Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232372e302f32342d3234203d3e20323632333039.roa
File:                     3137372e38372e3232372e302f32342d3234203d3e20323632333039.roa (raw, json)
Hash identifier:          0ck59odG1xa9E4OCfksSEFPYK+TYnhgWp+a8ajgi2+g=
Subject key identifier:   A9:BD:A6:40:6D:04:2E:71:4A:59:10:8C:76:72:73:4D:1D:4F:0E:DF
Certificate issuer:       /CN=07501325F0AA30B8DCFF069CB118104776E788A8
Certificate serial:       04BB3DFABC06BF610D036A9199428B449BF85D34
Authority key identifier: 07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232372e302f32342d3234203d3e20323632333039.roa
Signing time:             Wed 18 Oct 2023 20:20:00 +0000
ROA not before:           Wed 18 Oct 2023 20:15:00 +0000
ROA not after:            Wed 16 Oct 2024 20:20:00 +0000
asID:                     262309
IP address blocks:        177.87.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bb:3d:fa:bc:06:bf:61:0d:03:6a:91:99:42:8b:44:9b:f8:5d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07501325F0AA30B8DCFF069CB118104776E788A8
        Validity
            Not Before: Oct 18 20:15:00 2023 GMT
            Not After : Oct 16 20:20:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3c:9a:a0:a2:0b:3d:8f:de:ce:02:e5:7e:84:
                    bb:7a:4c:45:20:80:8e:b6:e7:14:da:1e:32:95:ca:
                    89:5e:ba:7c:9e:fa:b6:de:17:cb:83:1f:4f:45:b6:
                    ce:3d:03:ad:76:8c:fa:38:6b:9a:77:41:27:c3:52:
                    86:c4:e9:e7:c1:54:b3:73:c2:dc:b2:34:c6:3f:ae:
                    0e:d1:7d:48:41:ad:1d:5f:e7:2d:38:d6:48:fe:77:
                    34:3f:a9:04:1a:9b:60:45:14:c3:b6:b4:4f:41:34:
                    c4:c8:5d:50:8e:36:9c:86:0a:33:17:82:69:60:e4:
                    0d:e3:c6:a6:27:e2:d0:be:7a:3a:47:de:42:96:b6:
                    f4:61:e4:4f:8a:d6:32:32:20:fd:6a:a5:2e:d2:32:
                    9b:77:15:e7:48:21:e2:7d:2b:8c:48:ed:20:c5:9c:
                    b0:61:85:b8:92:28:87:e5:03:bb:fd:b4:d9:a5:21:
                    e7:27:7a:77:1f:9e:33:1c:4a:e0:05:2d:2c:89:55:
                    c6:54:cf:6c:4b:a8:17:69:0a:9c:39:db:b5:05:b5:
                    fa:04:6f:df:56:44:7c:34:2c:d5:36:d6:68:2a:a4:
                    32:f0:ca:58:a3:c2:e1:0b:6c:a0:f9:c6:25:1d:5d:
                    79:c1:d1:53:3a:85:49:7a:d0:dd:4c:51:fc:55:7c:
                    1b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BD:A6:40:6D:04:2E:71:4A:59:10:8C:76:72:73:4D:1D:4F:0E:DF
            X509v3 Authority Key Identifier:
                keyid:07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/07501325F0AA30B8DCFF069CB118104776E788A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232372e302f32342d3234203d3e20323632333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:6b:38:47:cf:ac:9e:42:01:06:4f:58:69:db:79:bc:9b:70:
         23:92:cd:e0:88:d7:16:47:75:8a:5e:07:c3:9a:bf:45:99:57:
         93:dc:86:d0:23:f2:84:58:91:7b:e0:65:3b:a7:d8:20:0e:f9:
         4a:70:0b:85:f9:17:81:b0:c5:21:5f:65:32:f9:8e:cb:26:1d:
         29:cf:49:7f:3d:2e:9d:3d:75:92:8b:aa:a2:65:e9:6c:85:ff:
         d9:ad:15:a6:27:4a:61:e5:17:2d:7e:5c:e9:d1:27:7e:03:2a:
         66:b2:c2:80:64:b2:41:6a:7f:b7:18:e5:cb:b6:0a:1f:f2:a0:
         ab:d7:cb:cd:0b:0b:b3:fc:2d:9f:70:77:bc:57:19:cb:dc:67:
         2f:ef:b0:1e:a0:af:82:81:d6:41:0c:58:99:43:65:2b:24:76:
         f9:9f:42:41:c0:3c:cb:33:b7:9a:06:30:01:52:8f:d8:ec:38:
         97:96:f3:f6:2f:5f:dd:95:7f:04:f3:3c:b9:e6:ec:73:eb:fd:
         00:54:63:be:e5:6c:ba:1d:b6:dd:1e:5c:ad:39:d3:23:cb:1c:
         9b:13:3f:f4:8d:6d:3e:a9:65:8b:e4:70:b6:88:1a:89:0e:33:
         6f:7e:db:85:c3:50:ff:dc:38:1b:d8:bc:9a:49:34:8d:c4:22:
         bd:00:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org