Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/3137372e38372e3230302e302f32342d3234203d3e203532353837.roa
File:                     3137372e38372e3230302e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          5j62586EEtN6vMB6S9hY3E+dL+u/U8O7RpjPMLQzJKA=
Subject key identifier:   82:F0:6D:65:AC:4B:8B:A8:B8:5F:F4:8A:3B:0F:AD:65:72:B2:F1:EE
Certificate issuer:       /CN=78588D531B2F637866CA4E230867722DEA2BE617
Certificate serial:       1C597EBCF2188A43D2987D19607BDEAAF8D28A96
Authority key identifier: 78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78588D531B2F637866CA4E230867722DEA2BE617.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/3137372e38372e3230302e302f32342d3234203d3e203532353837.roa
Signing time:             Sat 17 Feb 2024 11:59:27 +0000
ROA not before:           Sat 17 Feb 2024 11:54:27 +0000
ROA not after:            Sat 15 Feb 2025 11:59:27 +0000
asID:                     52587
IP address blocks:        177.87.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:59:7e:bc:f2:18:8a:43:d2:98:7d:19:60:7b:de:aa:f8:d2:8a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78588D531B2F637866CA4E230867722DEA2BE617
        Validity
            Not Before: Feb 17 11:54:27 2024 GMT
            Not After : Feb 15 11:59:27 2025 GMT
        Subject: CN=82F06D65AC4B8BA8B85FF48A3B0FAD6572B2F1EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2e:91:a3:5a:a3:86:bd:26:22:cb:11:13:11:
                    d7:11:76:50:cb:d3:d0:81:bf:f9:a3:c2:49:e5:a6:
                    5c:dc:95:88:56:f1:d8:99:a4:bd:d8:ef:0c:0d:db:
                    cc:c2:65:33:c8:82:f0:ea:c4:ed:77:c9:0e:e7:ea:
                    67:e3:16:4b:49:27:b7:c6:14:64:ac:97:1b:68:79:
                    87:33:f8:a9:e5:b0:42:ea:3e:f6:c7:9a:4c:48:31:
                    14:02:29:a6:61:3f:ff:0b:1b:f3:81:94:c5:ca:06:
                    e3:61:79:6a:d0:d9:89:6f:51:fa:01:e2:64:26:c7:
                    a1:ff:ce:b1:f3:15:52:50:fb:74:12:1d:57:86:9b:
                    24:9c:f2:d4:cd:43:77:e0:ef:eb:64:c9:6f:a7:63:
                    a5:19:32:4e:3b:9e:a9:18:25:13:31:03:2d:26:0e:
                    60:2f:2f:66:b6:a4:d1:47:2f:71:ee:d6:0b:f2:59:
                    44:67:81:b1:d4:8d:e1:8d:a6:d1:64:98:28:f1:e5:
                    79:2a:77:79:27:b4:5b:41:8e:8c:b6:8a:02:f4:29:
                    ad:88:7c:fe:4b:e3:d6:2a:42:d9:75:74:d0:c0:a0:
                    94:14:d1:01:3e:f7:27:63:29:ed:dd:e9:df:30:11:
                    bb:e9:c7:3d:a7:39:ff:ea:50:ee:a0:5b:ec:7c:88:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F0:6D:65:AC:4B:8B:A8:B8:5F:F4:8A:3B:0F:AD:65:72:B2:F1:EE
            X509v3 Authority Key Identifier:
                keyid:78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/78588D531B2F637866CA4E230867722DEA2BE617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78588D531B2F637866CA4E230867722DEA2BE617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/3137372e38372e3230302e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:2b:fc:f5:6e:f3:e6:3b:cb:ae:e7:6d:dc:5e:45:79:e1:01:
         8d:63:85:5d:6d:12:56:2e:42:48:e3:86:6d:c6:c6:00:d0:b0:
         d2:32:6e:8d:ed:3f:ee:fe:05:c1:31:69:f5:f8:d1:fd:cd:cf:
         76:a1:73:e9:03:f4:5e:70:aa:dd:09:2f:61:ed:ef:45:8f:c8:
         37:e5:6c:66:5b:f0:fe:08:32:11:d3:04:6e:bc:27:a7:1e:95:
         4e:23:09:1d:3a:f8:8d:a5:17:97:32:38:80:a5:91:fe:d3:a9:
         3f:14:63:42:04:01:56:b8:50:f7:7a:ac:0b:87:70:4e:d7:53:
         a1:2b:35:48:7b:9b:44:18:e8:30:55:1b:00:68:68:47:6a:70:
         a5:ff:dd:d3:d1:c5:45:f7:ef:30:6b:fd:ee:2e:f5:1b:19:59:
         fc:a8:12:ed:49:ca:cf:32:b0:6a:aa:d3:53:a3:83:00:5f:d0:
         21:05:ef:1b:08:6e:ce:1e:61:89:5c:04:c1:3e:e7:c1:05:80:
         0c:bf:cf:ad:cf:90:77:b5:0b:a3:4c:53:4c:92:09:65:b1:b1:
         cc:6a:52:47:58:20:a2:e2:1d:de:b7:15:8a:26:25:fe:f5:02:
         7b:90:43:d9:d3:43:0f:b4:4d:2c:a3:d0:41:2d:be:60:4e:2e:
         98:64:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org