Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38382e302f32332d3234203d3e20323632393737.roa
File:                     3137372e3139302e38382e302f32332d3234203d3e20323632393737.roa (raw, json)
Hash identifier:          3NaEqhctVHZNazGEpAE2RnDGTDBGMgsC6xVEWmES21w=
Subject key identifier:   88:53:8D:E9:F4:89:40:83:98:37:FC:3F:1D:F4:47:5C:3C:2F:56:A1
Certificate issuer:       /CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
Certificate serial:       3F3F55214FCE95489DC815D2C4CC2E5C80F17F87
Authority key identifier: 11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38382e302f32332d3234203d3e20323632393737.roa
Signing time:             Thu 28 Dec 2023 00:27:58 +0000
ROA not before:           Thu 28 Dec 2023 00:22:58 +0000
ROA not after:            Thu 26 Dec 2024 00:27:58 +0000
asID:                     262977
IP address blocks:        177.190.88.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3f:55:21:4f:ce:95:48:9d:c8:15:d2:c4:cc:2e:5c:80:f1:7f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
        Validity
            Not Before: Dec 28 00:22:58 2023 GMT
            Not After : Dec 26 00:27:58 2024 GMT
        Subject: CN=88538DE9F48940839837FC3F1DF4475C3C2F56A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:de:c1:30:70:68:6b:bd:70:1e:2e:01:7b:
                    83:02:fb:ca:04:3f:13:4d:f9:ca:80:11:87:34:98:
                    8d:46:e5:e0:d2:2e:62:41:48:d2:d9:bd:33:88:5d:
                    ef:ab:38:42:00:8e:72:88:93:a5:37:d1:7e:77:1c:
                    11:88:eb:98:37:5c:5b:a0:0a:58:72:6e:e8:96:c6:
                    1c:86:98:73:7e:1b:77:22:19:04:e9:ca:0e:ee:6e:
                    36:ab:68:3f:11:a6:1c:98:fd:c1:b4:fa:95:3b:85:
                    ac:84:50:d0:51:40:90:0a:44:25:d7:4a:a7:42:f5:
                    74:18:fe:66:68:d3:df:06:ca:f4:5f:fe:9c:6f:af:
                    0c:14:22:30:fc:c5:eb:5a:a7:48:0f:78:0b:f0:3f:
                    69:0e:17:e0:33:85:24:ff:f6:c0:51:70:d4:ba:bd:
                    a3:9d:4b:e6:f7:37:95:f1:2d:41:0b:7d:51:2c:25:
                    73:ea:41:e1:93:f1:bf:72:88:c3:ae:37:33:90:d1:
                    97:19:18:80:00:70:63:5e:d1:e7:cf:b9:f0:4e:0b:
                    26:cb:f4:c1:8e:4a:18:46:e4:7b:3a:82:ee:71:16:
                    dc:5e:cf:18:54:69:29:f3:83:c3:3c:0c:ef:98:33:
                    07:1c:4e:28:87:56:02:0d:67:7b:24:70:ce:76:cd:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:53:8D:E9:F4:89:40:83:98:37:FC:3F:1D:F4:47:5C:3C:2F:56:A1
            X509v3 Authority Key Identifier:
                keyid:11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38382e302f32332d3234203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:7e:0d:88:71:c3:1a:b6:8f:02:9c:a5:4c:b1:4f:eb:32:7c:
         57:66:5b:97:f4:81:15:0b:de:61:b8:94:b4:86:7d:2f:b0:1e:
         88:68:62:aa:19:41:3a:52:52:53:ed:ac:08:6e:8e:97:ca:aa:
         87:b6:5b:d4:8e:45:f0:be:e5:4a:30:35:f4:db:8a:e2:c2:bd:
         e0:7f:73:dd:fc:28:76:25:9a:72:01:c1:b8:30:87:0f:f7:6c:
         5d:e2:61:4b:56:bb:e0:4e:fd:8e:ac:43:c0:81:dc:38:41:48:
         ec:24:ce:7a:4f:df:38:ee:3b:c1:8e:68:00:58:26:5b:4f:38:
         54:19:6a:7d:b8:b2:7f:55:3d:8b:c2:88:8e:41:fe:81:16:6a:
         d8:4f:f8:c1:28:ef:c5:3b:5e:a6:4c:79:af:c8:81:bf:63:b6:
         83:06:fd:c1:5e:06:53:51:32:56:39:5c:ef:d9:b4:a9:91:ba:
         ad:34:5a:89:a7:bf:a6:4f:94:87:d9:54:0a:b4:e4:fb:d4:59:
         87:e3:1d:72:2c:6d:9b:24:04:bf:5c:d3:a2:a9:8c:a0:ad:55:
         fc:09:fb:36:4c:51:96:c9:66:71:41:a7:0e:63:2f:a8:cd:e0:
         75:92:32:16:50:88:11:9a:03:f3:57:6e:e6:e0:77:12:1a:77:
         3a:34:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:26 2024 by rpki-client on console-ams.rpki-client.org