Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e37322e302f32332d3233203d3e20323632333338.roa
File:                     3137372e3132362e37322e302f32332d3233203d3e20323632333338.roa (raw, json)
Hash identifier:          mBshW8Baig85pTKEzR+odlXbBvQ9gOOpBOZxnm2XWLE=
Subject key identifier:   74:9E:12:38:CB:CB:08:13:18:F5:0E:FE:38:21:F7:59:C9:1D:80:43
Certificate issuer:       /CN=2F2EEA78F2A61B130D9274580167C650F0352C20
Certificate serial:       4FC07F22231D12352F3B30CABA86F60B019ACFC7
Authority key identifier: 2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e37322e302f32332d3233203d3e20323632333338.roa
Signing time:             Tue 16 Apr 2024 12:20:11 +0000
ROA not before:           Tue 16 Apr 2024 12:15:11 +0000
ROA not after:            Tue 15 Apr 2025 12:20:11 +0000
asID:                     262338
IP address blocks:        177.126.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c0:7f:22:23:1d:12:35:2f:3b:30:ca:ba:86:f6:0b:01:9a:cf:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2EEA78F2A61B130D9274580167C650F0352C20
        Validity
            Not Before: Apr 16 12:15:11 2024 GMT
            Not After : Apr 15 12:20:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:ce:d0:9c:77:33:a0:7a:b2:ab:7b:b4:1f:
                    c4:32:b5:45:58:3c:79:37:76:e4:9e:81:a3:28:43:
                    3a:74:c3:9f:73:db:7e:14:cb:58:4a:4d:85:dc:8d:
                    1a:2f:dd:c8:96:47:b6:d7:dd:43:2e:c9:94:02:62:
                    39:a6:b6:98:34:4c:00:4b:b0:81:f0:ce:3d:6f:63:
                    5a:06:55:8c:58:93:53:79:f4:e3:42:65:20:d0:6f:
                    6c:3c:13:aa:34:1e:f5:43:22:c2:07:06:c9:ec:09:
                    2c:59:c6:a9:f1:ce:f2:f7:45:a6:84:08:d7:f3:42:
                    23:a0:3b:f1:c0:7c:0c:c2:ef:43:13:a0:ab:95:d4:
                    0b:09:e2:bc:30:af:eb:f5:57:a7:e4:ae:cd:ee:85:
                    81:74:34:ab:49:d3:fd:bd:13:ba:d8:08:80:85:86:
                    db:90:91:44:c0:bd:bd:bb:29:08:17:12:b8:0a:ae:
                    ec:29:4c:59:13:db:c3:6a:9f:03:d1:be:48:5c:69:
                    4b:58:48:82:18:9a:d0:fc:2e:4e:79:9a:12:a3:72:
                    e6:fa:c5:8c:10:6c:0c:a7:c0:aa:52:fb:63:38:58:
                    9d:6e:a9:ee:b5:04:f1:b6:b7:c8:f8:db:29:38:f1:
                    ef:38:7e:2d:a3:86:47:f0:07:12:1f:1e:76:9e:08:
                    68:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9E:12:38:CB:CB:08:13:18:F5:0E:FE:38:21:F7:59:C9:1D:80:43
            X509v3 Authority Key Identifier:
                keyid:2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/2F2EEA78F2A61B130D9274580167C650F0352C20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e37322e302f32332d3233203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:fc:96:67:79:e0:6f:71:26:a3:94:01:8e:2a:fb:4e:7b:a4:
         db:b3:11:97:86:d2:11:1f:9d:fa:0a:97:de:b7:f8:4b:b0:ff:
         ee:b5:b8:7e:94:9e:e3:83:ff:97:69:08:a4:6a:91:b6:97:63:
         7e:a7:a8:7c:78:a1:0f:c7:ee:76:61:63:d1:1f:0a:32:ec:dc:
         88:79:7e:7b:b3:20:23:c5:32:49:ec:81:c6:de:b1:2e:ac:37:
         a5:d2:4f:a8:62:ef:a6:45:ab:c5:cb:84:2d:20:58:05:d0:f0:
         55:23:95:24:c0:a4:47:71:84:36:f2:e4:ed:7c:33:21:a4:ad:
         37:e5:c0:af:24:0d:a8:93:00:cc:40:c5:92:c1:76:07:04:0a:
         8f:b5:9c:45:f1:e3:79:d0:3c:93:db:f2:e3:9b:99:08:35:b5:
         35:2e:5a:fc:c0:af:d4:6e:05:da:78:63:3c:1c:da:28:bd:a7:
         d7:b4:86:65:75:2b:f0:fa:8a:1f:85:f0:91:d6:b2:e4:41:74:
         ac:ea:9d:65:e6:ac:3c:9e:7a:82:66:0c:0e:5a:5c:0f:a0:12:
         5c:48:26:52:18:81:f7:e2:3c:75:a1:c9:51:a2:d0:e8:8a:1d:
         f4:b0:dd:fc:6f:80:8a:13:a1:ee:4b:0a:0e:d3:28:9c:33:f6:
         63:99:b1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org