Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136352e302f32342d3234203d3e20323632373938.roa
File:                     3137372e3132392e3136352e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          HXqAOjEb91wOi2a7Q0uFYmp73dkJcd0fBa0Pi9Wsx6o=
Subject key identifier:   83:92:14:69:1B:14:79:02:2F:7C:BA:38:0C:A8:03:46:A6:C0:67:94
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       098F5D343F19FD4E5E8263F6AB7CD9D222B4B2C2
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136352e302f32342d3234203d3e20323632373938.roa
Signing time:             Mon 05 Feb 2024 11:04:35 +0000
ROA not before:           Mon 05 Feb 2024 10:59:35 +0000
ROA not after:            Mon 03 Feb 2025 11:04:35 +0000
asID:                     262798
IP address blocks:        177.129.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8f:5d:34:3f:19:fd:4e:5e:82:63:f6:ab:7c:d9:d2:22:b4:b2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: Feb  5 10:59:35 2024 GMT
            Not After : Feb  3 11:04:35 2025 GMT
        Subject: CN=839214691B1479022F7CBA380CA80346A6C06794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:08:ad:a9:b1:cb:b1:11:0c:2c:3c:10:c9:
                    e8:d8:5a:c9:8d:1c:a0:c1:9b:92:5b:7b:72:15:d2:
                    13:a7:8a:ad:10:fc:36:1c:5e:00:5d:59:7c:87:eb:
                    ab:8a:a1:fe:8d:27:cf:18:41:ea:6e:bb:0c:b2:83:
                    58:71:8c:2d:b8:b3:49:f6:4c:db:29:60:9b:d8:bf:
                    b3:6f:5c:b6:c2:fe:3c:39:f5:1a:ff:28:ae:af:ed:
                    f8:56:92:c3:b8:62:02:4e:a4:eb:f6:bc:0b:b3:49:
                    9c:32:c0:5f:b7:80:88:98:0e:85:40:67:03:64:a8:
                    05:b1:60:c9:e3:d5:45:59:88:77:90:76:84:c6:c4:
                    5d:93:f1:1c:c2:e8:0f:eb:f4:a4:05:29:ca:be:b6:
                    4d:66:3b:ac:de:25:d4:c6:60:1f:ac:2a:c6:9f:2e:
                    14:16:70:76:e7:d3:da:b0:50:6d:eb:6e:c2:cf:7c:
                    61:26:68:a1:b1:b3:07:a1:39:f5:2b:56:c3:7f:21:
                    25:2d:80:fe:46:76:2c:2c:2d:89:d1:7d:9d:4a:4d:
                    f2:86:d8:d9:6f:be:62:50:e7:d7:ad:5b:59:6e:9c:
                    ea:65:5a:8b:e3:6e:d1:0f:df:ca:38:d2:7c:5f:13:
                    3c:d9:3a:8f:9b:2f:68:30:72:77:07:d3:15:3b:cd:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:92:14:69:1B:14:79:02:2F:7C:BA:38:0C:A8:03:46:A6:C0:67:94
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136352e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:a0:6c:65:fa:65:d3:12:9f:56:42:9c:a0:06:f9:a7:87:a3:
         41:df:4f:07:b7:0a:4d:9a:3c:be:1e:f5:28:33:16:e6:2e:ed:
         e1:a5:f0:e9:70:77:53:f9:63:a8:1a:76:7d:ad:3f:05:0a:fc:
         0a:7d:20:9d:a2:a6:6b:45:7e:68:79:d7:1b:49:21:9b:08:eb:
         39:04:b9:c9:2f:6e:71:64:28:9c:eb:46:4f:48:52:83:1d:fe:
         36:6e:8b:94:52:b2:cf:e7:76:40:5e:22:cb:e7:be:b3:4e:f6:
         6c:93:7a:e8:a6:90:80:86:81:35:08:47:d1:2c:02:a1:00:76:
         e6:a8:32:ed:99:61:e2:4d:b3:23:75:cb:50:a8:e6:6a:14:e3:
         a8:ff:a3:4d:c0:cd:22:63:33:9d:de:04:5b:d3:38:d5:23:f6:
         04:e7:1c:a5:2c:e3:a3:d1:a9:35:59:dd:73:50:f6:a5:c9:f1:
         9b:a2:0c:1c:f3:5c:fa:04:fb:c3:ab:dc:dd:f5:5c:74:f7:df:
         ea:cf:22:03:b7:fe:20:54:be:30:ae:e6:19:78:d3:b1:fb:30:
         3b:b0:9e:d7:e9:59:63:62:ff:4c:2f:79:ad:d6:a0:92:88:bb:
         99:c4:a9:21:ef:ed:80:6f:dd:be:b7:d6:59:53:d4:c3:f6:8e:
         b2:87:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org