Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/3137372e3232312e3132302e302f32312d3234203d3e20323632373839.roa
File:                     3137372e3232312e3132302e302f32312d3234203d3e20323632373839.roa (raw, json)
Hash identifier:          t5Yp71Rr0PUyPPbD3Z/ANcwK+5TPwnHvnznz7HQbKs4=
Subject key identifier:   D7:4F:B5:2E:D9:73:CB:E9:12:59:05:2B:9B:EE:25:92:D2:5D:4B:D5
Certificate issuer:       /CN=78F11995EAE67D9A025C219AE51F0BBF504014BA
Certificate serial:       5CF87E98D9BA3FBC6C6DCC400BD1AF1590B6AE1D
Authority key identifier: 78:F1:19:95:EA:E6:7D:9A:02:5C:21:9A:E5:1F:0B:BF:50:40:14:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78F11995EAE67D9A025C219AE51F0BBF504014BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/3137372e3232312e3132302e302f32312d3234203d3e20323632373839.roa
Signing time:             Fri 28 Jun 2024 17:06:13 +0000
ROA not before:           Fri 28 Jun 2024 17:01:13 +0000
ROA not after:            Fri 27 Jun 2025 17:06:13 +0000
asID:                     262789
IP address blocks:        177.221.120.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f8:7e:98:d9:ba:3f:bc:6c:6d:cc:40:0b:d1:af:15:90:b6:ae:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78F11995EAE67D9A025C219AE51F0BBF504014BA
        Validity
            Not Before: Jun 28 17:01:13 2024 GMT
            Not After : Jun 27 17:06:13 2025 GMT
        Subject: CN=D74FB52ED973CBE91259052B9BEE2592D25D4BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:ff:c1:80:6f:c6:f5:6e:47:3f:a7:b7:dc:
                    6e:3d:6f:49:3a:84:02:43:07:65:1e:50:4f:b6:1c:
                    6d:a4:e7:39:63:de:a7:7f:a9:dd:c3:9d:92:02:32:
                    d6:47:4b:2e:a6:7d:ba:33:0d:63:d6:53:c6:06:c7:
                    23:2a:65:8c:24:84:b0:7e:a1:97:ee:43:6a:67:47:
                    b4:11:ff:01:02:82:0e:c0:40:ad:cc:3a:ca:af:27:
                    3c:f0:50:40:81:99:5c:87:2f:82:cb:20:0b:77:ea:
                    9c:87:99:20:e2:08:6a:e1:84:60:e1:72:f3:63:a4:
                    94:fe:dc:f3:30:32:80:bd:96:2c:03:12:0b:c8:66:
                    bd:89:1f:f1:f7:03:24:37:76:25:db:19:43:75:33:
                    d2:fd:ec:e6:15:aa:c2:b4:10:74:21:65:89:02:dc:
                    29:a0:4b:48:59:29:c7:64:7a:86:e2:26:d6:d7:bf:
                    a4:86:91:03:53:29:09:c4:4a:6b:38:62:5a:0a:a1:
                    a1:1e:41:6e:90:c8:5f:05:b5:09:e5:07:18:e8:dc:
                    27:9d:11:b9:1c:c9:1d:4c:dd:3d:b8:a6:dd:1d:74:
                    ff:9f:f2:b1:cc:f8:7d:b1:d6:ee:a5:e6:2d:a6:bd:
                    7e:b2:07:af:37:00:a2:67:ab:5f:82:eb:f2:60:59:
                    7f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4F:B5:2E:D9:73:CB:E9:12:59:05:2B:9B:EE:25:92:D2:5D:4B:D5
            X509v3 Authority Key Identifier:
                keyid:78:F1:19:95:EA:E6:7D:9A:02:5C:21:9A:E5:1F:0B:BF:50:40:14:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/78F11995EAE67D9A025C219AE51F0BBF504014BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78F11995EAE67D9A025C219AE51F0BBF504014BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/3137372e3232312e3132302e302f32312d3234203d3e20323632373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:34:a0:f8:ed:72:fd:58:4b:e8:73:af:83:38:67:1e:82:03:
         11:4c:2c:d8:bc:00:54:81:7e:e5:63:41:ad:40:ce:20:cb:a0:
         20:d3:bb:fe:ba:f7:de:31:42:d1:45:38:5b:a5:e3:67:00:ab:
         f4:4c:7b:e9:0b:75:8f:eb:c2:39:93:98:d2:57:42:c2:3e:fc:
         48:6b:69:75:4f:7b:5d:be:5b:78:2b:77:e4:b5:49:db:62:f5:
         3a:ae:02:db:ef:66:90:3e:e7:e6:a1:f7:71:6d:d3:e0:b6:b3:
         47:ca:ae:77:aa:52:83:5b:de:45:af:27:bd:77:20:b2:fe:92:
         c2:a0:e5:b4:27:66:8b:29:ca:48:00:0c:07:76:ff:a4:be:52:
         15:f4:52:67:fc:a9:77:da:54:48:97:52:43:23:2c:3d:0d:ee:
         8c:3a:ae:06:21:b9:9a:1e:95:5e:77:a3:d8:4b:c5:bb:7c:24:
         af:c0:3f:07:c8:93:07:87:6e:fe:37:e9:88:ba:7d:96:d1:49:
         00:82:d1:2e:16:19:16:90:1b:9f:a8:9a:e7:3d:dd:8e:8c:ba:
         29:29:dd:2b:d8:b1:ca:ef:b1:0b:17:16:e7:b5:72:17:ce:11:
         b7:fc:b0:da:08:15:3f:2c:50:ac:2f:14:59:21:9d:e6:c5:21:
         97:e4:cf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 13:39:36 2024 by rpki-client on console-fra.rpki-client.org