Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/3137372e38372e3230322e302f32342d3234203d3e203532353837.roa
File:                     3137372e38372e3230322e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          GijdR6TbEGg/X01h6KOBRarmmcT4JVy+DcRd+tXyD+0=
Subject key identifier:   33:85:DB:70:7F:9C:04:B2:56:F0:6A:8B:8F:97:9C:FF:B5:0E:DE:5B
Certificate issuer:       /CN=78588D531B2F637866CA4E230867722DEA2BE617
Certificate serial:       14E66F297512E2CB00C2688FE7DC160F150A4632
Authority key identifier: 78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78588D531B2F637866CA4E230867722DEA2BE617.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/3137372e38372e3230322e302f32342d3234203d3e203532353837.roa
Signing time:             Sat 17 Feb 2024 11:59:58 +0000
ROA not before:           Sat 17 Feb 2024 11:54:58 +0000
ROA not after:            Sat 15 Feb 2025 11:59:58 +0000
asID:                     52587
IP address blocks:        177.87.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e6:6f:29:75:12:e2:cb:00:c2:68:8f:e7:dc:16:0f:15:0a:46:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78588D531B2F637866CA4E230867722DEA2BE617
        Validity
            Not Before: Feb 17 11:54:58 2024 GMT
            Not After : Feb 15 11:59:58 2025 GMT
        Subject: CN=3385DB707F9C04B256F06A8B8F979CFFB50EDE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:f8:6f:83:24:2e:9f:36:f2:f0:9f:d4:08:
                    1e:1e:71:a8:1e:f8:10:aa:35:aa:54:e0:51:f8:32:
                    c7:cc:a0:fe:df:81:2c:27:ea:9b:af:50:f1:ff:20:
                    8c:2c:8e:f8:70:d6:31:1a:95:3d:7f:da:e0:5e:b8:
                    1e:44:fb:d1:2a:4c:a7:aa:5a:4e:04:22:c3:64:47:
                    f1:d8:f2:af:c7:de:28:93:6f:a8:3d:15:a1:7c:b1:
                    ca:40:5c:1c:0b:6c:f0:1f:be:16:f6:e4:cf:19:ae:
                    0f:7f:4d:06:e4:06:a1:96:9b:75:da:3a:a4:53:43:
                    cf:e7:92:68:be:fa:3b:98:94:a2:88:4a:54:9a:da:
                    b9:c6:b1:24:26:dd:19:dc:34:62:ac:59:55:4f:7a:
                    ad:1d:a1:4a:aa:0d:e2:e3:db:ea:4a:a2:f2:c6:65:
                    4f:a2:86:87:42:63:66:19:f6:7f:d7:82:63:0b:77:
                    24:2e:de:b1:81:ac:e7:fa:1e:39:bd:7b:90:39:ed:
                    91:aa:61:15:d6:a2:1f:ff:f7:10:35:1f:3d:53:66:
                    81:52:31:4b:d2:c6:1f:c1:b8:d0:49:6b:b2:9d:2c:
                    82:f9:0c:2b:d3:8a:78:52:9b:ca:78:2b:df:4f:56:
                    26:c5:52:c9:48:dc:0f:cf:63:a5:eb:e4:e1:dc:59:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:85:DB:70:7F:9C:04:B2:56:F0:6A:8B:8F:97:9C:FF:B5:0E:DE:5B
            X509v3 Authority Key Identifier:
                keyid:78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/78588D531B2F637866CA4E230867722DEA2BE617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78588D531B2F637866CA4E230867722DEA2BE617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/3137372e38372e3230322e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:b0:16:a2:97:88:23:19:b0:2a:94:03:fb:d3:dc:62:41:c7:
         54:27:a8:cf:e2:cb:bc:eb:c5:f4:d6:2c:fe:61:20:4d:6f:af:
         cb:e1:47:56:04:2d:0f:09:29:87:f2:b1:68:d7:46:9e:e2:f4:
         aa:69:98:f9:74:e3:20:3c:a0:77:79:e5:0a:33:d8:d5:f6:d9:
         80:55:43:76:70:89:91:2e:05:d6:ed:a1:c0:a1:af:8c:7f:0e:
         a6:e0:7d:24:42:59:b1:e1:14:9e:69:ef:cd:73:41:6a:77:e6:
         67:73:93:e4:5f:9b:f3:ef:c8:2c:ee:85:53:a7:a8:e9:bc:43:
         c0:75:08:83:9c:31:0e:ee:69:53:17:2d:13:40:d0:c6:7f:85:
         ac:25:20:82:fb:37:a8:fd:58:a0:83:f9:13:ca:ca:40:93:5a:
         5b:23:e7:ec:81:7c:69:17:82:d2:da:c8:f1:56:7e:ec:52:46:
         1f:8f:4b:6e:97:11:78:0d:ad:ec:1f:2f:8a:66:53:73:6d:de:
         35:45:be:b1:96:8d:ec:e6:34:68:a3:2a:c0:91:5a:3f:3f:5c:
         15:99:67:d4:7c:11:00:dd:df:07:c1:4a:2b:d3:fe:32:87:fc:
         55:b5:c6:5f:8b:1a:21:43:44:de:a8:41:8b:87:0f:8c:e0:2a:
         7e:6c:75:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org