Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3137372e38372e38382e302f32322d3234203d3e203238333334.roa
File:                     3137372e38372e38382e302f32322d3234203d3e203238333334.roa (raw, json)
Hash identifier:          H9s7HrxiRmg6RuLlkR1PkYeW1s/07Xhc6H8vdsMyCxY=
Subject key identifier:   2A:CB:45:B4:0A:03:A2:F9:A5:E6:71:6E:59:61:01:41:2E:F8:29:1B
Certificate issuer:       /CN=C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9
Certificate serial:       0ED6F25A5587AF7E5B97B39AA399011012B94F90
Authority key identifier: C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3137372e38372e38382e302f32322d3234203d3e203238333334.roa
Signing time:             Tue 30 Jan 2024 20:00:00 +0000
ROA not before:           Tue 30 Jan 2024 19:55:00 +0000
ROA not after:            Tue 28 Jan 2025 20:00:00 +0000
asID:                     28334
IP address blocks:        177.87.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d6:f2:5a:55:87:af:7e:5b:97:b3:9a:a3:99:01:10:12:b9:4f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9
        Validity
            Not Before: Jan 30 19:55:00 2024 GMT
            Not After : Jan 28 20:00:00 2025 GMT
        Subject: CN=2ACB45B40A03A2F9A5E6716E596101412EF8291B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e0:7f:02:29:f3:0b:6b:73:64:44:be:9c:da:
                    20:a5:30:b8:dc:78:d7:e8:74:a7:f9:fd:e6:88:f4:
                    ee:c3:50:36:80:24:e8:62:03:61:5b:02:30:4a:12:
                    38:02:70:9a:ae:d8:96:ca:04:f2:91:67:37:b5:da:
                    ad:e8:ab:63:82:0c:52:ae:c0:e0:6b:3d:cf:9b:28:
                    3e:28:1f:2e:8b:05:86:fd:0b:cd:91:73:a2:51:cf:
                    21:ac:bd:03:ed:76:39:f7:be:14:37:11:07:b5:ad:
                    e0:67:d2:4c:d7:7b:fa:0e:4c:6b:b9:77:54:5f:e2:
                    a8:12:7b:8d:01:81:c8:ee:f2:16:b3:a3:a4:05:38:
                    51:88:c8:57:e3:c3:1f:c5:a1:b8:01:9a:b7:2d:7f:
                    d9:bf:fa:e6:60:a0:a7:82:c1:27:49:d3:3f:69:bf:
                    eb:f4:0b:16:79:ee:26:96:35:be:50:31:33:94:f1:
                    5c:1b:c2:a6:03:e4:fe:72:1b:90:ce:49:74:ff:ff:
                    af:8b:8e:30:85:0f:94:6f:79:60:b1:a4:72:94:0c:
                    56:b0:f0:46:d4:60:6e:e3:d1:64:d6:18:a8:f2:2b:
                    7c:84:3e:ae:af:ca:4e:47:81:01:d3:82:9a:53:ad:
                    ed:6f:98:ff:1f:bb:0e:18:b7:64:57:34:1d:6d:dc:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CB:45:B4:0A:03:A2:F9:A5:E6:71:6E:59:61:01:41:2E:F8:29:1B
            X509v3 Authority Key Identifier:
                keyid:C6:FD:89:54:9D:5B:EF:0C:2C:05:BB:4F:5E:25:3D:1C:02:EE:FD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6FD89549D5BEF0C2C05BB4F5E253D1C02EEFDF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/0/3137372e38372e38382e302f32322d3234203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:99:83:2b:81:f9:ad:b7:bb:bb:14:c0:66:ef:df:fd:06:e0:
         c5:dc:3a:cc:07:fa:4e:19:c4:6f:3c:4e:52:1b:e2:53:30:28:
         e8:5a:0e:9e:f2:9f:e4:45:42:6d:e8:1b:59:cd:bc:c1:9a:65:
         38:c8:21:7b:e5:c2:13:29:19:7c:e8:fe:2b:1c:06:e5:23:9a:
         49:50:20:2d:a9:be:99:26:ce:86:c4:a2:e8:38:23:e5:11:78:
         f1:02:13:1f:1c:47:ab:6e:fc:48:81:54:5a:e4:92:82:10:d8:
         ff:13:be:f6:18:4b:b4:a2:32:58:1c:72:31:2d:0d:47:33:f3:
         ab:63:61:5e:95:a1:db:f8:be:8a:e1:d5:53:29:44:22:0a:75:
         8a:03:bc:b9:a0:6c:12:e9:83:f3:a8:c2:b0:3c:f0:ea:b0:e8:
         47:97:00:21:65:2a:6d:12:e3:bd:04:9a:f0:a7:f3:5e:9c:ca:
         3c:c3:73:c2:b2:18:5e:f6:57:49:3f:70:74:55:ce:c7:e7:58:
         af:7b:ca:0f:ed:58:eb:b8:15:1a:87:fd:36:a6:b1:d8:99:21:
         7f:22:c0:a0:6c:44:db:a6:9e:ad:5a:7a:62:21:23:a3:c9:68:
         11:f2:08:59:d8:7a:d9:c3:e0:a2:7b:3b:3e:d4:6c:86:33:6a:
         a9:12:f4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org