Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/3137372e38372e3230322e302f32332d3233203d3e203532353837.roa
File:                     3137372e38372e3230322e302f32332d3233203d3e203532353837.roa (raw, json)
Hash identifier:          TOkwPX442P47RJklC2f3iK1ju5089Qaizb4LopZLUGU=
Subject key identifier:   E1:DE:A5:7B:B8:C6:39:AB:C9:A8:E2:8E:A4:59:60:23:99:B8:92:D9
Certificate issuer:       /CN=78588D531B2F637866CA4E230867722DEA2BE617
Certificate serial:       584FC3096CB7BB68A079A9252C5742AC1EEF6CD7
Authority key identifier: 78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78588D531B2F637866CA4E230867722DEA2BE617.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/3137372e38372e3230322e302f32332d3233203d3e203532353837.roa
Signing time:             Sat 17 Feb 2024 12:00:45 +0000
ROA not before:           Sat 17 Feb 2024 11:55:45 +0000
ROA not after:            Sat 15 Feb 2025 12:00:45 +0000
asID:                     52587
IP address blocks:        177.87.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4f:c3:09:6c:b7:bb:68:a0:79:a9:25:2c:57:42:ac:1e:ef:6c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78588D531B2F637866CA4E230867722DEA2BE617
        Validity
            Not Before: Feb 17 11:55:45 2024 GMT
            Not After : Feb 15 12:00:45 2025 GMT
        Subject: CN=E1DEA57BB8C639ABC9A8E28EA459602399B892D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:2c:5c:cb:af:b0:6f:26:73:ed:a5:ac:c6:
                    cb:69:a9:cf:46:19:5f:d3:21:98:80:e1:ba:d2:bf:
                    6e:88:47:4f:a9:c1:57:06:0a:b2:4f:7d:63:4b:c3:
                    c7:34:7e:06:98:95:d6:a7:17:22:75:24:6f:ed:83:
                    e5:65:3b:33:1f:e3:02:d0:4d:3e:2d:e1:ba:f3:3e:
                    a8:9a:31:e4:73:40:2e:06:ae:f2:3d:c6:6c:46:7f:
                    b0:3e:8c:a1:06:b0:d8:c9:98:fb:23:ce:b6:90:45:
                    13:ba:27:b2:20:27:b0:8f:52:99:dd:0c:f6:72:4c:
                    88:b3:25:13:00:91:5f:12:55:ad:da:88:c9:5e:85:
                    8c:d4:1e:d2:8b:72:89:b1:eb:d3:bc:3a:8a:fa:27:
                    90:6b:53:bd:31:b8:97:dc:cf:ee:a9:0e:a6:2f:69:
                    72:47:eb:c3:cd:ad:9f:01:cb:e5:b6:e4:c2:19:e0:
                    5f:e1:ae:75:4c:64:cb:72:37:ea:ec:34:2b:ea:f5:
                    2a:4b:5c:7a:54:ee:2d:ac:07:c9:58:de:9e:ba:12:
                    d6:d8:5e:7f:97:b8:8f:9a:6e:b5:58:b0:19:a1:e1:
                    ac:c4:be:34:cf:0c:60:83:06:df:97:f1:04:34:88:
                    ac:6f:f6:d2:9e:60:5e:40:ea:d4:9e:ab:ef:be:a0:
                    4c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DE:A5:7B:B8:C6:39:AB:C9:A8:E2:8E:A4:59:60:23:99:B8:92:D9
            X509v3 Authority Key Identifier:
                keyid:78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/78588D531B2F637866CA4E230867722DEA2BE617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78588D531B2F637866CA4E230867722DEA2BE617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/3137372e38372e3230322e302f32332d3233203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:9c:f5:d8:5e:ad:7f:22:e1:cd:85:48:92:43:f1:14:13:ad:
         56:42:fb:59:4a:1f:f5:84:84:6e:f5:a9:ae:12:f8:7e:9d:06:
         34:37:00:ca:d9:07:44:4a:14:95:61:64:b4:af:ad:d8:f0:88:
         fc:13:b7:ab:47:7a:70:9a:d1:77:8b:04:9f:5d:5a:4a:07:a2:
         f1:12:39:38:81:e7:0c:7f:8d:e2:bb:15:03:82:df:00:08:b9:
         9e:35:ed:6b:f8:de:6c:d7:29:30:a6:3f:ed:b2:54:c9:28:1e:
         b6:18:38:2d:50:67:01:13:a2:2b:6d:dd:cf:6a:0f:d5:3d:c5:
         6c:81:b6:d7:d8:1a:39:e3:7a:a4:7a:dd:69:90:43:28:0c:c6:
         1f:32:29:43:54:9a:94:57:c8:c4:64:2f:6a:9b:64:da:51:e6:
         d0:fd:ea:6f:75:71:4e:9d:aa:2b:ce:5e:01:aa:38:15:db:a8:
         cb:e7:db:0c:b2:87:17:0f:5f:17:97:c6:20:8d:9b:26:1b:31:
         c3:74:32:f9:34:29:8c:69:9c:70:bf:8e:27:ab:6c:92:8f:42:
         57:a5:bf:8a:f9:17:8c:b5:47:72:f1:a2:42:3d:25:36:ce:34:
         36:0b:b1:07:89:79:e6:a0:0a:1e:1d:f7:37:0c:e5:98:9d:a5:
         09:61:17:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org