Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3233302e302f32342d3234203d3e20323632333039.roa
File:                     3137372e38372e3233302e302f32342d3234203d3e20323632333039.roa (raw, json)
Hash identifier:          bbj+m2uG/9Y4T6aOoEkoAoUOQ9fUL3ZrGbehjhQs210=
Subject key identifier:   68:E4:50:FC:FD:0E:5B:95:6D:97:48:CF:79:A7:A1:B0:7A:AA:26:9E
Certificate issuer:       /CN=07501325F0AA30B8DCFF069CB118104776E788A8
Certificate serial:       592BC14112A3F907B0488C9E6A268ECFB47BE809
Authority key identifier: 07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3233302e302f32342d3234203d3e20323632333039.roa
Signing time:             Wed 18 Oct 2023 20:20:01 +0000
ROA not before:           Wed 18 Oct 2023 20:15:01 +0000
ROA not after:            Wed 16 Oct 2024 20:20:01 +0000
asID:                     262309
IP address blocks:        177.87.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2b:c1:41:12:a3:f9:07:b0:48:8c:9e:6a:26:8e:cf:b4:7b:e8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07501325F0AA30B8DCFF069CB118104776E788A8
        Validity
            Not Before: Oct 18 20:15:01 2023 GMT
            Not After : Oct 16 20:20:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:43:1c:58:81:1e:d3:33:1e:52:73:f6:c5:d0:
                    0c:b4:20:1f:da:01:24:e5:fe:c3:1e:e8:b0:80:c1:
                    e6:52:aa:f4:18:37:3a:0b:67:fc:1f:6c:39:9e:b5:
                    78:69:15:83:90:63:0e:07:eb:f2:a0:9c:c8:a2:c3:
                    54:62:f5:4b:43:5c:da:f7:11:f5:f4:0a:08:0d:50:
                    02:2d:11:f0:fd:69:93:b2:2d:20:ca:03:99:fc:ad:
                    68:82:66:fe:bd:2e:dc:14:8a:1d:1f:61:a6:f4:c5:
                    78:fa:1c:f1:0c:27:71:6c:bb:fa:69:57:cf:8e:74:
                    b5:b2:23:5d:e0:fa:6d:24:e4:26:84:d7:86:2a:b0:
                    85:9b:e7:e1:e3:0a:da:7b:e3:3f:0b:f5:d6:47:b1:
                    12:e9:51:3e:4a:c1:2d:30:20:ea:77:ea:be:25:7f:
                    11:16:63:06:70:ef:32:ae:9d:81:fc:f9:85:1a:6f:
                    5e:be:d5:f5:bf:13:02:5a:ae:21:0b:ce:86:2d:78:
                    75:5e:0b:c3:75:e7:16:55:89:e9:05:50:e2:bf:25:
                    a1:be:11:f1:c2:62:5b:89:4a:ab:fb:97:da:40:06:
                    14:7f:18:c6:dd:2b:0d:d6:f2:63:3e:94:19:ff:3f:
                    ab:23:2e:26:82:00:ef:68:35:8e:04:05:b4:6b:74:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E4:50:FC:FD:0E:5B:95:6D:97:48:CF:79:A7:A1:B0:7A:AA:26:9E
            X509v3 Authority Key Identifier:
                keyid:07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/07501325F0AA30B8DCFF069CB118104776E788A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3233302e302f32342d3234203d3e20323632333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a3:18:72:72:6c:50:67:7c:c7:d4:57:4e:5d:fb:77:34:93:
         f7:52:3a:62:05:b0:f9:ab:63:eb:2e:77:95:a1:3f:b9:8e:1d:
         cf:af:3f:2b:2d:22:77:cf:65:50:b8:b8:bc:3d:95:de:49:03:
         9d:ef:50:37:c0:01:d4:f5:3f:5d:f0:7f:04:6b:e0:ac:89:36:
         96:30:3d:f3:4d:47:19:dd:44:76:23:d5:7e:2c:6a:dd:fc:b6:
         51:6e:4e:6f:0d:6e:0f:e9:bf:92:f7:45:8a:2e:2b:4f:1a:e0:
         d4:90:29:60:7c:44:57:49:0d:4c:21:dd:73:17:6b:b4:48:91:
         5c:af:83:fc:fe:54:2b:92:1a:a5:0b:a8:5b:00:a3:b7:3e:20:
         58:c6:2d:ad:83:27:5b:60:dc:b7:ba:d5:f9:92:16:65:60:ad:
         9e:ae:09:df:d2:b3:82:7e:f9:6d:99:ce:6d:29:fb:ca:25:a5:
         33:93:df:c7:2c:66:3a:06:3a:3c:12:f5:c3:25:bd:10:61:cc:
         5c:cd:b8:c3:8e:b3:9f:ed:98:a4:31:10:4b:8e:23:ba:2f:1b:
         00:17:27:ef:c7:fe:1c:bb:e7:1e:29:4e:05:19:b1:32:bd:29:
         2a:cf:39:ea:bf:f3:af:28:16:be:9d:f2:35:44:3d:a3:ac:ac:
         54:ed:3c:d3
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUWSvBQRKj+QewSIyeaiaOz7R76AkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc1MDEzMjVGMEFBMzBCOERDRkYwNjlDQjExODEwNDc3
NkU3ODhBODAeFw0yMzEwMTgyMDE1MDFaFw0yNDEwMTYyMDIwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUQ0MzFDNTg4MTFFRDMzMzFF
NTI3M0Y2QzVEMDBDQjQyMDFGREEwMTI0RTVGRUMzMUVFOEIwODBDMUU2NTJBQUY0
MTgzNzNBMEI2N0ZDMUY2QzM5OUVCNTc4NjkxNTgzOTA2MzBFMDdFQkYyQTA5Q0M4
QTJDMzU0NjJGNTRCNDM1Q0RBRjcxMUY1RjQwQTA4MEQ1MDAyMkQxMUYwRkQ2OTkz
QjIyRDIwQ0EwMzk5RkNBRDY4ODI2NkZFQkQyRURDMTQ4QTFEMUY2MUE2RjRDNTc4
RkExQ0YxMEMyNzcxNkNCQkZBNjk1N0NGOEU3NEI1QjIyMzVERTBGQTZEMjRFNDI2
ODRENzg2MkFCMDg1OUJFN0UxRTMwQURBN0JFMzNGMEJGNUQ2NDdCMTEyRTk1MTNF
NEFDMTJEMzAyMEVBNzdFQUJFMjU3RjExMTY2MzA2NzBFRjMyQUU5RDgxRkNGOTg1
MUE2RjVFQkVENUY1QkYxMzAyNUFBRTIxMEJDRTg2MkQ3ODc1NUUwQkMzNzVFNzE2
NTU4OUU5MDU1MEUyQkYyNUExQkUxMUYxQzI2MjVCODk0QUFCRkI5N0RBNDAwNjE0
N0YxOEM2REQyQjBERDZGMjYzM0U5NDE5RkYzRkFCMjMyRTI2ODIwMEVGNjgzNThF
MDQwNUI0NkI3NDM4RDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7UMcWIEe0zMeUnP2xdAMtCAf2gEk5f7DHuiwgMHmUqr0GDc6C2f8
H2w5nrV4aRWDkGMOB+vyoJzIosNUYvVLQ1za9xH19AoIDVACLRHw/WmTsi0gygOZ
/K1ogmb+vS7cFIodH2Gm9MV4+hzxDCdxbLv6aVfPjnS1siNd4PptJOQmhNeGKrCF
m+fh4wrae+M/C/XWR7ES6VE+SsEtMCDqd+q+JX8RFmMGcO8yrp2B/PmFGm9evtX1
vxMCWq4hC86GLXh1XgvDdecWVYnpBVDivyWhvhHxwmJbiUqr+5faQAYUfxjG3SsN
1vJjPpQZ/z+rIy4mggDvaDWOBAW0a3Q40QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGjkUPz9DluVbZdIz3mnobB6qiaeMB8GA1UdIwQYMBaAFAdQEyXwqjC43P8GnLEY
EEd254ioMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhoZ3JXc2tZcFV6Z1lr
U1RGVGhZQXdKNnVwdllCYk5YeWQ1VEpaVHgxYVNYLzAvMDc1MDEzMjVGMEFBMzBC
OERDRkYwNjlDQjExODEwNDc3NkU3ODhBOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wNzUwMTMyNUYwQUEzMEI4RENGRjA2OUNCMTE4MTA0Nzc2RTc4
OEE4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84aGdyV3NrWXBVemdZa1NURlRo
WUF3SjZ1cHZZQmJOWHlkNVRKWlR4MWFTWC8wLzMxMzczNzJlMzgzNzJlMzIzMzMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzMzMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sVfmMA0GCSqGSIb3DQEBCwUAA4IBAQAioxhycmxQZ3zH1FdOXft3NJP3UjpiBbD5
q2PrLneVoT+5jh3Prz8rLSJ3z2VQuLi8PZXeSQOd71A3wAHU9T9d8H8Ea+CsiTaW
MD3zTUcZ3UR2I9V+LGrd/LZRbk5vDW4P6b+S90WKLitPGuDUkClgfERXSQ1MId1z
F2u0SJFcr4P8/lQrkhqlC6hbAKO3PiBYxi2tgydbYNy3utX5khZlYK2ergnf0rOC
fvltmc5tKfvKJaUzk9/HLGY6Bjo8EvXDJb0QYcxczbjDjrOf7ZikMRBLjiO6LxsA
Fyfvx/4cu+ceKU4FGbEyvSkqzznqv/OvKBa+nfI1RD2jrKxU7TzT
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org