Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131382e302f32342d3234203d3e203532393137.roa
File:                     3137372e31302e3131382e302f32342d3234203d3e203532393137.roa (raw, json)
Hash identifier:          YsaGLy3sNVdnGDzHGKGcCE6sFGYEV2y54Bc/NAaDcCw=
Subject key identifier:   76:E4:8D:1D:38:BD:6F:D6:98:58:C3:8C:DC:60:6E:C5:24:4C:14:72
Certificate issuer:       /CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
Certificate serial:       0CFD890834A3D216389C1FB2008DB115C9119D5F
Authority key identifier: B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131382e302f32342d3234203d3e203532393137.roa
Signing time:             Fri 10 Mar 2023 13:20:33 +0000
ROA not before:           Fri 10 Mar 2023 13:15:33 +0000
ROA not after:            Fri 08 Mar 2024 13:20:33 +0000
asID:                     52917
IP address blocks:        177.10.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fd:89:08:34:a3:d2:16:38:9c:1f:b2:00:8d:b1:15:c9:11:9d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
        Validity
            Not Before: Mar 10 13:15:33 2023 GMT
            Not After : Mar  8 13:20:33 2024 GMT
        Subject: CN=76E48D1D38BD6FD69858C38CDC606EC5244C1472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:2b:5a:5d:fc:b9:dd:3d:91:41:47:5f:bb:
                    ef:c1:e2:0d:42:63:2c:8e:67:c4:6c:9b:2b:c1:b1:
                    84:62:f9:11:bf:69:b3:86:79:f1:31:1e:62:e6:f0:
                    e7:ec:13:6c:94:a3:49:76:06:6e:95:5c:04:ae:50:
                    75:95:b1:8b:bc:03:e9:18:ac:89:99:31:db:cc:a2:
                    40:5f:ae:28:ea:e0:fb:e3:94:48:f5:da:b1:5c:3b:
                    1c:04:b3:93:4c:2c:4e:3a:14:34:bb:b8:a3:7b:39:
                    fc:d4:92:5b:95:a5:02:54:06:a5:a5:43:46:2d:8a:
                    d6:0e:7a:17:df:26:36:c7:a5:80:f8:ad:f1:9c:67:
                    4a:34:a2:2c:ad:fb:bc:fe:32:b6:a7:ed:55:42:f0:
                    62:63:e2:27:06:ee:72:e1:4f:ea:cd:cd:ff:ad:7c:
                    af:1c:5c:9b:50:55:0a:4e:82:4a:0a:4b:86:22:2f:
                    17:fc:d8:de:a3:01:39:41:81:b9:38:05:c5:1f:5d:
                    1e:9d:11:f6:96:60:16:ad:ca:1f:b6:dd:8c:23:30:
                    fd:ce:4d:71:8f:fa:ed:71:4a:86:3a:09:ea:90:45:
                    3c:75:d7:72:89:65:fd:9a:10:08:1b:82:8c:5d:60:
                    7e:71:1a:c0:74:9a:b4:08:19:00:93:fe:78:42:43:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E4:8D:1D:38:BD:6F:D6:98:58:C3:8C:DC:60:6E:C5:24:4C:14:72
            X509v3 Authority Key Identifier:
                keyid:B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131382e302f32342d3234203d3e203532393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:3e:9e:d6:ec:4e:7c:27:04:1b:c2:6e:12:d2:cc:0f:e6:04:
         93:1f:06:ba:b3:1c:76:e5:d1:60:5e:cc:cf:e7:86:1f:32:ca:
         96:96:2c:c9:28:0c:70:c4:d4:b4:e8:ac:41:7f:36:cc:74:8f:
         c4:83:f0:eb:25:03:76:83:9c:53:7f:94:10:ea:e3:13:39:6d:
         5c:9b:aa:4a:b5:72:06:84:74:55:95:e6:a3:af:b1:e4:5c:8e:
         3e:0f:a1:74:bd:10:6a:40:3c:88:49:1b:f3:5a:4d:26:72:25:
         0c:6b:b2:d5:82:f9:cb:ee:cb:ce:3c:f6:e7:ba:d8:32:36:3b:
         1a:a1:f8:6e:d8:fc:6d:10:11:ca:38:2f:ed:d9:70:a4:a6:6c:
         68:ab:ef:0b:30:e8:76:1a:a6:8b:a5:e0:21:7c:c7:5d:96:86:
         75:67:4a:e1:0a:98:4c:1f:89:5a:52:5f:7a:ed:88:2c:b1:bd:
         5b:0b:09:5c:a9:94:d4:3f:f2:fb:62:a4:89:58:fd:ed:64:64:
         96:5f:9f:a2:46:35:45:1d:11:e6:65:1f:bf:eb:81:c1:53:99:
         18:7a:ae:9a:69:e8:35:c3:df:a2:e9:e0:aa:ae:54:e1:31:12:
         46:90:fa:f8:da:1e:fd:72:de:21:06:c4:7d:9e:5e:a4:20:e9:
         e6:c0:43:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org