Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134332e302f32342d3234203d3e20323633313331.roa
File:                     3137372e3132382e3134332e302f32342d3234203d3e20323633313331.roa (raw, json)
Hash identifier:          0OGow4zUm0QEnbUpoc1A4i6JggTGe/D+yqXptaWD9Vo=
Subject key identifier:   A2:7C:C9:D5:7F:68:C9:41:01:1D:9E:3C:1D:44:B9:D7:44:6B:BE:21
Certificate issuer:       /CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
Certificate serial:       0C18F9844A5C9E2D688B2EE7FF14D0DFB6B33FAD
Authority key identifier: C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134332e302f32342d3234203d3e20323633313331.roa
Signing time:             Tue 25 Jul 2023 20:06:48 +0000
ROA not before:           Tue 25 Jul 2023 20:01:48 +0000
ROA not after:            Tue 23 Jul 2024 20:06:48 +0000
asID:                     263131
IP address blocks:        177.128.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:18:f9:84:4a:5c:9e:2d:68:8b:2e:e7:ff:14:d0:df:b6:b3:3f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
        Validity
            Not Before: Jul 25 20:01:48 2023 GMT
            Not After : Jul 23 20:06:48 2024 GMT
        Subject: CN=A27CC9D57F68C941011D9E3C1D44B9D7446BBE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:f0:5d:48:be:e3:66:41:52:8c:d3:55:3b:
                    51:76:36:48:e8:83:f3:11:91:38:ef:87:18:ca:17:
                    da:f5:c6:ba:46:78:09:cb:0c:97:9c:df:f5:a9:de:
                    d6:03:2b:c2:98:3c:20:b2:e0:83:28:b4:98:ff:14:
                    99:a8:58:ba:01:6e:38:49:52:b3:57:33:f6:3f:f5:
                    65:99:a7:64:7c:90:fa:12:86:26:0b:a6:4e:04:c3:
                    70:97:ac:49:07:e1:e9:62:76:1c:6e:c4:83:45:b0:
                    1d:7c:b0:ac:eb:e7:ad:5b:47:9a:02:4d:00:75:b8:
                    00:50:76:9d:71:05:64:08:14:98:eb:07:f7:73:01:
                    6c:a5:21:f2:95:50:c3:c7:85:39:a9:f2:84:01:d2:
                    e1:42:a9:06:1a:b9:c8:ad:1d:f8:65:f3:d1:5e:c2:
                    a0:90:bd:46:60:44:cc:f2:54:2c:01:bb:c2:f8:7b:
                    fc:22:6c:72:61:b5:b4:d1:bd:84:7e:bb:4c:e1:fc:
                    90:20:f5:9f:bf:80:ff:9c:86:30:f6:af:53:65:f3:
                    fc:bd:d4:a6:88:3d:c7:00:92:01:89:c8:cd:97:84:
                    63:b9:23:88:e9:08:dc:33:36:aa:b7:02:9a:2b:9c:
                    86:ea:d3:85:67:9e:bc:08:5d:2a:fa:48:22:9c:b8:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7C:C9:D5:7F:68:C9:41:01:1D:9E:3C:1D:44:B9:D7:44:6B:BE:21
            X509v3 Authority Key Identifier:
                keyid:C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134332e302f32342d3234203d3e20323633313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:db:d2:7b:cb:a3:9f:09:7e:db:a9:b8:bb:43:25:a7:04:b6:
         9d:c1:fd:3f:a7:8c:61:4f:14:a8:e9:bb:d9:71:86:20:fc:62:
         66:cf:ea:94:21:63:e2:ad:10:ed:4d:48:04:78:33:3f:db:73:
         17:cc:07:e9:aa:db:dd:c1:39:6a:c6:99:d8:f4:7e:f6:fc:35:
         a0:72:be:d8:71:19:cc:c2:ef:94:91:06:36:2b:4a:34:9f:1e:
         be:e9:de:c5:61:ae:0f:1f:3f:f9:31:c3:89:e0:5a:54:a3:ac:
         60:7f:80:d9:44:17:25:ed:af:98:0c:96:9b:84:1a:82:5b:10:
         5c:09:2b:30:c2:44:cf:b2:48:39:ee:76:37:92:4e:2d:e9:52:
         bf:08:67:81:c3:bd:92:aa:b3:20:a1:9c:4c:7d:6c:5b:59:e9:
         d1:22:c1:d3:b1:22:ae:bd:60:e8:72:1e:95:a6:12:15:76:ef:
         df:73:0e:3c:49:e8:dc:40:78:57:40:ad:59:33:0e:90:2a:de:
         d9:5d:bb:c1:7b:47:7a:6b:e9:92:e5:5f:40:72:16:d5:d0:65:
         0c:a1:de:de:ba:65:f6:e0:ad:27:60:62:8d:a1:16:dc:b2:84:
         cf:0f:ed:b4:50:5f:40:24:c0:41:80:33:b7:62:f3:6a:7e:77:
         be:d2:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org