Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3137372e3133302e322e302f32332d3233203d3e203238323630.roa
File:                     3137372e3133302e322e302f32332d3233203d3e203238323630.roa (raw, json)
Hash identifier:          lXy4jjWE2HfiYAoIPOqCaShVYdlBgu4gIOSFcNFLrlg=
Subject key identifier:   FD:7E:CF:3C:66:53:10:6F:A9:3E:2A:16:86:48:6D:97:B8:50:79:5C
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       4B1726878E14BE57358D2D5725851692C844333B
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3137372e3133302e322e302f32332d3233203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:41 +0000
ROA not before:           Thu 09 Mar 2023 20:12:41 +0000
ROA not after:            Thu 07 Mar 2024 20:17:41 +0000
asID:                     28260
IP address blocks:        177.130.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:17:26:87:8e:14:be:57:35:8d:2d:57:25:85:16:92:c8:44:33:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:41 2023 GMT
            Not After : Mar  7 20:17:41 2024 GMT
        Subject: CN=FD7ECF3C6653106FA93E2A1686486D97B850795C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:46:16:0d:27:a6:d1:fd:a0:b4:39:1e:9e:
                    46:23:1a:6f:57:e8:aa:fc:f2:ae:68:47:02:96:8b:
                    01:61:c6:b0:01:ef:dc:90:54:19:5f:f7:84:90:3a:
                    2d:e8:a2:3b:f1:b1:44:8b:1c:c4:81:b0:95:f7:51:
                    94:52:cc:c7:07:f2:3f:1e:56:3e:12:ca:83:a4:9a:
                    9f:31:c3:b6:3d:b2:6f:91:b0:46:d8:2d:cc:1f:c5:
                    bf:1e:79:8c:49:4a:10:1d:82:97:1c:81:23:90:ae:
                    08:e7:4a:31:6c:6f:76:9b:0a:ce:89:c3:57:64:30:
                    6f:20:d7:95:06:db:d0:a6:77:db:b2:06:2f:ea:14:
                    ea:b6:6f:3d:44:26:58:61:b4:f3:c6:62:2d:66:19:
                    75:0d:c8:3e:07:69:15:95:e8:85:71:2c:9a:eb:86:
                    43:a7:bb:cd:ab:b8:8d:47:b1:43:a4:9f:1a:bf:d3:
                    72:a4:fd:92:e3:ae:b2:d2:92:ec:d7:fb:e4:d0:24:
                    ca:a9:dd:68:6a:0f:c8:d7:ec:1e:21:f0:2c:ea:48:
                    7f:a0:c7:cc:26:d2:d1:5d:3b:44:b6:5a:5f:61:71:
                    c7:f1:b7:67:54:36:13:21:59:8d:24:ab:be:50:e5:
                    66:80:5a:8e:27:c4:a1:d5:8d:e6:bc:cc:12:35:95:
                    f4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7E:CF:3C:66:53:10:6F:A9:3E:2A:16:86:48:6D:97:B8:50:79:5C
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3137372e3133302e322e302f32332d3233203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:d0:da:b2:1f:b6:34:56:06:8f:88:b6:5b:65:ce:66:be:d9:
         b2:32:da:c4:2b:be:0e:7a:12:93:a8:27:41:54:72:8f:4c:bc:
         52:48:ff:08:3f:b6:a0:58:85:44:1f:de:77:e0:0e:fe:7e:fd:
         6b:4a:cd:53:18:f5:8e:24:31:55:2b:2d:a6:25:06:16:f9:f6:
         b7:8e:18:fa:53:38:28:b4:63:54:0e:f8:87:c9:35:09:52:3a:
         12:20:4a:a7:3a:a2:9e:7c:c0:08:98:f8:d9:04:37:d9:64:2c:
         79:29:f0:c0:99:cd:62:85:3b:14:ed:43:bf:05:d2:19:ba:08:
         12:af:55:cf:e3:c4:46:bb:d9:8d:de:9f:26:c7:ae:f8:e1:fe:
         bd:b5:f0:ff:81:2e:f0:6e:6c:04:bb:51:af:f6:f2:66:f6:f5:
         60:c1:2a:7f:de:39:bc:1d:1d:c5:3d:f6:bc:9e:dd:8b:53:01:
         b8:d2:5b:67:42:bd:21:4d:c6:c3:e9:60:0e:1f:e4:b3:fc:ff:
         b9:81:81:b2:59:66:1f:29:fa:94:59:22:1b:a9:c9:36:c2:f3:
         00:0e:57:ae:56:87:f5:c1:77:30:7e:72:fb:0e:38:e4:d4:db:
         3b:c6:8e:d5:e3:e8:25:4b:72:81:30:33:1d:f2:fb:9f:73:c0:
         b1:80:83:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org