Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e37302e302f32332d3233203d3e20323632333338.roa
File:                     3137372e3132362e37302e302f32332d3233203d3e20323632333338.roa (raw, json)
Hash identifier:          PAT6s9GAVZLyM+7yWFzyzF/hnGlDHC2qHCWLQi6LYfI=
Subject key identifier:   28:42:7B:39:E4:5E:A3:72:6A:A4:50:60:91:1A:F1:D9:68:B3:AB:E0
Certificate issuer:       /CN=2F2EEA78F2A61B130D9274580167C650F0352C20
Certificate serial:       0B8232BDBC0F2D7D49FFA42B14A967E222725B55
Authority key identifier: 2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e37302e302f32332d3233203d3e20323632333338.roa
Signing time:             Tue 16 Apr 2024 12:20:11 +0000
ROA not before:           Tue 16 Apr 2024 12:15:11 +0000
ROA not after:            Tue 15 Apr 2025 12:20:11 +0000
asID:                     262338
IP address blocks:        177.126.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:82:32:bd:bc:0f:2d:7d:49:ff:a4:2b:14:a9:67:e2:22:72:5b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2EEA78F2A61B130D9274580167C650F0352C20
        Validity
            Not Before: Apr 16 12:15:11 2024 GMT
            Not After : Apr 15 12:20:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1d:f0:63:17:25:ba:d0:a9:7e:0f:b3:8c:5f:
                    9a:1d:4f:82:4b:57:eb:58:48:01:5e:43:f7:a4:79:
                    89:32:ef:8d:71:bf:9c:b7:d1:87:d9:dc:e9:3d:f2:
                    73:59:29:8c:a0:5a:1c:c2:fd:5a:85:7d:a2:30:27:
                    e8:01:20:37:72:75:d0:dc:43:c9:ce:49:e8:d4:6e:
                    88:38:56:74:2a:eb:cd:d2:3c:40:47:32:ca:50:f9:
                    f7:43:b2:3b:b6:64:b3:c3:de:44:eb:77:fa:8a:38:
                    c1:a0:1e:22:dd:95:63:e5:4e:dd:0b:40:10:32:fc:
                    f3:8d:2c:06:f2:5c:5c:04:f0:c4:57:ab:57:b6:9b:
                    71:3b:7d:22:33:6c:b2:44:a1:8d:1a:59:89:f4:da:
                    6b:33:9c:57:a2:25:f8:76:4c:8d:2b:cc:21:92:e4:
                    c4:9d:04:b4:4f:35:ac:eb:76:58:a1:25:b0:53:ff:
                    ca:3d:06:a2:9e:a0:09:a4:b0:e2:2e:82:42:3c:e6:
                    46:01:a5:9f:e1:a0:e2:47:f6:e0:1a:fd:5b:aa:c5:
                    36:ac:60:d2:b5:7c:cd:0b:7a:63:c8:32:4e:3d:95:
                    cf:a0:6a:4d:1f:01:c8:cb:e7:f0:37:2f:e2:d3:95:
                    f9:6c:e0:85:5d:64:cb:cf:98:d2:20:1c:5b:d0:e5:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:42:7B:39:E4:5E:A3:72:6A:A4:50:60:91:1A:F1:D9:68:B3:AB:E0
            X509v3 Authority Key Identifier:
                keyid:2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/2F2EEA78F2A61B130D9274580167C650F0352C20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e37302e302f32332d3233203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:a1:79:39:7a:07:cc:83:15:cc:29:26:ac:35:e8:c0:71:97:
         a1:b3:e6:f4:5e:8d:f5:e0:be:6a:90:09:d6:c6:29:c4:d5:86:
         68:21:b9:1b:7c:0f:ae:21:1e:14:01:db:51:9d:b1:2b:dc:f6:
         08:0c:b6:f7:ea:0f:32:ce:bd:89:7c:a0:9b:e4:aa:2d:36:9a:
         ed:99:ce:09:97:cf:6c:f3:06:25:b2:6b:3e:4e:74:d6:8a:ba:
         75:60:7b:6f:e3:2e:89:f5:30:1e:64:3e:c6:c8:00:6d:f6:51:
         1b:af:f7:bc:37:74:ae:ac:ff:20:d7:21:6b:de:a3:d6:ae:f1:
         90:f4:26:45:6a:5d:77:d3:4b:07:6f:10:da:bf:bb:a9:ca:13:
         d3:52:4f:65:32:0a:d4:9b:65:35:fb:22:34:20:45:bd:71:ba:
         eb:5b:ec:fa:6f:b9:9d:ef:76:a8:b5:1c:cd:a1:92:bc:ea:85:
         8f:ca:41:48:bb:45:84:c1:c9:8b:52:3a:26:1b:bf:c1:85:89:
         46:9a:d8:08:af:63:2f:62:61:26:a9:15:af:04:99:5b:c5:df:
         2e:14:33:03:3b:c9:7c:ea:ff:7d:c1:0b:18:91:ca:c2:7f:fb:
         77:db:d5:21:c4:ed:9f:cb:a1:df:18:52:04:5b:ff:61:5d:67:
         5a:32:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org