Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134312e302f32342d3234203d3e20323633313331.roa
File:                     3137372e3132382e3134312e302f32342d3234203d3e20323633313331.roa (raw, json)
Hash identifier:          7sDXMhQ63loRT9ow8D4pjIX1jU0XtSpvncNpvslJPzk=
Subject key identifier:   89:9B:AE:E5:41:C5:DF:86:30:08:72:0E:A2:3C:6A:95:37:31:83:48
Certificate issuer:       /CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
Certificate serial:       4466ED734EDC1847CA3AC8C923AF5AD96E386116
Authority key identifier: C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134312e302f32342d3234203d3e20323633313331.roa
Signing time:             Tue 25 Jul 2023 20:06:48 +0000
ROA not before:           Tue 25 Jul 2023 20:01:48 +0000
ROA not after:            Tue 23 Jul 2024 20:06:48 +0000
asID:                     263131
IP address blocks:        177.128.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:66:ed:73:4e:dc:18:47:ca:3a:c8:c9:23:af:5a:d9:6e:38:61:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
        Validity
            Not Before: Jul 25 20:01:48 2023 GMT
            Not After : Jul 23 20:06:48 2024 GMT
        Subject: CN=899BAEE541C5DF863008720EA23C6A9537318348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:46:57:48:83:65:45:e8:d6:ba:9d:81:f1:
                    9f:b2:4e:3e:6f:d8:1b:88:87:bc:fd:fe:3e:d1:d3:
                    dd:20:ed:1b:f7:21:0a:cf:67:6c:9a:1c:2f:dd:3c:
                    21:2a:76:9b:7b:19:4b:96:22:70:2b:0c:ad:06:c3:
                    cd:c4:db:4b:84:f4:59:fa:f4:62:f0:5c:53:23:18:
                    2f:69:41:66:ed:92:a5:22:71:45:67:76:9a:14:77:
                    de:3f:5a:31:77:36:21:e1:52:4c:5f:c1:12:a9:93:
                    82:8a:26:cb:dc:be:28:e8:f3:f7:53:c7:d5:13:28:
                    98:18:a5:27:77:d1:2f:3f:60:47:93:27:b0:7f:af:
                    11:96:ad:ad:b1:8b:4d:c5:2f:29:e8:4e:f3:54:c5:
                    eb:08:2e:4d:07:0c:af:8d:86:c1:85:bf:bb:39:77:
                    0e:6e:29:b1:48:54:f6:62:3c:43:3a:3e:ab:78:3d:
                    2a:04:4c:c1:d0:1e:e1:63:92:1f:21:91:f9:ec:83:
                    55:9b:d4:ca:2a:94:b5:2a:2b:32:c1:20:8d:61:85:
                    c6:a2:5d:33:51:19:96:8b:c4:23:39:0d:a4:3f:b5:
                    6a:ac:70:45:84:f7:95:8c:81:26:2f:0d:ce:1f:62:
                    93:d5:cd:0b:c3:42:61:ac:62:f8:44:ab:a1:d5:73:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9B:AE:E5:41:C5:DF:86:30:08:72:0E:A2:3C:6A:95:37:31:83:48
            X509v3 Authority Key Identifier:
                keyid:C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134312e302f32342d3234203d3e20323633313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:1c:48:54:e9:d2:d2:41:73:07:f1:17:c8:48:65:e2:56:80:
         8e:89:85:b5:31:69:9a:67:40:26:0f:0f:c7:98:ab:20:13:f4:
         d6:cc:21:0d:3f:63:68:4f:4a:04:47:cf:77:1d:a9:21:50:bd:
         23:cd:9a:31:17:ed:e8:ce:e6:09:4f:e8:73:f4:de:95:6e:46:
         29:00:cc:90:da:8b:9b:e7:16:d9:d1:df:df:f7:c0:5d:26:20:
         45:c9:4b:a6:5c:a1:1e:7f:bb:bd:0b:4f:e1:f0:93:4c:fe:17:
         00:31:44:f5:d1:00:21:b0:66:94:2b:15:4e:68:16:bc:26:87:
         92:79:42:79:63:e2:c9:d6:02:d7:ee:2b:be:c4:f8:2a:ba:27:
         ca:e0:bf:9b:c5:0d:f6:27:4d:3d:69:d3:80:4e:49:aa:01:2e:
         6e:b4:3e:58:d1:35:c1:3e:3e:30:46:e4:fc:eb:95:bd:cb:d4:
         ac:60:31:5e:d7:de:c8:b7:0b:ed:1c:a2:ce:c8:68:66:af:9a:
         3c:9e:5e:8c:ba:a5:9d:06:21:ab:09:1b:2b:60:17:e4:e2:56:
         84:b1:e6:5b:cf:3e:5e:f5:98:2f:12:ba:a8:0b:fd:36:15:7b:
         c0:92:06:06:d8:06:e8:5d:cd:10:02:88:ea:51:94:20:9e:07:
         81:aa:d5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org