Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232342e302f32342d3234203d3e20323632333039.roa
File:                     3137372e38372e3232342e302f32342d3234203d3e20323632333039.roa (raw, json)
Hash identifier:          fAHgsRfrq/8LKCeoyvXKDHr6LWnNROFTncil93PP/wQ=
Subject key identifier:   6A:79:96:CE:13:4D:13:9B:3E:BA:37:2E:30:7D:05:D5:70:0A:81:B0
Certificate issuer:       /CN=07501325F0AA30B8DCFF069CB118104776E788A8
Certificate serial:       4CEE0A98A51AD807865F680F464CB797797A774D
Authority key identifier: 07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232342e302f32342d3234203d3e20323632333039.roa
Signing time:             Wed 18 Oct 2023 20:18:01 +0000
ROA not before:           Wed 18 Oct 2023 20:13:01 +0000
ROA not after:            Wed 16 Oct 2024 20:18:01 +0000
asID:                     262309
IP address blocks:        177.87.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ee:0a:98:a5:1a:d8:07:86:5f:68:0f:46:4c:b7:97:79:7a:77:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07501325F0AA30B8DCFF069CB118104776E788A8
        Validity
            Not Before: Oct 18 20:13:01 2023 GMT
            Not After : Oct 16 20:18:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:ed:48:46:bd:0b:19:6e:80:bb:f0:8d:12:
                    41:73:a8:37:7a:fe:9d:c3:01:d3:13:be:0e:dd:c6:
                    cc:86:29:3f:04:fa:b9:2c:f2:1f:f0:c0:2c:ea:f6:
                    70:47:53:e4:ca:05:59:e6:1a:06:c8:35:a9:eb:38:
                    69:ce:a0:c2:ff:8e:25:b2:dc:75:32:07:d8:11:41:
                    83:cb:c7:6a:05:5e:6f:0d:5d:9f:0f:18:6d:3f:aa:
                    24:7a:49:46:bb:db:94:45:de:85:2c:ed:40:02:08:
                    e8:b1:d3:4d:0b:63:fd:0d:7e:60:a7:89:5d:3a:ba:
                    c4:41:35:df:14:e2:6b:d0:17:51:35:e5:04:9a:96:
                    d7:1f:1b:f8:31:b7:f6:b6:b7:55:a8:40:20:de:3a:
                    c1:71:bd:73:17:08:e6:be:a5:f4:47:68:54:a5:11:
                    4b:bf:ff:72:c6:7f:b2:33:65:2a:34:6d:24:c6:1f:
                    27:01:6a:58:21:de:fb:cd:ef:dc:d7:93:f1:56:48:
                    48:b6:39:03:c3:a4:26:b7:c2:30:70:9f:e0:40:3b:
                    00:27:22:e5:35:b9:5f:5c:d5:9c:0a:38:f9:7f:17:
                    da:40:e0:b9:5b:f7:8a:b9:ec:f6:a4:8f:d4:d0:5a:
                    f4:7e:f0:40:92:84:db:ce:2a:f0:42:c0:d6:b3:f0:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:79:96:CE:13:4D:13:9B:3E:BA:37:2E:30:7D:05:D5:70:0A:81:B0
            X509v3 Authority Key Identifier:
                keyid:07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/07501325F0AA30B8DCFF069CB118104776E788A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232342e302f32342d3234203d3e20323632333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:d1:49:e1:0a:ea:12:b6:71:e2:eb:8c:e3:a3:03:fd:f5:a0:
         68:59:ba:be:96:3d:71:34:10:10:4f:a4:ad:11:15:1c:6d:dc:
         0c:dc:1e:6f:2d:56:76:7f:50:b9:7f:76:65:2c:86:f5:5c:8b:
         31:02:2f:71:b7:24:f1:0f:91:ee:04:ef:a9:ee:e7:34:6b:8d:
         94:e7:4b:56:91:0a:a3:c3:92:3e:5e:b6:ed:17:5c:e4:04:76:
         25:43:ec:ed:a3:34:04:90:95:9c:5b:a9:ac:ff:0a:f0:52:28:
         67:bd:97:31:5a:ab:9d:9f:f2:6c:f1:98:4a:55:92:ea:29:70:
         6b:c0:ac:50:69:c0:2a:25:db:c3:6f:56:86:0a:8c:f3:77:91:
         f3:d6:d0:a3:83:51:c2:dd:78:24:b3:d3:df:64:e5:09:f4:c5:
         4b:8e:75:f4:7e:af:ee:aa:a5:9d:19:f1:15:be:8f:6e:07:7d:
         0e:91:73:41:16:42:b8:18:83:12:d6:43:a0:03:15:17:6e:56:
         98:e3:c5:11:1d:48:d2:62:7f:5d:5d:1d:2f:25:4a:3b:aa:d7:
         24:14:25:76:e4:82:26:38:f3:8d:01:86:dc:e2:4c:0c:67:1c:
         62:ed:cc:07:2b:01:e3:86:00:54:16:ca:9c:56:48:65:bc:1a:
         dc:9d:71:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org