Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3137372e38372e3132322e302f32342d3234203d3e203533323131.roa
File:                     3137372e38372e3132322e302f32342d3234203d3e203533323131.roa (raw, json)
Hash identifier:          xPlPwEEfPYmD0KsIpO/v+cGmjf81Lr9PbPLE+Uz29p0=
Subject key identifier:   60:A9:7C:46:7D:B7:6C:9C:0B:2B:42:9E:1E:96:30:AE:30:CF:BE:EF
Certificate issuer:       /CN=B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6
Certificate serial:       3AE1A7095D73930286A6B2BD9D7B7185E2699856
Authority key identifier: B8:09:FF:E7:E9:58:FC:2B:24:3C:E9:AB:B1:DF:FD:7F:ED:FE:99:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3137372e38372e3132322e302f32342d3234203d3e203533323131.roa
Signing time:             Sat 19 Feb 2022 17:18:32 +0000
ROA not before:           Sat 19 Feb 2022 17:13:32 +0000
ROA not after:            Sat 18 Feb 2023 17:18:32 +0000
asID:                     53211
IP address blocks:        177.87.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e1:a7:09:5d:73:93:02:86:a6:b2:bd:9d:7b:71:85:e2:69:98:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6
        Validity
            Not Before: Feb 19 17:13:32 2022 GMT
            Not After : Feb 18 17:18:32 2023 GMT
        Subject: CN=60A97C467DB76C9C0B2B429E1E9630AE30CFBEEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f2:84:55:f7:1e:1a:8c:56:80:ca:9b:99:34:
                    90:d0:fb:a5:d5:5a:30:ce:a5:ab:da:49:bb:24:73:
                    66:33:eb:cb:79:d2:42:e8:39:f0:f9:07:9c:94:6e:
                    71:1f:d6:f9:4b:fc:71:0c:25:97:f8:e0:34:82:19:
                    83:66:61:7f:91:ce:31:e5:27:8d:fb:2c:98:6b:4b:
                    f6:c1:e4:c8:bc:a3:4d:32:c8:8e:69:4c:8b:9a:43:
                    60:bb:4d:a3:5f:18:10:bb:5f:c3:08:d3:a8:d4:89:
                    ea:e0:cb:f4:eb:f4:f9:2d:c0:84:b7:d4:de:aa:73:
                    ed:aa:58:1e:6e:7c:bd:ee:0d:e5:29:e5:d7:63:48:
                    2e:54:0b:28:d9:50:74:e1:ce:07:4a:3f:f9:02:24:
                    54:ea:fb:eb:d6:a8:2e:2d:c3:27:5e:97:d8:12:ad:
                    4b:cf:2d:55:f8:02:02:92:44:ab:cb:5b:e1:1c:81:
                    a5:94:1a:7c:bd:a1:12:40:91:4b:81:8c:d9:7f:e6:
                    1f:f6:50:a2:c9:6e:d7:bf:d9:fa:48:85:0f:df:42:
                    48:bb:46:2a:cf:f8:c0:4e:3b:07:46:a1:44:e0:c7:
                    9c:4a:68:5e:69:6f:cb:e8:8b:bb:cd:0b:18:5f:03:
                    ed:dd:e5:1e:43:2c:0f:4e:f8:09:a9:76:f7:ed:7b:
                    4e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A9:7C:46:7D:B7:6C:9C:0B:2B:42:9E:1E:96:30:AE:30:CF:BE:EF
            X509v3 Authority Key Identifier:
                keyid:B8:09:FF:E7:E9:58:FC:2B:24:3C:E9:AB:B1:DF:FD:7F:ED:FE:99:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3137372e38372e3132322e302f32342d3234203d3e203533323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:18:27:e0:1b:e5:0e:cc:ca:ca:bd:bc:c6:6d:3e:1e:8c:a3:
         cc:90:60:92:d1:77:7f:0f:7b:5f:79:9c:2e:7c:18:df:4b:b4:
         bf:e5:a7:21:69:a7:b7:23:55:e3:77:83:6e:a3:a7:09:0c:67:
         51:c7:bf:f8:85:8e:31:8d:e8:0a:88:25:b4:98:3a:7c:2f:4d:
         bc:61:2a:ab:8c:78:13:06:61:45:75:d1:3e:2d:65:af:0c:3b:
         03:73:14:ba:eb:06:fc:bc:ec:78:ee:6b:ae:55:4e:0d:90:e7:
         70:51:7c:cf:74:52:f5:bf:79:2e:33:10:82:30:e9:65:be:9a:
         e5:e4:57:7a:47:8e:42:28:db:4a:9a:4b:d6:6b:7e:b7:df:7b:
         67:69:65:d4:ab:ab:83:9f:b2:29:e1:38:73:2d:12:7c:8d:d4:
         25:ea:30:c3:57:c8:1d:85:1a:e8:ac:29:76:43:58:f0:24:bf:
         50:42:d9:b1:c0:26:c3:33:99:12:91:fe:f5:10:57:df:5f:e3:
         29:d8:d4:03:78:dd:23:ef:a3:f1:4f:e0:6d:4e:31:64:54:ef:
         66:82:fa:80:51:7a:91:eb:c7:2f:35:50:31:31:8c:fb:58:89:
         79:0b:3f:a1:d0:44:9b:5f:05:0d:1d:c3:f7:71:4c:a8:fa:1b:
         54:b0:39:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org