Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232342e302f32312d3231203d3e20323632333039.roa
File:                     3137372e38372e3232342e302f32312d3231203d3e20323632333039.roa (raw, json)
Hash identifier:          CEzDDKEfmJKPU8zRU1Smk/tiOfQij0tqrng26tyUOS8=
Subject key identifier:   37:AF:27:3C:53:BB:46:EB:00:DE:5B:A1:21:DE:D4:67:92:53:2C:2F
Certificate issuer:       /CN=07501325F0AA30B8DCFF069CB118104776E788A8
Certificate serial:       60F82E40713731ABB00DE63921B870FD0469A5AB
Authority key identifier: 07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232342e302f32312d3231203d3e20323632333039.roa
Signing time:             Wed 18 Oct 2023 20:36:00 +0000
ROA not before:           Wed 18 Oct 2023 20:31:00 +0000
ROA not after:            Wed 16 Oct 2024 20:36:00 +0000
asID:                     262309
IP address blocks:        177.87.224.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f8:2e:40:71:37:31:ab:b0:0d:e6:39:21:b8:70:fd:04:69:a5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07501325F0AA30B8DCFF069CB118104776E788A8
        Validity
            Not Before: Oct 18 20:31:00 2023 GMT
            Not After : Oct 16 20:36:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:a6:99:61:93:9a:8d:51:a4:16:c9:1d:54:
                    a5:f8:14:1d:62:e0:34:88:fe:74:f6:c3:b3:f9:f2:
                    7a:33:c1:75:d0:40:b1:4e:48:14:cf:64:4b:82:4d:
                    d5:5a:19:17:16:eb:58:b7:61:92:ca:ee:88:05:68:
                    2f:9c:b0:69:d0:b7:c1:af:24:6f:25:a5:f2:f9:f6:
                    6f:c4:f5:ea:42:e0:77:e7:60:a0:28:84:2e:fc:41:
                    72:b8:73:db:5a:33:9b:30:aa:10:ef:dc:86:4e:2a:
                    59:a0:02:60:63:de:e6:e1:19:b1:8d:60:32:e6:53:
                    51:1f:6c:99:87:10:76:f0:40:fc:d3:06:79:1c:8e:
                    51:04:37:31:0f:bb:94:2c:d2:94:36:0d:39:3a:cf:
                    48:bd:6e:57:2b:f9:0b:f9:56:3a:96:4b:6d:56:36:
                    7e:68:3b:de:49:ec:8f:df:cc:ea:8c:14:f5:5c:a1:
                    4f:10:c6:1e:6c:2d:49:cb:e2:30:b1:77:a5:a0:ec:
                    33:c1:68:25:78:29:05:73:78:55:bb:fb:04:45:b9:
                    e7:bd:7b:ad:78:a7:74:94:f9:1f:ab:62:80:5b:57:
                    a6:42:95:08:7d:dc:81:d8:46:2d:53:4b:44:93:8d:
                    35:d6:b5:7f:4d:9b:c9:3a:8e:fe:6d:b6:a8:1a:73:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AF:27:3C:53:BB:46:EB:00:DE:5B:A1:21:DE:D4:67:92:53:2C:2F
            X509v3 Authority Key Identifier:
                keyid:07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/07501325F0AA30B8DCFF069CB118104776E788A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232342e302f32312d3231203d3e20323632333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:bb:b4:be:7a:be:fe:14:2f:ef:c5:c4:b1:cc:ee:bb:b5:ea:
         07:a3:14:74:5e:2b:c5:39:73:f7:60:f4:33:08:0f:61:76:f2:
         d6:9b:4f:97:54:bf:ba:1a:cf:78:b5:19:cf:6d:59:a9:b4:d4:
         b3:2e:13:25:ea:1e:5a:d0:36:2a:69:85:bd:f6:6f:78:ef:a2:
         f4:bb:1e:f2:67:c7:da:c3:05:d5:31:f7:f1:99:14:5b:95:75:
         94:9f:b2:8c:76:81:14:d7:e8:bb:be:92:e2:15:99:49:be:36:
         1a:c5:10:95:9d:c1:87:c0:b0:ad:7e:c9:89:92:6e:ec:b6:f2:
         a2:b2:be:9d:8f:6e:63:b6:27:e9:b3:9b:12:b3:bd:0b:e9:1f:
         ae:1f:e4:a7:f6:b3:fe:c4:d3:43:a6:fc:d5:43:15:3d:c7:71:
         31:42:87:c9:b6:f0:f8:51:49:87:5e:ea:7b:95:61:18:50:7e:
         25:36:ea:8f:19:72:e0:86:60:74:5d:81:c9:89:2d:08:f5:48:
         1b:04:85:1b:5f:e9:a6:58:ca:0b:73:db:f5:58:e5:b7:93:20:
         ec:38:8e:ce:ac:a7:76:61:9e:f2:bb:68:4d:5a:e5:2d:a7:3a:
         35:2b:f2:50:fe:70:99:ec:c1:fd:13:19:4a:63:8b:16:f3:20:
         18:d0:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org