W5A=
Subject key identifier:   3E:AA:91:FC:BE:5D:5C:04:DF:8C:2C:5D:91:6A:30:77:80:1A:AC:EE
Certificate issuer:       /CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
Certificate serial:       328A9C4861A26D07430255D1F3F37C43D2FEA732
Authority key identifier: C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32342d3332203d3e20323633313331.roa
Signing time:             Fri 28 Jul 2023 13:10:04 +0000
ROA not before:           Fri 28 Jul 2023 13:05:04 +0000
ROA not after:            Fri 26 Jul 2024 13:10:04 +0000
asID:                     263131
IP address blocks:        177.128.140.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8a:9c:48:61:a2:6d:07:43:02:55:d1:f3:f3:7c:43:d2:fe:a7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
        Validity
            Not Before: Jul 28 13:05:04 2023 GMT
            Not After : Jul 26 13:10:04 2024 GMT
        Subject: CN=3EAA91FCBE5D5C04DF8C2C5D916A3077801AACEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:6b:02:49:00:44:fc:b8:d6:ad:cc:e5:14:
                    8c:9a:11:03:b8:b7:df:0b:23:66:83:51:ca:e5:7a:
                    85:b1:fe:5a:38:e3:fd:4c:ed:78:bf:28:fb:e2:06:
                    4f:1c:e4:93:6b:a1:5e:c2:e4:45:39:83:1d:ee:b7:
                    85:68:19:c7:c9:e1:77:99:a1:49:7a:65:aa:42:6f:
                    d9:7f:45:f4:f6:dd:47:a1:02:aa:09:88:3b:1b:c4:
                    37:34:92:16:96:96:07:23:3b:a1:ef:9c:25:9d:93:
                    d5:ca:8d:13:61:0a:2c:e2:41:32:92:2a:07:52:b6:
                    ee:a1:08:b9:e7:e3:fe:8a:79:02:bb:82:bb:f6:69:
                    8f:05:4c:b6:e1:40:fb:29:a4:5d:91:76:e1:90:5d:
                    8e:c1:0a:c7:03:fe:b7:c6:de:cc:7e:e7:92:2a:61:
                    d2:35:b3:61:27:86:1d:04:45:e6:47:65:99:83:cd:
                    8e:f6:c9:c6:5a:6c:d9:b4:59:c3:22:50:83:f0:bd:
                    3f:da:ac:1a:19:c9:40:a7:60:28:8a:6a:5e:f5:b6:
                    50:ab:08:32:e6:90:63:db:da:6c:e2:d1:16:76:e4:
                    e9:0d:64:c0:09:a9:30:7d:68:0b:01:1d:53:e8:19:
                    4b:e7:61:0c:c8:2f:39:57:8c:e1:3f:33:ee:80:6b:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AA:91:FC:BE:5D:5C:04:DF:8C:2C:5D:91:6A:30:77:80:1A:AC:EE
            X509v3 Authority Key Identifier:
                keyid:C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32342d3332203d3e20323633313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:df:33:2b:53:cc:44:a3:43:e0:ad:d0:5b:65:b2:cf:ac:48:
         20:8c:01:c1:51:d2:85:f5:da:77:cc:60:e4:a6:d1:68:ce:83:
         a3:56:08:0c:fd:3e:89:f6:eb:de:52:5a:1c:91:42:65:1a:98:
         b3:96:49:05:19:c8:94:ad:ff:bb:4b:f9:90:9e:21:46:96:39:
         d5:38:35:14:bc:cd:f1:7a:ae:ae:7d:07:9c:95:f8:75:fb:0f:
         d6:7f:01:70:35:f9:eb:4a:cd:dc:65:1f:3c:57:57:ad:e2:a9:
         06:61:e0:3d:a1:77:6e:a2:ec:97:d5:36:bc:c7:93:a8:29:f3:
         44:0d:3f:5e:ed:8f:ee:90:41:69:c4:79:d1:ba:e2:64:3a:9a:
         7a:0f:0f:d0:7d:17:27:56:e3:d7:c2:ad:8e:c9:be:80:31:89:
         6d:f6:82:0a:43:1e:d3:cb:34:35:b3:8b:77:a3:b3:71:14:3d:
         b4:f5:88:d9:b3:1b:e0:f8:76:bb:3b:cf:5c:93:72:83:3c:a7:
         aa:16:d4:00:43:d4:19:ad:36:59:57:94:b6:84:48:64:56:f2:
         56:51:fc:8d:3e:9c:60:b0:8d:cb:bb:4a:70:82:10:89:f2:1b:
         34:4b:ff:16:ad:7d:f6:80:4f:91:bf:8b:62:12:6a:61:72:cf:
         8a:ec:76:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org