Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132302e302f32312d3234203d3e20323632353138.roa
File:                     3137372e36372e3132302e302f32312d3234203d3e20323632353138.roa (raw, json)
Hash identifier:          cOHzi339MsE1xy4rmY6R0UEZehrhAo1BYyWkVhVBKaM=
Subject key identifier:   FF:D8:FC:13:48:36:12:1A:F1:27:CE:1B:A5:5D:73:F7:94:84:DE:89
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       42BD152FFD4466DDC6FFFAD4112A7570E9FABE8A
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132302e302f32312d3234203d3e20323632353138.roa
Signing time:             Tue 22 Aug 2023 10:02:06 +0000
ROA not before:           Tue 22 Aug 2023 09:57:06 +0000
ROA not after:            Tue 20 Aug 2024 10:02:06 +0000
asID:                     262518
IP address blocks:        177.67.120.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bd:15:2f:fd:44:66:dd:c6:ff:fa:d4:11:2a:75:70:e9:fa:be:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Aug 22 09:57:06 2023 GMT
            Not After : Aug 20 10:02:06 2024 GMT
        Subject: CN=FFD8FC134836121AF127CE1BA55D73F79484DE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:63:da:ce:ea:07:54:ff:eb:e7:b4:51:b9:
                    09:72:eb:bd:3e:54:df:1a:2e:fd:a3:8e:f2:0d:00:
                    4c:be:77:a1:a2:61:a6:4d:75:7e:0a:e1:2c:3b:e0:
                    4e:ec:f2:cf:4a:bf:86:e7:fc:fb:a7:f3:2e:bb:f5:
                    03:77:02:82:19:18:80:d6:0e:62:6d:1f:dc:84:1b:
                    94:f6:77:08:fc:56:ba:a0:e3:83:7b:d9:60:dc:11:
                    b5:ec:35:3d:4f:83:6a:e1:61:48:f0:0c:32:ef:a1:
                    1c:7e:42:42:15:71:9c:9f:58:27:69:a8:e3:01:c2:
                    7b:f9:ab:53:5d:67:42:a3:ac:38:f5:64:9e:0c:4c:
                    e6:21:55:ae:9e:38:d1:34:2f:84:9c:d0:92:98:10:
                    6d:fe:cb:fc:58:ea:2c:08:cd:c9:8a:ff:8e:e5:90:
                    7a:cb:4c:42:ca:ef:67:71:26:80:68:57:06:be:8e:
                    28:f4:23:78:5e:6c:6b:01:dc:32:0d:4a:18:25:ac:
                    f0:ef:7b:4a:0f:84:2e:7b:1a:3c:27:0b:66:73:b4:
                    0d:c2:b2:0b:94:4b:a3:2b:95:49:fe:dd:66:c6:19:
                    9e:72:fa:9a:79:6e:49:9a:75:76:d8:19:80:5e:bc:
                    94:a3:18:3d:10:05:a5:c9:54:5e:c7:69:6a:d2:b4:
                    7e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D8:FC:13:48:36:12:1A:F1:27:CE:1B:A5:5D:73:F7:94:84:DE:89
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132302e302f32312d3234203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:d5:21:8f:4c:42:4b:c9:ba:82:bb:80:4d:47:b8:8a:8b:96:
         55:ee:81:42:e0:58:f7:b1:16:d5:bb:18:c6:a8:12:53:dd:7f:
         bd:70:4b:39:fc:9a:1a:e9:3e:fb:b6:2b:29:c4:24:cb:c1:00:
         4b:56:59:d7:22:c0:b7:e5:08:f1:af:a1:72:ac:11:13:6b:92:
         a7:b4:c6:dc:82:06:29:0e:a2:76:40:ba:30:bd:84:11:fd:97:
         3a:76:31:06:7c:e3:20:1a:8e:d8:12:bf:3a:93:33:d3:90:41:
         38:eb:da:4c:a9:e2:63:53:8f:4e:83:60:21:7c:d1:0e:f1:de:
         33:c9:ca:91:d6:2e:2b:83:3d:85:a5:b9:31:8d:e5:27:21:ad:
         ee:c0:63:8a:28:22:8d:5b:64:aa:ba:8c:e5:08:a4:df:37:c5:
         27:1e:43:c8:40:8c:2b:5e:a7:31:f9:ca:d8:6e:36:50:b8:81:
         f5:74:8e:1b:32:a8:cf:66:77:fb:a2:8b:83:02:b2:61:f5:32:
         da:0a:0b:d8:5a:a5:87:76:c7:2e:f1:7d:d0:0c:25:84:b4:a0:
         13:0b:d7:06:8b:06:09:8d:b9:cb:cc:9e:4d:ee:22:96:fc:99:
         bc:c6:08:5b:ca:1d:ea:76:fa:8a:47:57:e0:12:c1:b2:66:fd:
         15:e2:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org