Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232392e302f32342d3234203d3e20323632333039.roa
File:                     3137372e38372e3232392e302f32342d3234203d3e20323632333039.roa (raw, json)
Hash identifier:          DeEzBvDvKzWMvIvYjhQcx9uKTCc5U5fc/G+3iriwpwA=
Subject key identifier:   0C:FF:92:0F:5F:DA:53:21:C6:B3:F9:F7:1F:FA:E3:CD:93:D7:A9:C4
Certificate issuer:       /CN=07501325F0AA30B8DCFF069CB118104776E788A8
Certificate serial:       777FD1CFFB87C273A1872EF3E08170E77D382309
Authority key identifier: 07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232392e302f32342d3234203d3e20323632333039.roa
Signing time:             Wed 18 Oct 2023 20:20:00 +0000
ROA not before:           Wed 18 Oct 2023 20:15:00 +0000
ROA not after:            Wed 16 Oct 2024 20:20:00 +0000
asID:                     262309
IP address blocks:        177.87.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7f:d1:cf:fb:87:c2:73:a1:87:2e:f3:e0:81:70:e7:7d:38:23:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07501325F0AA30B8DCFF069CB118104776E788A8
        Validity
            Not Before: Oct 18 20:15:00 2023 GMT
            Not After : Oct 16 20:20:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:c6:81:dd:f4:53:f0:00:a4:3c:19:c5:90:
                    6b:9c:b3:c8:77:a7:18:ae:0e:e9:9e:03:75:7d:1d:
                    e9:6c:00:57:1d:8a:e9:29:09:d5:3d:d8:f2:77:71:
                    a2:3e:2d:3b:1e:e7:5e:7a:1a:f7:f1:17:69:34:86:
                    a2:03:09:29:91:fa:9f:ca:fd:9d:7c:e8:86:45:20:
                    51:f6:6e:d8:e2:c6:d4:a5:94:67:5e:24:62:88:76:
                    26:5e:47:45:dd:7f:9f:a5:1c:94:e1:81:12:fb:94:
                    40:51:0e:25:b6:05:b3:37:e4:26:e8:32:e1:70:7a:
                    d8:f6:e5:76:12:12:fd:db:b4:26:7c:e9:0b:db:59:
                    f4:67:0f:6b:60:44:00:21:82:48:15:21:55:41:ef:
                    1f:a3:a3:e7:8f:90:ee:f8:dc:cf:94:22:2b:e2:55:
                    3e:39:6c:04:c1:3d:e7:69:95:02:08:5c:81:e4:4f:
                    6b:9a:ea:84:6e:3c:73:f0:48:bd:14:c7:53:be:f9:
                    1b:6a:f6:00:6c:cd:6b:44:1c:52:c1:86:b8:c4:f1:
                    93:b1:09:4b:ab:0f:73:93:62:17:72:fc:c4:2a:4d:
                    bc:03:89:57:f8:72:54:c2:5c:32:aa:47:c4:3c:e9:
                    5d:15:8a:8a:c8:b6:b1:46:7b:0d:6c:ac:f4:ab:59:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FF:92:0F:5F:DA:53:21:C6:B3:F9:F7:1F:FA:E3:CD:93:D7:A9:C4
            X509v3 Authority Key Identifier:
                keyid:07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/07501325F0AA30B8DCFF069CB118104776E788A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3232392e302f32342d3234203d3e20323632333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:d5:34:38:16:5d:a7:18:b3:f0:01:62:9e:a4:c2:41:00:5a:
         e5:66:46:17:8a:e5:10:ec:52:30:40:0e:61:e8:d4:4c:a1:52:
         04:ff:18:0e:78:16:09:5a:00:c1:3a:16:4e:06:7a:cf:5e:7a:
         90:2a:4d:12:3a:c7:e0:0d:51:fc:97:63:a5:5f:e2:6e:ba:14:
         f0:70:84:bf:a6:4b:62:37:c4:f1:65:aa:e7:09:5c:f6:7c:26:
         79:50:6e:1e:ec:e0:0c:b2:f3:79:3c:ec:9c:2f:07:6b:51:8d:
         e8:3b:44:92:c5:17:80:f1:87:06:e3:67:9e:82:16:40:01:43:
         de:0d:f2:fb:4a:7c:f5:fa:8d:53:6f:b4:2b:19:c7:97:55:55:
         02:31:65:d1:9b:43:1b:81:f3:31:69:c8:dd:1e:1e:4b:b0:b9:
         48:93:98:76:93:d5:a2:c3:91:ab:08:22:45:91:8b:19:1f:4e:
         b1:28:6f:f3:45:97:67:0f:29:97:b2:c3:5c:10:b0:21:e2:0d:
         ce:92:b8:8d:fc:4d:f8:7e:9f:9c:2d:2a:65:65:54:cf:e9:fd:
         7b:57:a9:60:76:bb:de:05:20:93:6f:b6:53:4f:49:65:39:b5:
         62:7e:62:05:38:b2:35:f5:4f:7b:35:ff:29:e9:7b:76:7a:c2:
         b4:59:a4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org