Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131372e302f32342d3234203d3e203532393137.roa
File:                     3137372e31302e3131372e302f32342d3234203d3e203532393137.roa (raw, json)
Hash identifier:          +T3nHD15bApe2QTCnDDn7r8fnGpMIbQE/18oadn9itk=
Subject key identifier:   B0:84:AA:2B:4E:31:C8:47:B0:FE:6B:F0:65:F9:98:87:A0:39:06:16
Certificate issuer:       /CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
Certificate serial:       400B0388014AFFCF67FE8C898A122FCBEE770F49
Authority key identifier: B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131372e302f32342d3234203d3e203532393137.roa
Signing time:             Fri 10 Mar 2023 13:20:30 +0000
ROA not before:           Fri 10 Mar 2023 13:15:30 +0000
ROA not after:            Fri 08 Mar 2024 13:20:30 +0000
asID:                     52917
IP address blocks:        177.10.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0b:03:88:01:4a:ff:cf:67:fe:8c:89:8a:12:2f:cb:ee:77:0f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
        Validity
            Not Before: Mar 10 13:15:30 2023 GMT
            Not After : Mar  8 13:20:30 2024 GMT
        Subject: CN=B084AA2B4E31C847B0FE6BF065F99887A0390616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:fb:a7:31:30:21:eb:ab:ac:02:f0:90:d0:
                    01:b9:59:93:c0:53:13:97:6e:66:72:9b:77:1f:f3:
                    d7:20:b4:e6:63:5d:a7:36:53:2f:b8:73:8c:31:eb:
                    1e:d4:52:e4:6a:a8:05:64:ae:45:f2:fd:fb:e5:cf:
                    63:f3:b2:d7:fa:9e:05:ce:3e:96:5c:4e:d1:a5:29:
                    e3:b8:1e:e1:89:25:f1:7f:2b:cc:71:42:06:bb:68:
                    d1:c2:18:c6:7a:47:0f:dc:f0:17:8b:b9:df:84:2e:
                    a5:f6:5b:75:96:73:65:18:c6:7c:bf:c1:fa:2c:54:
                    ce:58:77:1c:42:fe:a3:23:22:d7:9f:e8:a3:30:91:
                    2f:97:5a:9e:f5:82:42:b3:7e:50:4b:37:e1:46:f4:
                    fa:9b:03:d3:21:f8:48:90:71:f1:88:c2:17:52:5b:
                    50:79:38:cd:b7:c5:fe:c4:ef:3d:db:1f:b1:83:fd:
                    38:23:36:43:a0:72:0e:ac:85:5a:32:16:d9:9e:ac:
                    ac:c4:5b:bb:86:b4:28:5e:e1:00:c9:b0:d8:c6:7d:
                    16:1e:b4:79:f4:90:92:b5:93:0b:b3:a7:17:f3:01:
                    0f:d0:5a:14:db:a2:fc:ee:88:c0:92:db:cf:f6:35:
                    56:0a:2e:65:5e:5a:a2:2c:b0:cc:cf:34:3b:05:ea:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:84:AA:2B:4E:31:C8:47:B0:FE:6B:F0:65:F9:98:87:A0:39:06:16
            X509v3 Authority Key Identifier:
                keyid:B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131372e302f32342d3234203d3e203532393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:8c:c0:1d:a7:a1:13:2f:98:b8:b3:b1:c3:17:7d:65:3e:16:
         5f:17:0f:14:56:33:a4:11:1e:17:57:ff:c6:d8:71:3d:6c:26:
         65:1f:e4:eb:4a:a4:10:7c:45:07:e9:c5:e1:58:af:e6:35:4c:
         68:ad:90:7d:c9:c6:69:3d:b1:71:82:09:8f:b3:52:c1:d7:7e:
         57:2e:68:36:f8:72:02:ec:a4:c1:13:3e:09:65:07:75:05:d2:
         4e:9e:f4:91:36:ab:a1:d2:32:d9:e5:0d:1d:d3:4e:62:17:b2:
         79:18:8d:16:79:93:fe:0f:f2:a2:2c:06:f9:ec:05:26:b9:2f:
         ca:91:0d:e5:53:bf:5b:ee:aa:7c:64:c1:76:0e:96:37:c5:0a:
         92:5a:58:e5:6d:f6:e0:16:04:1e:4d:81:01:ed:71:83:76:53:
         a3:d3:f0:77:f7:ea:d1:2c:12:95:99:26:f3:0c:f0:59:b8:40:
         d6:0a:33:60:0a:f5:82:7d:18:b3:06:2b:c5:dd:f3:c1:eb:70:
         28:ff:f6:3c:a2:0a:8f:b7:fb:06:96:d6:eb:ad:67:e5:45:5a:
         21:24:ed:8f:2a:76:63:58:f9:6e:00:94:c1:a0:13:89:22:17:
         5f:b4:c1:4f:89:4f:a4:e7:e9:0f:0d:16:e0:52:ec:3e:c2:f9:
         83:f9:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org