Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e38382e302f32342d3234203d3e20323633303134.roa
File:                     3137372e31302e38382e302f32342d3234203d3e20323633303134.roa (raw, json)
Hash identifier:          CnID52cHBH3RPGLcSilB0ZEJKI0w53JkcRi34lp7nL4=
Subject key identifier:   5B:20:4F:08:B0:7B:E0:15:93:EC:66:24:39:97:A6:34:EA:F3:DA:0A
Certificate issuer:       /CN=9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4
Certificate serial:       6BF4873D5ACBA4240E86C7D88C908627BFBA53F8
Authority key identifier: 9B:D9:F6:50:7D:7F:5B:C4:E7:62:D6:1F:E6:38:E4:19:F1:AB:34:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e38382e302f32342d3234203d3e20323633303134.roa
Signing time:             Thu 11 Apr 2024 21:00:00 +0000
ROA not before:           Thu 11 Apr 2024 20:55:00 +0000
ROA not after:            Thu 10 Apr 2025 21:00:00 +0000
asID:                     263014
IP address blocks:        177.10.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f4:87:3d:5a:cb:a4:24:0e:86:c7:d8:8c:90:86:27:bf:ba:53:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4
        Validity
            Not Before: Apr 11 20:55:00 2024 GMT
            Not After : Apr 10 21:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dd:b1:34:fc:75:cb:6e:4b:50:46:0e:ea:d1:
                    cd:a7:80:8f:db:af:92:05:03:f5:59:5b:80:73:c7:
                    0d:e4:ee:97:13:a9:c6:b1:77:3c:1b:ed:3a:13:82:
                    ed:89:9c:16:3e:ca:27:a0:46:f5:d4:bb:72:88:59:
                    6f:a2:02:0f:47:d0:4e:c7:76:5e:cc:3a:89:ba:da:
                    1f:5a:7e:3e:4c:a1:df:fe:a8:34:33:80:23:f7:ff:
                    09:22:c1:b4:97:94:49:cd:07:2f:42:77:80:ed:3a:
                    c6:e2:17:d8:b5:97:e3:d3:7c:0c:7f:4f:b8:46:de:
                    a9:ba:7e:e7:aa:50:37:59:0b:e1:4a:c9:0e:ac:68:
                    77:5b:69:6c:d0:70:60:f1:eb:fc:4e:c6:58:fd:42:
                    c4:2e:ef:1a:2d:f2:5d:58:94:3f:cf:6e:f6:23:ba:
                    44:6d:3f:54:04:37:e8:a6:a2:dd:5b:0c:bb:56:72:
                    6f:8a:c9:ab:5b:57:1c:cf:a9:e8:ea:a3:a1:09:79:
                    2c:f7:16:4b:90:88:65:b0:32:03:a1:54:22:a6:34:
                    49:a4:1b:61:ee:84:97:0c:a8:24:b8:11:25:ee:02:
                    ee:3f:4a:47:cb:10:51:50:6e:67:92:d4:64:91:cf:
                    ec:71:a9:0f:42:eb:d3:ad:4b:a8:51:20:b1:8e:7c:
                    50:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:20:4F:08:B0:7B:E0:15:93:EC:66:24:39:97:A6:34:EA:F3:DA:0A
            X509v3 Authority Key Identifier:
                keyid:9B:D9:F6:50:7D:7F:5B:C4:E7:62:D6:1F:E6:38:E4:19:F1:AB:34:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BD9F6507D7F5BC4E762D61FE638E419F1AB34E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/0/3137372e31302e38382e302f32342d3234203d3e20323633303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:27:52:c2:c5:e1:87:55:83:34:74:c4:59:69:49:52:58:7e:
         4d:59:57:82:6f:c2:34:29:fa:cd:8d:40:99:c1:2f:ab:95:66:
         1a:f9:fc:74:b0:69:b2:d8:8c:5b:f4:72:60:db:bf:96:da:07:
         3f:f8:ec:95:2e:e6:9b:c3:8f:6e:1f:80:9b:6a:b7:8d:c9:97:
         d6:21:1a:bc:83:ea:d8:2c:af:57:d5:1a:f7:1a:8d:dc:99:cb:
         7f:48:32:01:f9:8c:87:70:f6:a4:05:52:60:37:f1:98:cc:d8:
         e9:bf:3d:47:2b:5b:98:ee:cb:e3:19:ed:99:e6:5f:b5:b2:41:
         61:e7:ff:fe:02:dd:07:66:2f:cb:24:c3:54:25:37:a4:3e:0c:
         b3:02:31:48:92:30:bc:11:05:cd:06:0d:81:fb:e4:ca:3e:56:
         22:28:bc:2a:99:77:92:ea:cf:7b:1b:d8:80:a8:ff:12:ac:2c:
         2c:2d:17:e8:da:b5:38:fa:b8:8d:f0:ac:8b:d0:05:de:13:bf:
         ce:e7:76:e9:5a:58:fa:88:fe:ee:27:33:b6:05:3c:2c:2c:60:
         33:72:b7:55:ed:7d:84:9e:53:6d:2d:ee:c7:92:8d:66:94:06:
         aa:42:f6:c4:67:ab:ea:b3:80:dd:f9:ea:19:26:6f:84:b3:f6:
         d1:eb:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org