Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232362e302f32342d3234203d3e20323632333039.roa
File:                     3137372e38372e3232362e302f32342d3234203d3e20323632333039.roa (raw, json)
Hash identifier:          GV1e8Xyu8NuboZXwFirSwsjSk/gnvwxxzjpSeCQhLFY=
Subject key identifier:   80:AA:9E:D1:CA:6F:1E:1E:1D:9F:0B:D1:DC:7A:CF:8A:0C:B9:D5:CB
Certificate issuer:       /CN=07501325F0AA30B8DCFF069CB118104776E788A8
Certificate serial:       6ABDE9FFCB83E6B6937EBDC875E52D705981264B
Authority key identifier: 07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232362e302f32342d3234203d3e20323632333039.roa
Signing time:             Wed 18 Oct 2023 20:18:01 +0000
ROA not before:           Wed 18 Oct 2023 20:13:01 +0000
ROA not after:            Wed 16 Oct 2024 20:18:01 +0000
asID:                     262309
IP address blocks:        177.87.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bd:e9:ff:cb:83:e6:b6:93:7e:bd:c8:75:e5:2d:70:59:81:26:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07501325F0AA30B8DCFF069CB118104776E788A8
        Validity
            Not Before: Oct 18 20:13:01 2023 GMT
            Not After : Oct 16 20:18:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:ca:08:86:84:6b:db:c2:af:97:42:f0:6d:
                    52:20:14:cb:4d:21:0b:9e:e5:4d:63:a3:13:a8:67:
                    8c:d5:00:2d:f6:aa:3d:49:aa:8a:8d:a2:27:57:1a:
                    67:a1:26:d1:4a:2c:aa:90:a4:12:c0:26:36:1e:f9:
                    d2:da:89:3e:21:c5:d7:19:ef:37:9f:f7:e9:78:08:
                    6d:51:a1:e6:12:0e:d9:e1:65:b6:c7:fd:22:88:aa:
                    cf:03:c7:d8:9b:77:e0:57:2f:b0:e4:bc:b6:bd:e8:
                    bd:14:46:fc:80:2e:1f:42:0e:17:78:9b:78:27:8c:
                    c4:d8:96:aa:32:7c:e8:65:56:6e:de:02:9e:e8:33:
                    d8:af:32:f0:ca:9a:27:3d:f2:b1:54:bf:14:f3:f0:
                    74:79:16:d7:7b:27:25:dd:82:c1:83:06:32:ac:93:
                    e8:9e:79:8e:3f:47:83:de:d9:16:f6:58:a9:c6:b2:
                    b0:35:01:f0:a0:60:1f:74:7f:51:29:d6:00:e7:ec:
                    1a:83:97:43:d4:45:44:e7:8d:dd:7c:c6:4b:09:20:
                    e4:7a:44:1f:2d:9c:26:a4:9f:a3:d1:17:a1:f6:94:
                    8a:5c:8d:a6:08:17:6a:4b:1d:f5:32:51:86:c0:e7:
                    69:d1:0e:0e:6e:38:48:cd:c2:68:17:be:62:1d:7e:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AA:9E:D1:CA:6F:1E:1E:1D:9F:0B:D1:DC:7A:CF:8A:0C:B9:D5:CB
            X509v3 Authority Key Identifier:
                keyid:07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/07501325F0AA30B8DCFF069CB118104776E788A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232362e302f32342d3234203d3e20323632333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:40:1a:45:aa:8e:d5:b3:de:97:19:45:ae:c1:92:05:c4:20:
         f7:2f:91:a7:76:e4:0a:d5:27:18:38:d9:d0:91:5c:c3:33:72:
         2b:fb:63:3c:a2:4e:89:b8:c7:16:d3:2b:68:68:f2:9e:46:02:
         68:97:22:e6:d7:92:c5:39:b7:0d:67:f1:51:c1:76:c8:16:7e:
         f5:87:fc:56:87:30:cb:1b:37:08:79:0e:9e:4b:41:ce:99:27:
         6b:da:ab:34:85:d3:c6:bb:25:fb:2e:47:b1:b2:5a:03:92:b1:
         04:14:08:0d:45:e3:f0:40:96:89:b9:78:97:2f:c4:3d:e0:f5:
         8b:c1:8c:ad:27:3c:01:7b:07:86:7b:7f:73:b0:b7:cd:25:a9:
         6a:0d:96:ae:75:6d:41:51:95:92:15:a8:74:b6:03:d8:3f:7c:
         68:5f:85:8f:2c:34:cf:7c:b8:24:9d:5e:0b:74:41:0b:4b:b4:
         21:22:7d:28:4a:df:86:9c:55:8e:3d:04:0f:6d:8e:86:e5:ab:
         6c:35:98:20:10:69:d8:95:af:26:ce:21:8d:d4:a3:21:b9:14:
         1e:09:9d:3d:3f:05:a9:eb:5d:66:d7:3e:40:06:c8:dc:5c:21:
         dc:df:0b:45:8b:4d:87:7d:df:dc:55:e4:be:81:83:48:9b:70:
         2f:9d:62:dc
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUar3p/8uD5raTfr3IdeUtcFmBJkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc1MDEzMjVGMEFBMzBCOERDRkYwNjlDQjExODEwNDc3
NkU3ODhBODAeFw0yMzEwMTgyMDEzMDFaFw0yNDEwMTYyMDE4MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzlENkNBMDg4Njg0NkJEQkMy
QUY5NzQyRjA2RDUyMjAxNENCNEQyMTBCOUVFNTRENjNBMzEzQTg2NzhDRDUwMDJE
RjZBQTNENDlBQThBOERBMjI3NTcxQTY3QTEyNkQxNEEyQ0FBOTBBNDEyQzAyNjM2
MUVGOUQyREE4OTNFMjFDNUQ3MTlFRjM3OUZGN0U5NzgwODZENTFBMUU2MTIwRUQ5
RTE2NUI2QzdGRDIyODhBQUNGMDNDN0Q4OUI3N0UwNTcyRkIwRTRCQ0I2QkRFOEJE
MTQ0NkZDODAyRTFGNDIwRTE3Nzg5Qjc4Mjc4Q0M0RDg5NkFBMzI3Q0U4NjU1NjZF
REUwMjlFRTgzM0Q4QUYzMkYwQ0E5QTI3M0RGMkIxNTRCRjE0RjNGMDc0NzkxNkQ3
N0IyNzI1REQ4MkMxODMwNjMyQUM5M0U4OUU3OThFM0Y0NzgzREVEOTE2RjY1OEE5
QzZCMkIwMzUwMUYwQTA2MDFGNzQ3RjUxMjlENjAwRTdFQzFBODM5NzQzRDQ0NTQ0
RTc4REREN0NDNjRCMDkyMEU0N0E0NDFGMkQ5QzI2QTQ5RkEzRDExN0ExRjY5NDhB
NUM4REE2MDgxNzZBNEIxREY1MzI1MTg2QzBFNzY5RDEwRTBFNkUzODQ4Q0RDMjY4
MTdCRTYyMUQ3RTdDNUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAydbKCIaEa9vCr5dC8G1SIBTLTSELnuVNY6MTqGeM1QAt9qo9SaqK
jaInVxpnoSbRSiyqkKQSwCY2HvnS2ok+IcXXGe83n/fpeAhtUaHmEg7Z4WW2x/0i
iKrPA8fYm3fgVy+w5Ly2vei9FEb8gC4fQg4XeJt4J4zE2JaqMnzoZVZu3gKe6DPY
rzLwyponPfKxVL8U8/B0eRbXeycl3YLBgwYyrJPonnmOP0eD3tkW9lipxrKwNQHw
oGAfdH9RKdYA5+wag5dD1EVE543dfMZLCSDkekQfLZwmpJ+j0Reh9pSKXI2mCBdq
Sx31MlGGwOdp0Q4ObjhIzcJoF75iHX58WwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FICqntHKbx4eHZ8L0dx6z4oMudXLMB8GA1UdIwQYMBaAFAdQEyXwqjC43P8GnLEY
EEd254ioMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhoZ3JXc2tZcFV6Z1lr
U1RGVGhZQXdKNnVwdllCYk5YeWQ1VEpaVHgxYVNYLzAvMDc1MDEzMjVGMEFBMzBC
OERDRkYwNjlDQjExODEwNDc3NkU3ODhBOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wNzUwMTMyNUYwQUEzMEI4RENGRjA2OUNCMTE4MTA0Nzc2RTc4
OEE4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84aGdyV3NrWXBVemdZa1NURlRo
WUF3SjZ1cHZZQmJOWHlkNVRKWlR4MWFTWC8wLzMxMzczNzJlMzgzNzJlMzIzMjM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzMzMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sVfiMA0GCSqGSIb3DQEBCwUAA4IBAQCcQBpFqo7Vs96XGUWuwZIFxCD3L5GnduQK
1ScYONnQkVzDM3Ir+2M8ok6JuMcW0ytoaPKeRgJolyLm15LFObcNZ/FRwXbIFn71
h/xWhzDLGzcIeQ6eS0HOmSdr2qs0hdPGuyX7LkexsloDkrEEFAgNRePwQJaJuXiX
L8Q94PWLwYytJzwBeweGe39zsLfNJalqDZaudW1BUZWSFah0tgPYP3xoX4WPLDTP
fLgknV4LdEELS7QhIn0oSt+GnFWOPQQPbY6G5atsNZggEGnYla8mziGN1KMhuRQe
CZ09PwWp611m1z5ABsjcXCHc3wtFi02Hfd/cVeS+gYNIm3AvnWLc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org