Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e36382e302f32332d3233203d3e20323632333338.roa
File:                     3137372e3132362e36382e302f32332d3233203d3e20323632333338.roa (raw, json)
Hash identifier:          BWgOAQnbrqDxZJx2xZgPRCcUiA7xFVWOeW0Ggm3Z/rY=
Subject key identifier:   0B:4B:BB:9F:0E:5B:1A:49:29:73:EE:36:83:D5:AE:4C:C0:C6:A8:D4
Certificate issuer:       /CN=2F2EEA78F2A61B130D9274580167C650F0352C20
Certificate serial:       59610CDF47F5C640031EF3D8E07B57BD5F7D1AD9
Authority key identifier: 2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e36382e302f32332d3233203d3e20323632333338.roa
Signing time:             Tue 16 Apr 2024 12:20:12 +0000
ROA not before:           Tue 16 Apr 2024 12:15:12 +0000
ROA not after:            Tue 15 Apr 2025 12:20:12 +0000
asID:                     262338
IP address blocks:        177.126.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:61:0c:df:47:f5:c6:40:03:1e:f3:d8:e0:7b:57:bd:5f:7d:1a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2EEA78F2A61B130D9274580167C650F0352C20
        Validity
            Not Before: Apr 16 12:15:12 2024 GMT
            Not After : Apr 15 12:20:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:c4:89:1d:42:d8:76:58:e9:c6:3c:90:98:
                    31:1b:1f:f5:59:3e:7d:24:e8:d4:12:9b:dc:27:22:
                    d7:dd:95:d1:fa:a1:9c:20:fe:27:37:3e:3b:10:94:
                    a5:35:6b:8f:e9:c0:f9:13:9c:4c:20:60:38:5f:9b:
                    80:cc:03:30:10:b0:c8:04:3c:14:01:21:f2:f9:33:
                    bf:25:68:56:03:0a:f5:7c:12:38:da:9f:4c:07:d5:
                    44:28:90:ff:7b:dc:e3:9f:5e:c5:24:d5:53:d0:63:
                    d1:fb:03:d5:69:3b:a9:04:5a:f5:12:a6:3c:02:c1:
                    1f:5c:3a:1c:23:4c:9d:35:bc:bd:d0:4f:b4:46:3b:
                    17:10:6a:68:e3:92:3e:d7:c9:4b:b5:92:1f:d9:87:
                    4a:f9:c6:cd:ec:30:46:25:35:2b:d1:f2:16:cf:ee:
                    94:43:17:45:d1:b8:b8:3b:90:37:ec:3f:b3:2e:3b:
                    c8:ad:b8:e1:44:9c:13:d2:ca:6e:86:78:d0:20:82:
                    31:9f:6f:30:7f:4f:23:17:90:0f:d7:f1:0d:a5:9f:
                    3a:6f:18:c6:52:15:c3:81:dc:c1:f7:2d:0f:ff:c4:
                    aa:54:7c:42:d9:c7:e0:ff:49:d4:fd:e2:2e:fb:0b:
                    cd:1f:0c:9f:c1:80:c2:a0:06:e5:95:3d:6f:7f:b2:
                    db:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4B:BB:9F:0E:5B:1A:49:29:73:EE:36:83:D5:AE:4C:C0:C6:A8:D4
            X509v3 Authority Key Identifier:
                keyid:2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/2F2EEA78F2A61B130D9274580167C650F0352C20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e36382e302f32332d3233203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:21:05:67:25:41:31:46:af:18:66:d8:4c:aa:c9:19:f5:4e:
         7c:9e:de:e7:b0:21:c8:2a:fd:a4:92:cb:2b:87:6d:5e:69:80:
         34:13:25:93:a1:ab:3f:11:a4:83:0f:b6:b0:10:22:b3:ab:d5:
         67:8f:52:38:0f:9c:0d:05:6e:5a:7a:f1:a1:d9:24:c5:6f:62:
         79:62:ab:ce:71:df:51:16:49:6a:6c:a0:84:e0:d7:ce:f8:bc:
         d8:90:60:45:c9:b1:7d:fe:97:93:77:34:47:05:31:5a:f2:b5:
         77:d0:e4:13:6c:74:bb:11:c7:1a:8f:e0:94:f1:2e:43:df:dc:
         33:02:1f:85:2f:0a:27:bf:b0:77:80:98:11:7a:8b:be:41:4d:
         d9:0c:26:5a:18:ac:cd:a3:20:fc:14:79:1f:69:bc:47:a3:6a:
         c5:59:17:57:08:b8:93:93:d5:07:53:27:2c:67:31:27:57:ab:
         73:7e:94:14:c0:25:e9:32:a9:9f:7d:74:67:d2:71:7d:41:e0:
         5f:b1:62:8b:14:a6:33:48:3c:48:b0:5f:7a:77:b0:1e:95:7c:
         47:05:9e:ce:68:39:f2:be:e0:f2:5d:ec:dc:67:d9:98:17:1c:
         04:1b:77:1f:e0:88:c5:36:4c:be:de:86:45:c3:c0:c1:a7:9a:
         b9:25:59:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org