Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136342e302f32332d3233203d3e20323632373938.roa
File:                     3137372e3132392e3136342e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          tuOXLEgofR2VAIEAWfGFGzNBxAuWwbXyNdmZpMJLVQA=
Subject key identifier:   C1:F6:BB:A3:62:4C:BE:5C:FD:79:61:91:7D:A9:38:84:A6:BD:27:87
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       6F34563F73216DFDEE4B54188F3FE10C167A37FC
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136342e302f32332d3233203d3e20323632373938.roa
Signing time:             Tue 16 May 2023 12:26:45 +0000
ROA not before:           Tue 16 May 2023 12:21:45 +0000
ROA not after:            Tue 14 May 2024 12:26:45 +0000
asID:                     262798
IP address blocks:        177.129.164.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:34:56:3f:73:21:6d:fd:ee:4b:54:18:8f:3f:e1:0c:16:7a:37:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: May 16 12:21:45 2023 GMT
            Not After : May 14 12:26:45 2024 GMT
        Subject: CN=C1F6BBA3624CBE5CFD7961917DA93884A6BD2787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:46:e7:44:7c:6b:6e:35:a4:28:63:16:c7:
                    bc:62:88:2b:b7:f5:b7:6b:50:c1:33:9d:00:49:03:
                    bc:fa:2d:6d:8a:ba:dd:e9:d3:1f:ae:45:9d:df:17:
                    84:97:95:e8:1f:9b:04:1f:ae:3b:6e:13:cc:81:35:
                    a2:37:fb:6b:de:b8:5a:27:b2:a4:5b:af:10:14:52:
                    b0:34:5f:da:63:7e:9e:ef:d0:58:d0:b0:9b:5b:4e:
                    65:62:2e:f0:9a:d6:74:9a:52:9a:26:c6:9b:3e:ca:
                    e7:11:3e:91:3b:45:7c:eb:5f:77:cb:c0:92:4c:4d:
                    fc:df:16:82:e2:50:e5:ee:c8:71:13:66:16:22:e8:
                    07:f3:28:b1:a0:b2:db:58:aa:2c:e5:75:3f:71:c9:
                    b3:c0:ce:46:40:8e:33:8d:50:01:34:c0:02:b6:9c:
                    e9:a3:d9:0a:85:bd:30:79:27:a1:fc:8f:a0:e5:ce:
                    35:c7:f9:c1:01:b4:b6:1e:e4:e4:28:42:40:8e:64:
                    af:c0:5e:62:0d:b7:41:72:12:79:0b:33:1f:72:7e:
                    a6:c3:10:e8:64:e4:f1:59:2b:19:3a:6b:bf:fb:d5:
                    d5:db:b5:96:55:40:c4:ed:3d:b8:78:e4:1a:53:9a:
                    a0:09:85:fe:b7:8b:3a:a8:b7:33:66:3f:28:cc:93:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F6:BB:A3:62:4C:BE:5C:FD:79:61:91:7D:A9:38:84:A6:BD:27:87
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136342e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:56:5e:70:26:d9:58:bb:ff:0d:84:ed:34:be:c6:d6:6c:47:
         0f:50:70:5c:8c:84:ab:61:a8:80:9c:49:88:e4:4c:e4:27:36:
         5b:85:87:43:cd:5c:61:97:5d:16:8a:25:00:50:ba:ee:ca:f3:
         44:26:a5:50:26:fe:21:54:b4:88:4b:15:cc:b5:ea:bc:8c:d2:
         48:20:93:2e:d1:13:fc:ff:2a:7f:53:39:6f:99:a8:a4:66:4f:
         58:e3:81:ef:f5:78:9c:41:a0:2c:f1:c0:db:89:bf:47:5d:58:
         b4:ec:0e:2f:b7:7e:aa:ff:86:2d:6d:93:92:fe:7e:9c:7b:6f:
         16:60:d5:c9:31:40:cc:56:b9:67:43:be:a2:a2:8f:d1:b6:e1:
         1a:d8:d5:da:4d:5a:f9:34:fb:f0:a4:95:dd:67:bc:02:d3:5b:
         f2:69:78:44:31:ff:21:b2:dd:4f:dd:2f:14:fa:cb:91:29:81:
         c7:55:77:cf:96:99:0b:24:2a:6f:01:e4:67:0e:68:b8:5c:bb:
         87:00:53:56:90:0d:1d:28:cd:b2:fa:09:8e:a1:f3:e8:17:df:
         83:fd:73:e0:ec:66:89:02:4a:e6:6e:0a:78:15:68:f1:a5:6d:
         dc:f8:a6:bc:e1:dd:4f:f2:1a:07:c8:37:64:00:62:42:37:11:
         25:c7:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org