Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134312e302f32342d3332203d3e20323633313331.roa
File:                     3137372e3132382e3134312e302f32342d3332203d3e20323633313331.roa (raw, json)
Hash identifier:          z5diwKzDhH2Oy9JRDK2rNUzqE9d04dm7cmkYRADyFbs=
Subject key identifier:   60:F0:BF:29:2E:48:7A:9D:61:C9:95:12:A9:2A:B6:D4:6F:09:42:16
Certificate issuer:       /CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
Certificate serial:       3643043056150532292BD8EFEFB9970D6E1AC650
Authority key identifier: C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134312e302f32342d3332203d3e20323633313331.roa
Signing time:             Fri 28 Jul 2023 13:10:29 +0000
ROA not before:           Fri 28 Jul 2023 13:05:29 +0000
ROA not after:            Fri 26 Jul 2024 13:10:29 +0000
asID:                     263131
IP address blocks:        177.128.141.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:43:04:30:56:15:05:32:29:2b:d8:ef:ef:b9:97:0d:6e:1a:c6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
        Validity
            Not Before: Jul 28 13:05:29 2023 GMT
            Not After : Jul 26 13:10:29 2024 GMT
        Subject: CN=60F0BF292E487A9D61C99512A92AB6D46F094216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:05:36:2f:54:bb:73:05:ec:c3:3c:c3:29:
                    68:b2:91:13:5c:bc:f7:02:26:6c:02:9a:40:9f:af:
                    d1:9b:be:43:2b:f8:ed:02:d7:d0:ec:17:ac:ad:da:
                    f4:2f:c6:85:29:04:c4:8d:63:da:b4:65:b7:c9:1a:
                    fc:54:ee:96:56:0d:88:df:47:83:82:f7:7c:3e:a6:
                    2e:6a:19:e8:21:4c:3e:ae:c1:7d:b3:03:50:16:ec:
                    73:03:1f:b9:6c:bd:ff:6b:63:1a:4c:e5:10:ba:c0:
                    79:6f:21:70:aa:6b:70:8f:50:90:4a:de:48:4c:b9:
                    0f:26:20:5d:65:42:2f:61:75:22:d6:13:e6:20:22:
                    fb:6b:e8:9f:a2:3f:de:1e:7c:90:ad:37:ac:d1:bd:
                    3d:88:94:c5:e7:8b:ff:c0:eb:5a:0d:9c:15:5c:de:
                    75:56:28:32:83:d1:28:97:bc:6e:2e:ed:4a:fe:23:
                    d0:43:b2:09:fe:f2:63:5f:d8:fd:3b:1d:ef:3d:7d:
                    6a:97:86:d1:f8:a5:41:25:f0:09:80:31:92:89:1f:
                    45:d2:f4:80:b1:00:1e:fa:88:ea:3d:8b:22:ec:6a:
                    ce:b5:67:3f:25:bd:f1:97:d8:15:6c:57:48:70:d3:
                    4a:ec:dc:39:fd:53:5f:e2:53:05:11:94:1e:69:27:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F0:BF:29:2E:48:7A:9D:61:C9:95:12:A9:2A:B6:D4:6F:09:42:16
            X509v3 Authority Key Identifier:
                keyid:C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134312e302f32342d3332203d3e20323633313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:59:d9:11:ef:48:8b:0d:06:3d:46:ef:64:92:cb:5f:af:69:
         66:0f:e0:ee:14:7a:08:88:1b:cf:c4:c4:fe:fe:2a:50:3a:60:
         a9:5e:58:b5:ce:87:86:da:08:aa:e5:56:40:9a:84:32:2c:0a:
         59:4d:67:89:0e:c8:8f:08:5e:74:a4:0f:a5:1a:09:4e:85:a4:
         27:24:86:99:61:5a:a3:a5:68:3e:97:40:3a:ed:8d:ed:a0:18:
         75:c4:96:9b:81:1e:52:ee:48:70:b1:90:23:5f:2a:6c:f4:65:
         0c:1c:9d:ff:ed:47:a9:62:1b:76:fc:73:fa:6d:d1:58:03:96:
         6a:7e:fd:d4:c2:29:a0:b4:2b:31:88:4b:53:22:45:56:98:6f:
         77:7a:0c:3e:74:e5:68:5e:6c:2b:91:6a:f6:d0:f2:6e:8a:fb:
         b2:bc:e5:1c:cd:02:da:07:33:16:88:8b:fc:1b:76:7b:62:5e:
         39:39:0f:5d:46:cb:65:da:a3:a6:96:33:c3:4e:b0:12:2e:ae:
         12:23:c3:07:76:15:75:6d:e8:b9:54:53:e0:2b:9f:8e:fd:8e:
         2f:b1:2d:96:c8:b7:b3:e1:6f:79:39:72:d0:83:03:cc:8b:0c:
         5c:be:2a:37:bb:d7:3f:e9:42:cd:26:a5:94:5d:9a:5e:f2:a5:
         df:95:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org