Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136342e302f32322d3232203d3e20323632373938.roa
File:                     3137372e3132392e3136342e302f32322d3232203d3e20323632373938.roa (raw, json)
Hash identifier:          4KNGPSsecX8AgI8/4CY6ebSUNIQ/9fDkz2gIbWaPt+8=
Subject key identifier:   C0:0E:BB:79:A0:52:AD:AA:4B:86:B7:B1:78:56:C6:1F:47:5C:B4:79
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       14CDADEB3E813029EBC10FA43C007424A01993C4
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136342e302f32322d3232203d3e20323632373938.roa
Signing time:             Tue 16 May 2023 12:26:43 +0000
ROA not before:           Tue 16 May 2023 12:21:43 +0000
ROA not after:            Tue 14 May 2024 12:26:43 +0000
asID:                     262798
IP address blocks:        177.129.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cd:ad:eb:3e:81:30:29:eb:c1:0f:a4:3c:00:74:24:a0:19:93:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: May 16 12:21:43 2023 GMT
            Not After : May 14 12:26:43 2024 GMT
        Subject: CN=C00EBB79A052ADAA4B86B7B17856C61F475CB479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:3b:1e:62:ce:b9:e6:e7:2b:58:b2:7d:f6:
                    1c:a1:38:ed:00:6c:fd:81:7c:14:91:81:31:a5:d2:
                    80:5a:50:0a:6c:88:08:af:f4:f3:51:91:90:7a:4b:
                    9c:62:ee:09:24:ad:e5:fc:1a:66:2e:fe:21:50:a0:
                    86:e9:2d:73:2b:3a:52:83:6a:c4:d9:93:ea:c4:db:
                    a2:6a:72:32:ed:37:8d:18:50:bd:71:02:80:55:7a:
                    95:c3:eb:08:3c:c8:90:de:80:c7:64:7d:5b:28:af:
                    a8:6b:d3:fe:a5:cf:d8:86:4e:aa:54:3b:08:ae:53:
                    bd:59:44:33:06:b5:53:f8:7a:17:c3:1d:31:c9:37:
                    fb:db:1c:75:d5:17:9d:bd:70:45:ba:75:e3:7e:82:
                    3f:93:1d:cd:e6:4c:fa:ed:0e:fa:73:27:f9:fb:6e:
                    c9:a2:ef:93:d2:4f:72:72:81:06:9a:18:dc:da:71:
                    55:44:ef:65:e9:1e:11:37:78:c3:10:6b:ec:af:dc:
                    ee:82:2d:c1:81:5a:b2:25:e4:80:14:5c:05:c6:1f:
                    4a:4c:96:f6:fe:5c:5c:f7:4e:b8:2d:a3:b7:8b:8d:
                    74:0f:96:96:fb:ae:9f:07:7e:52:6d:95:9f:af:ae:
                    92:47:a0:b3:ab:1b:0a:ce:cb:8b:8a:8b:7c:70:57:
                    06:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0E:BB:79:A0:52:AD:AA:4B:86:B7:B1:78:56:C6:1F:47:5C:B4:79
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136342e302f32322d3232203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:3e:59:83:79:05:43:fc:35:24:7d:70:80:7e:53:65:85:3b:
         84:7f:4c:3b:df:3f:91:f1:d9:e2:0f:ce:93:b9:ab:82:c1:70:
         53:b0:83:cf:44:8e:37:39:9d:77:4f:26:32:cd:c3:0e:ae:ae:
         25:45:0a:6c:77:ae:3e:b4:26:ce:4e:5b:96:ed:bc:2e:6b:13:
         c0:9b:10:b2:49:63:3c:34:21:6b:d2:58:5a:ce:7a:16:24:a9:
         0b:3d:99:d7:1f:63:06:91:ad:17:b8:be:00:49:34:37:fb:b5:
         d3:07:a9:e0:34:c2:29:b3:fd:9a:9e:a9:e9:14:d6:89:c7:27:
         32:8f:47:20:93:49:fb:dc:d2:02:23:c2:66:6c:87:6f:c4:8a:
         5c:b6:71:ca:15:03:02:15:8d:bd:9d:b4:29:d9:1a:e0:8c:98:
         94:ce:c7:e7:53:65:45:bc:fb:b3:34:d0:39:44:73:40:36:62:
         2d:0e:df:5f:8e:a0:f5:52:cd:9f:fb:d7:c1:40:58:46:4f:39:
         bf:e1:01:a9:20:81:dd:7f:0e:68:1e:19:23:93:32:35:c1:d9:
         c8:4e:0a:47:c8:1d:78:ac:95:8a:a4:3b:ce:12:28:63:73:91:
         dd:a6:05:24:c4:c2:6d:c7:34:5d:cb:23:84:0f:be:21:72:bb:
         e4:ae:33:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org