Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230302e302f32312d3234203d3e20323632373239.roa
File:                     3137372e39322e3230302e302f32312d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          WwIE6YciGEP5lfj65/fajKmwP91rIPO2ACwteIkwTdM=
Subject key identifier:   8D:80:13:8C:41:D1:6F:2A:23:03:F6:B1:01:2F:8D:63:D0:0F:D8:2F
Certificate issuer:       /CN=588EE00910FA303185B2D60E297C4C76D993A8E1
Certificate serial:       4EAA9EEDD23F5EAFBD2FA3616295B508B84DCF7B
Authority key identifier: 58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230302e302f32312d3234203d3e20323632373239.roa
Signing time:             Tue 25 Jul 2023 15:00:00 +0000
ROA not before:           Tue 25 Jul 2023 14:55:00 +0000
ROA not after:            Tue 23 Jul 2024 15:00:00 +0000
asID:                     262729
IP address blocks:        177.92.200.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:aa:9e:ed:d2:3f:5e:af:bd:2f:a3:61:62:95:b5:08:b8:4d:cf:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588EE00910FA303185B2D60E297C4C76D993A8E1
        Validity
            Not Before: Jul 25 14:55:00 2023 GMT
            Not After : Jul 23 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:f7:d3:8d:87:23:56:9c:bb:5c:0f:08:dd:
                    80:d3:7a:86:c4:5f:53:cd:28:c3:7a:e6:cf:73:ad:
                    d1:ac:ac:c8:73:a4:e8:07:22:5f:ab:b4:ef:60:54:
                    26:44:fc:f5:11:4a:86:9b:26:3e:0d:a2:7b:3b:a4:
                    53:01:bc:66:4d:2f:a0:05:83:59:ea:80:55:c5:87:
                    57:78:01:40:f9:68:cc:4e:3d:7c:69:b4:a6:56:56:
                    d3:8a:b5:2a:f2:3c:d2:ea:2e:5b:e0:a8:ba:6d:02:
                    6f:7c:96:45:ea:f0:cc:80:1e:9c:df:19:eb:24:5c:
                    b6:30:9e:7e:d3:b7:fd:b3:a6:32:74:f8:d7:91:aa:
                    a3:53:da:63:30:88:8e:68:b4:a4:b2:28:63:8f:59:
                    f2:68:da:ba:e4:a8:49:78:eb:6a:8f:1d:ec:63:74:
                    c9:c7:42:ed:9c:a0:f9:26:18:0e:14:2f:80:12:9d:
                    25:cf:62:28:df:79:ce:a9:e0:04:53:20:c2:34:2b:
                    69:37:7e:f7:24:81:96:58:f9:33:a7:ab:da:f5:24:
                    0b:e2:77:01:ae:a5:c4:a3:cc:dd:59:0f:ea:17:92:
                    5e:a1:12:a6:0e:2f:c1:76:75:da:37:ff:32:a5:bf:
                    a1:cd:6e:e6:5d:a9:ac:78:7e:60:33:f3:94:c8:fc:
                    3a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:80:13:8C:41:D1:6F:2A:23:03:F6:B1:01:2F:8D:63:D0:0F:D8:2F
            X509v3 Authority Key Identifier:
                keyid:58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/588EE00910FA303185B2D60E297C4C76D993A8E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230302e302f32312d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:4b:37:21:73:d5:da:2f:29:96:52:f3:bc:7f:5d:c5:02:f4:
         23:88:64:49:94:f4:3e:cd:dc:a9:32:2a:f9:9f:7a:06:23:f2:
         23:05:d0:dd:b1:f6:39:c2:f5:ff:fc:e7:92:8b:39:c3:0e:41:
         a4:4b:30:2c:be:27:cd:9e:5a:32:53:02:8a:cc:29:21:08:49:
         40:c6:b4:d7:34:03:ae:d6:df:cb:a1:7b:96:67:91:1e:15:d5:
         5a:f9:44:39:97:37:98:0d:d3:36:72:81:88:74:39:3e:56:7c:
         48:6d:32:78:63:15:d8:d3:55:4e:fd:68:63:a0:63:60:93:60:
         39:91:b9:d0:0b:59:14:4c:ee:96:44:d1:43:04:eb:e7:06:6d:
         6f:7a:f2:ea:32:06:d4:d0:21:9b:e1:ec:57:0c:10:40:8e:0f:
         50:5b:17:0d:13:9a:11:e6:33:cf:43:f3:3e:2c:38:86:25:8e:
         c3:c4:62:f6:4c:f7:db:00:73:fb:4e:bb:35:1f:da:cd:9c:23:
         76:b2:c1:83:d9:3e:7f:9a:b6:85:91:0c:46:83:ce:48:30:c8:
         d0:49:e3:bb:57:28:23:31:79:74:06:5d:f8:f7:a2:23:e8:ca:
         eb:25:f9:58:8d:ba:83:ef:d3:68:14:34:cb:24:63:c8:08:c9:
         e4:15:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org