Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136362e302f32332d3233203d3e20323632373938.roa
File:                     3137372e3132392e3136362e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          JjxY/IrxUgSt1hvCzkmz2Hf9vJVZwR0pOnoQM1AjGCk=
Subject key identifier:   DE:77:A3:EE:A5:AE:59:7D:AD:66:9A:44:19:13:B8:1B:80:E6:2C:54
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       37E5612B30C0CCBAC6D279D6F04FBC2663ED49E2
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136362e302f32332d3233203d3e20323632373938.roa
Signing time:             Tue 16 May 2023 12:26:47 +0000
ROA not before:           Tue 16 May 2023 12:21:47 +0000
ROA not after:            Tue 14 May 2024 12:26:47 +0000
asID:                     262798
IP address blocks:        177.129.166.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e5:61:2b:30:c0:cc:ba:c6:d2:79:d6:f0:4f:bc:26:63:ed:49:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: May 16 12:21:47 2023 GMT
            Not After : May 14 12:26:47 2024 GMT
        Subject: CN=DE77A3EEA5AE597DAD669A441913B81B80E62C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:01:26:ad:d3:f5:57:c8:c3:e1:f4:fd:08:
                    a6:9b:21:b1:31:56:fa:06:22:53:62:05:4f:e6:14:
                    a8:e9:80:ae:22:9d:26:2f:5e:5a:83:d6:12:ef:92:
                    63:a3:d5:92:0a:f4:95:ab:32:93:1c:6e:1a:1e:5c:
                    f9:cf:22:8f:87:4a:33:f4:4a:32:d6:c1:fd:3d:93:
                    10:1e:79:c2:51:f6:71:23:b6:7b:c0:e3:48:6c:70:
                    c2:45:35:57:fc:cd:23:58:f3:e4:a5:d3:76:a9:8b:
                    1b:33:bf:d2:5f:24:6e:cd:37:cf:58:20:bb:cd:54:
                    b3:bd:77:52:d1:f3:bd:39:0d:70:91:e3:a5:9a:98:
                    a4:f9:2a:66:1a:cd:03:b8:20:39:40:1b:04:ff:d2:
                    ce:71:21:f7:1c:78:15:3b:ae:5b:a1:f9:fa:71:35:
                    7d:bc:d8:0e:55:d7:75:d4:89:ee:be:00:83:07:a2:
                    d0:8e:95:a2:18:98:6d:1d:5b:39:51:f5:d4:ca:98:
                    73:59:f5:c7:a7:1e:80:4c:43:c0:7b:69:b5:08:8a:
                    e0:28:fc:79:20:08:db:40:0a:13:53:51:2a:24:e0:
                    92:f1:ea:ec:7b:04:a2:13:20:66:0d:4e:0b:65:ea:
                    a4:5a:37:7a:e7:84:7b:60:bb:5c:2a:c7:3b:9e:0e:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:77:A3:EE:A5:AE:59:7D:AD:66:9A:44:19:13:B8:1B:80:E6:2C:54
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136362e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:be:87:ac:49:5e:98:ac:24:36:e0:4e:b4:ea:86:98:41:32:
         5a:34:e9:e5:a8:17:f8:84:1a:63:68:cf:2e:29:99:ec:a1:de:
         01:24:7c:25:b2:fd:7c:15:84:bb:ea:f1:32:45:78:1c:6a:e3:
         a6:61:41:3f:0b:11:5e:92:2a:15:de:4a:00:7e:4e:32:3c:ce:
         80:b5:9a:dd:cb:5c:58:26:35:f9:29:73:84:88:0b:1e:fb:a6:
         d1:3b:8f:1c:41:7a:b2:69:05:62:1c:69:e3:57:b5:a1:fa:5e:
         6d:07:d9:a5:17:f8:25:f4:2f:ff:81:5b:46:c0:5d:56:64:12:
         f8:e6:37:6e:39:17:1f:7b:4e:a1:07:a5:77:2e:a2:7b:25:3d:
         6c:2a:48:09:65:9e:cb:05:ee:61:16:b0:2c:b4:a3:88:64:ba:
         cf:10:e2:d2:a9:b7:84:e3:51:20:e7:3b:30:10:a7:a3:68:c0:
         f4:e9:48:c4:c2:29:f4:00:7f:7a:a6:1a:3b:af:4e:8a:58:e6:
         c3:92:e4:2c:34:7d:76:30:00:4b:03:2f:26:96:9f:7f:51:d8:
         63:4b:9b:25:5d:de:4a:b3:f8:6b:3c:16:a8:15:bb:9c:9e:80:
         8c:e0:7a:67:28:b0:71:da:0a:b6:e5:79:38:ec:fb:ec:a9:58:
         7e:a4:ae:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org