Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3233312e302f32342d3234203d3e20323632333039.roa
File:                     3137372e38372e3233312e302f32342d3234203d3e20323632333039.roa (raw, json)
Hash identifier:          mqtWT94r62Dcb28meIwWJLEvpDn6dGj4x67/dUZCjLQ=
Subject key identifier:   46:15:D7:3D:DD:26:30:98:E2:E0:72:7E:68:37:BC:FA:28:FB:FD:AB
Certificate issuer:       /CN=07501325F0AA30B8DCFF069CB118104776E788A8
Certificate serial:       40B9E24F8302EC0594CB950C268364E668C6C499
Authority key identifier: 07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3233312e302f32342d3234203d3e20323632333039.roa
Signing time:             Wed 18 Oct 2023 20:18:00 +0000
ROA not before:           Wed 18 Oct 2023 20:13:00 +0000
ROA not after:            Wed 16 Oct 2024 20:18:00 +0000
asID:                     262309
IP address blocks:        177.87.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b9:e2:4f:83:02:ec:05:94:cb:95:0c:26:83:64:e6:68:c6:c4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07501325F0AA30B8DCFF069CB118104776E788A8
        Validity
            Not Before: Oct 18 20:13:00 2023 GMT
            Not After : Oct 16 20:18:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:53:b9:bc:d4:58:ec:6d:11:ca:3c:0b:4e:
                    16:88:87:fa:96:9e:7f:c3:2a:5d:32:48:61:a2:cf:
                    23:db:b7:72:8c:d0:f6:07:f2:d9:54:8d:84:4f:b0:
                    f3:ea:a6:d1:7b:d6:83:a5:a5:e9:24:fd:62:98:1f:
                    47:50:e0:4d:9f:20:bb:f1:d1:35:06:8a:44:e9:af:
                    89:23:a4:b5:cc:c3:d6:e9:56:eb:68:c3:f8:65:54:
                    cb:72:1e:3f:1d:8c:a4:af:c9:4d:f6:75:3a:2d:7b:
                    a5:d8:ed:69:9e:31:67:69:c9:e2:46:fb:d5:2e:36:
                    59:1c:63:81:8b:ae:12:d3:c5:58:16:26:25:b3:c7:
                    31:ed:75:cd:7e:65:6c:76:66:19:9d:af:33:26:c8:
                    ba:bb:43:d3:d1:09:cc:84:dc:64:0c:ac:7a:90:21:
                    fe:78:0e:2b:ed:77:82:16:2b:c0:c4:a9:9d:ec:98:
                    40:49:11:df:f1:7d:60:39:2d:19:fb:a2:51:a3:95:
                    e6:1b:7d:d1:0a:06:8d:6b:74:83:26:48:f9:85:93:
                    d4:5e:48:f5:03:c9:14:65:df:4e:3d:98:4d:da:f1:
                    0e:16:5a:c8:5e:5c:c7:6b:d8:47:48:e5:55:c1:15:
                    2f:9f:5a:be:96:34:ec:47:83:1f:c0:12:72:fb:da:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:15:D7:3D:DD:26:30:98:E2:E0:72:7E:68:37:BC:FA:28:FB:FD:AB
            X509v3 Authority Key Identifier:
                keyid:07:50:13:25:F0:AA:30:B8:DC:FF:06:9C:B1:18:10:47:76:E7:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/07501325F0AA30B8DCFF069CB118104776E788A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07501325F0AA30B8DCFF069CB118104776E788A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/0/3137372e38372e3233312e302f32342d3234203d3e20323632333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:37:92:ee:06:a1:a6:25:d2:81:51:3e:e9:38:21:48:b9:
         3a:98:6c:9c:bc:32:15:31:fe:03:e4:5f:2f:ef:8e:ab:1d:93:
         bd:d6:39:56:b7:0b:1f:9e:82:73:56:57:f5:12:77:c6:a4:d9:
         98:0a:d4:29:f7:34:2d:38:f4:9e:98:80:b8:b0:87:d0:f8:ba:
         90:4b:6b:08:86:cb:8b:e1:19:d5:1d:7a:88:db:6b:e1:66:c5:
         f2:91:1b:ee:ee:a1:f1:23:85:5d:57:3a:c4:2e:ed:79:dd:01:
         be:99:a1:57:b6:45:1f:0a:53:69:4b:e3:60:3f:0b:0f:79:4f:
         5f:d4:59:86:a8:70:b3:f6:76:80:31:e6:aa:93:50:b4:0a:7d:
         69:36:7e:3e:a6:59:7d:4d:a4:6e:ee:89:df:0e:c1:f6:fc:25:
         1a:48:53:26:00:b4:6f:55:0c:71:00:d2:39:52:98:b8:61:2b:
         38:03:98:fc:e1:0c:4c:d4:f2:9a:e7:1f:b5:87:3f:db:a4:22:
         b1:63:01:11:b7:9d:d4:dd:6a:59:7d:30:72:2d:53:df:46:04:
         07:b2:f2:5a:bb:9c:10:d3:14:26:7b:68:bc:29:7b:00:39:70:
         e3:cf:9d:6d:00:8c:82:5f:85:2d:a8:6f:55:23:b2:cf:19:2b:
         40:60:2c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org