Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136362e302f32342d3234203d3e20323632373938.roa
File:                     3137372e3132392e3136362e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          sK1MHKrMBSOV1A7c+WEBfz01cjzy+Rq7/FcaFr/iydU=
Subject key identifier:   9D:18:8F:16:57:4D:2A:01:0C:84:E1:65:33:92:23:00:CC:A4:CE:6C
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       4A16EEEFF7D5C80E6355364DE399B425E1462A48
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136362e302f32342d3234203d3e20323632373938.roa
Signing time:             Mon 05 Feb 2024 11:04:47 +0000
ROA not before:           Mon 05 Feb 2024 10:59:47 +0000
ROA not after:            Mon 03 Feb 2025 11:04:47 +0000
asID:                     262798
IP address blocks:        177.129.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:16:ee:ef:f7:d5:c8:0e:63:55:36:4d:e3:99:b4:25:e1:46:2a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: Feb  5 10:59:47 2024 GMT
            Not After : Feb  3 11:04:47 2025 GMT
        Subject: CN=9D188F16574D2A010C84E16533922300CCA4CE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:c4:b9:8f:3a:3b:8d:95:57:5c:1f:0e:ce:
                    41:5b:c9:51:57:54:d6:d0:de:3c:ea:de:45:09:16:
                    5a:4b:a8:9f:f6:d3:f0:ab:c0:be:ed:31:51:58:be:
                    8e:a3:0b:e7:f8:1e:c6:dd:38:6b:dc:5f:2d:b2:15:
                    74:5b:c4:0c:bd:b1:ee:82:c2:dd:e2:6c:9f:93:5d:
                    9e:12:31:4f:63:7a:1f:4f:18:19:9b:ee:70:31:f1:
                    6b:62:7b:47:03:e9:90:e1:74:6e:95:48:fc:fc:74:
                    d6:74:04:f4:c7:9b:7a:9d:05:eb:8f:2f:95:6b:6d:
                    26:02:cb:32:89:4f:75:88:37:db:f4:fe:a9:c9:9e:
                    2f:8c:3b:4d:f6:9d:1e:2b:cc:ba:6a:10:af:f7:05:
                    73:e8:9b:c3:1c:7d:c9:7d:b8:02:4a:e7:7b:be:a8:
                    47:9c:41:8d:52:07:fc:f1:af:72:1a:15:07:16:51:
                    13:5e:75:c4:1a:90:4d:a9:80:02:23:a2:5a:0d:2b:
                    f9:95:48:47:1a:7d:a6:d4:9b:b8:4b:1b:94:52:cb:
                    b3:ff:a4:13:df:89:32:fb:8a:80:69:4f:00:f9:a7:
                    95:6f:8b:30:9d:ae:08:84:fe:f7:e0:cb:76:33:89:
                    de:3b:b7:0f:60:db:f9:4a:3d:4c:f6:f8:e3:29:ba:
                    2b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:18:8F:16:57:4D:2A:01:0C:84:E1:65:33:92:23:00:CC:A4:CE:6C
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3137372e3132392e3136362e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:48:ce:8c:5f:35:41:29:e7:5f:b5:b3:c7:e5:56:e2:4e:c8:
         4a:c1:d9:53:ed:c8:ae:69:c6:33:f0:65:16:9a:24:61:cd:8b:
         96:2e:c8:4c:91:ab:5b:7a:12:f4:08:19:d5:a7:4e:61:b3:c8:
         02:c6:9b:6c:55:09:89:68:94:12:5a:c0:37:01:87:6a:d3:ab:
         e7:1c:62:16:32:f8:cb:41:9a:e3:b0:62:b0:8e:d8:83:11:41:
         7a:13:67:6c:81:f2:74:50:25:e5:9d:6b:1d:c5:29:3c:2a:ab:
         b0:b9:3a:3f:56:cd:4c:f4:f4:b6:e4:1b:b9:23:be:fb:f1:ca:
         4c:c1:08:ac:e5:d2:87:f6:05:24:40:43:9b:06:da:89:9d:8b:
         9d:87:6e:27:c8:65:29:96:b7:b5:25:c2:f9:e8:ba:1d:67:fa:
         6f:9c:f9:39:f1:f0:4e:b9:b5:e0:c3:6f:cf:bb:86:82:a2:7d:
         9b:29:e1:60:ff:55:5a:3c:b5:94:95:61:d5:b4:2d:eb:a2:4c:
         d9:6f:a0:da:16:09:d9:d9:5a:ca:05:31:59:b0:46:94:f8:5c:
         8c:8f:03:73:df:e9:93:57:f9:71:67:77:80:3a:f3:3b:6d:15:
         27:bc:b7:e1:06:0c:2e:fc:29:44:df:fc:e4:34:c9:4c:98:0e:
         c3:d4:52:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org