Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132372e302f32342d3234203d3e203237373135.roa
File:                     3137372e36372e3132372e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          OY41D2FcU9yJxzC8d3nR4mIZZ07Q3MCxLr2dKJnrcNQ=
Subject key identifier:   82:8F:45:88:9E:4A:FD:CF:07:D5:81:86:BB:43:B8:12:17:50:88:62
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       598A315485DF3FF50F4692C950D7C15EAD485A7B
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132372e302f32342d3234203d3e203237373135.roa
Signing time:             Wed 08 Nov 2023 17:22:36 +0000
ROA not before:           Wed 08 Nov 2023 17:17:36 +0000
ROA not after:            Wed 06 Nov 2024 17:22:36 +0000
asID:                     27715
IP address blocks:        177.67.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8a:31:54:85:df:3f:f5:0f:46:92:c9:50:d7:c1:5e:ad:48:5a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Nov  8 17:17:36 2023 GMT
            Not After : Nov  6 17:22:36 2024 GMT
        Subject: CN=828F45889E4AFDCF07D58186BB43B81217508862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:e2:e3:a8:dc:71:7d:5d:66:01:a1:1a:81:
                    71:fc:0b:d2:b5:c5:6f:3f:1b:13:99:8a:49:c5:d6:
                    ad:99:19:48:46:f6:09:79:7b:f9:5d:d4:4e:9a:86:
                    b4:c2:e7:51:c6:27:aa:6c:80:c1:83:b8:57:2b:a4:
                    51:b7:35:e1:3e:80:00:4c:db:17:06:1c:9c:89:4f:
                    a1:bf:44:80:45:5b:e9:f6:bb:d6:be:40:bf:93:3c:
                    4b:f9:69:fc:50:cc:54:d2:e1:71:04:f7:05:12:76:
                    b6:14:72:f0:4d:0b:1c:b0:31:e0:bf:b4:07:ff:70:
                    51:78:11:a0:a9:e9:9d:08:91:54:81:91:54:55:7a:
                    61:e1:84:7c:ca:68:0f:01:50:f5:d2:2e:93:bb:c5:
                    98:e5:b1:21:da:48:9a:75:c6:c1:b8:94:63:71:12:
                    18:01:a0:da:d1:84:17:a8:bc:21:5b:cc:fc:c7:25:
                    0c:e2:8f:a0:f3:fb:4a:37:75:77:4f:c0:c9:38:f7:
                    7f:4a:c0:2d:4e:17:65:c6:95:1a:39:82:cb:0e:ec:
                    fd:f5:d4:18:f3:33:e2:ea:83:ee:4f:d0:d1:09:34:
                    87:9e:00:b6:46:6e:84:81:d7:34:bb:e7:60:56:48:
                    63:c9:d2:64:12:29:14:46:e9:dc:26:c1:1b:8b:ee:
                    e6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8F:45:88:9E:4A:FD:CF:07:D5:81:86:BB:43:B8:12:17:50:88:62
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132372e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:a1:4a:49:5a:8a:80:ee:a0:60:ce:fb:47:69:12:1a:ac:26:
         64:3d:29:a7:96:7b:ca:73:a6:8b:86:a4:78:2e:5a:ad:4b:6a:
         e8:2f:34:d4:7d:ee:d6:78:a2:4d:81:85:2a:ff:90:2a:36:29:
         2e:05:22:07:a4:06:70:98:c2:16:0e:c7:79:c3:8d:84:00:dc:
         5b:2b:df:da:40:11:7c:f4:7a:28:d5:a4:b9:2d:82:2c:be:57:
         0d:f1:4a:5d:b1:b0:39:40:d2:05:39:3e:c0:9b:4d:93:fe:b7:
         c9:93:6c:78:ac:e2:2e:00:84:3e:f2:46:06:c3:0d:62:fa:65:
         00:49:59:af:15:ba:75:3b:5b:2c:14:d6:8e:ce:c9:90:da:54:
         f5:e3:82:18:94:1d:04:ed:63:a2:a7:a8:fd:eb:5c:d4:86:32:
         36:bc:06:0d:d8:98:bf:93:de:da:03:28:db:19:b1:dd:c8:b1:
         d6:e8:a0:fe:88:2f:e1:9d:82:64:63:94:80:33:aa:72:d4:39:
         0b:2d:65:92:bf:4a:a0:dd:8f:94:22:9c:fd:88:ad:62:9e:8c:
         dd:b0:a9:e2:0e:87:8b:58:12:a6:43:cc:5a:7f:76:14:f9:26:
         e1:68:83:ed:bc:a6:e2:a9:c5:22:96:89:e4:c0:db:3e:3a:cd:
         b8:cc:f0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org