Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e38382e302f32322d3232203d3e20323633303134.roa
File:                     3137372e31302e38382e302f32322d3232203d3e20323633303134.roa (raw, json)
Hash identifier:          Tj1u7npgSe4K9WxzhiRenUuFx+npIKN0IANZKvDMA1M=
Subject key identifier:   8E:91:C8:BC:EC:59:8B:44:3A:7A:55:9F:8E:90:72:6C:F7:E9:2B:22
Certificate issuer:       /CN=9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4
Certificate serial:       7B58B36341E3E7A3B287C14555783C152998DE7F
Authority key identifier: 9B:D9:F6:50:7D:7F:5B:C4:E7:62:D6:1F:E6:38:E4:19:F1:AB:34:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e38382e302f32322d3232203d3e20323633303134.roa
Signing time:             Thu 29 Jun 2023 21:00:00 +0000
ROA not before:           Thu 29 Jun 2023 20:55:00 +0000
ROA not after:            Thu 27 Jun 2024 21:00:00 +0000
asID:                     263014
IP address blocks:        177.10.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:58:b3:63:41:e3:e7:a3:b2:87:c1:45:55:78:3c:15:29:98:de:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4
        Validity
            Not Before: Jun 29 20:55:00 2023 GMT
            Not After : Jun 27 21:00:00 2024 GMT
        Subject: CN=3082010A0282010100C621D2A143077EEC32E3475415E9325D8CA08A36736172B0305FB84FAE6D3CC2D9041F832C36953A8307C7C5815484236D2DE3D1B87359014EC49C876456617B03A11CDBB99B7F3E12E7180C704D97F1E7FF96CF94431B5B861CABADE3AAF896B828612029B82246D10C7DAC6F26BC2BF8771777B315552036F032D732ED1766730DAEDCED354CCF2FEEC876D847BA8B90DDBE1BE22EC7DAB30B0E9893555E5FF7D8486022A1003040EFD07B7994265ED7D4FA8D7E6C32ACCC7B1BAEBA4B17F24DD63C33D7A5452FD445390983460CE0635EE244D5F318DA79DF3346474AF76D958D0F5B24260AE7F28B17C4B2CDDA718383AC26B286513C60CDBF8BC6EE822B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:d2:a1:43:07:7e:ec:32:e3:47:54:15:e9:
                    32:5d:8c:a0:8a:36:73:61:72:b0:30:5f:b8:4f:ae:
                    6d:3c:c2:d9:04:1f:83:2c:36:95:3a:83:07:c7:c5:
                    81:54:84:23:6d:2d:e3:d1:b8:73:59:01:4e:c4:9c:
                    87:64:56:61:7b:03:a1:1c:db:b9:9b:7f:3e:12:e7:
                    18:0c:70:4d:97:f1:e7:ff:96:cf:94:43:1b:5b:86:
                    1c:ab:ad:e3:aa:f8:96:b8:28:61:20:29:b8:22:46:
                    d1:0c:7d:ac:6f:26:bc:2b:f8:77:17:77:b3:15:55:
                    20:36:f0:32:d7:32:ed:17:66:73:0d:ae:dc:ed:35:
                    4c:cf:2f:ee:c8:76:d8:47:ba:8b:90:dd:be:1b:e2:
                    2e:c7:da:b3:0b:0e:98:93:55:5e:5f:f7:d8:48:60:
                    22:a1:00:30:40:ef:d0:7b:79:94:26:5e:d7:d4:fa:
                    8d:7e:6c:32:ac:cc:7b:1b:ae:ba:4b:17:f2:4d:d6:
                    3c:33:d7:a5:45:2f:d4:45:39:09:83:46:0c:e0:63:
                    5e:e2:44:d5:f3:18:da:79:df:33:46:47:4a:f7:6d:
                    95:8d:0f:5b:24:26:0a:e7:f2:8b:17:c4:b2:cd:da:
                    71:83:83:ac:26:b2:86:51:3c:60:cd:bf:8b:c6:ee:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:91:C8:BC:EC:59:8B:44:3A:7A:55:9F:8E:90:72:6C:F7:E9:2B:22
            X509v3 Authority Key Identifier:
                keyid:9B:D9:F6:50:7D:7F:5B:C4:E7:62:D6:1F:E6:38:E4:19:F1:AB:34:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e38382e302f32322d3232203d3e20323633303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:dc:35:93:f0:7a:2b:af:7c:46:0a:c7:8e:60:ea:b4:54:99:
         6b:d5:1d:05:4e:90:b0:c3:a3:86:3f:4a:a3:ea:e1:a8:38:f8:
         b0:a2:33:c0:dd:7a:fc:1f:7c:d6:db:d0:72:41:d9:9c:b8:f6:
         60:68:c2:13:87:2d:5c:37:88:a9:aa:88:00:45:44:38:bb:38:
         03:0f:60:f3:ea:78:84:b7:b6:89:81:04:37:bf:00:ce:1b:01:
         79:df:a2:4e:e9:ed:e4:49:12:d5:c3:da:c7:f7:be:64:e0:c5:
         ad:f6:7c:e5:6e:53:44:88:a2:f0:13:29:c2:1a:e5:f7:cf:0f:
         8b:25:2b:16:48:ae:95:10:1a:92:7e:10:1e:8e:58:fe:ea:43:
         2b:73:26:cd:56:c0:59:01:4d:d0:96:00:ea:25:3d:ca:c0:5f:
         c4:40:f3:b9:bb:c1:78:6b:a9:90:8a:6e:f5:d2:c5:36:83:f1:
         7d:cb:ef:79:f1:93:f0:cf:7c:ef:9e:84:7c:68:97:e0:3b:56:
         f8:81:1d:ca:e1:c1:3e:9a:23:a5:c6:f7:1c:77:22:32:40:79:
         3e:1b:11:4f:d0:2a:e7:15:64:29:b7:d2:f9:c5:45:76:b0:17:
         49:80:14:31:e2:45:bc:32:7e:74:5f:79:89:2e:44:e6:7e:4e:
         01:95:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org