Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38372e31302e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38372e31302e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          Pfu34gj3QBLnQN0sYXSN4+ZVr/LVeKHpWNGg1mQGVmU=
Subject key identifier:   05:75:77:64:45:5D:2F:A5:1F:36:E4:96:38:5E:57:ED:65:8E:5C:95
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       08ACA6AEF7B0453058D95C8918A18ABEA92F292F
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38372e31302e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:03 +0000
ROA not before:           Thu 03 Aug 2023 13:04:03 +0000
ROA not after:            Thu 01 Aug 2024 13:09:03 +0000
asID:                     262617
IP address blocks:        177.87.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ac:a6:ae:f7:b0:45:30:58:d9:5c:89:18:a1:8a:be:a9:2f:29:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:03 2023 GMT
            Not After : Aug  1 13:09:03 2024 GMT
        Subject: CN=05757764455D2FA51F36E496385E57ED658E5C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:f1:e6:eb:7d:eb:77:4d:83:97:8b:27:92:
                    cf:c9:44:8f:e5:46:9c:0d:60:a4:e3:98:2f:56:ec:
                    b9:29:13:9c:1d:61:e5:a3:7d:62:28:13:3d:44:9d:
                    af:b7:68:ea:ae:13:7f:fd:d8:8d:43:c8:b5:73:0e:
                    73:d1:77:3c:23:8f:2d:33:ad:72:4f:d2:c4:3e:88:
                    97:72:58:93:2d:d5:ab:8c:35:fc:35:47:38:98:5f:
                    63:2c:55:ac:ad:13:9a:fa:be:26:9d:85:4b:c5:76:
                    2c:a1:77:a9:46:d9:34:6f:c0:4f:c7:ef:3c:d6:dd:
                    75:ad:30:a7:97:b9:da:d7:8b:f6:4a:ee:5f:cc:0a:
                    4d:07:6d:ca:53:23:8e:5e:7b:1b:0e:9b:2e:c6:30:
                    0b:fe:3c:ca:29:3d:0f:c1:bf:10:92:67:b6:54:82:
                    54:c3:6a:ab:40:a0:75:26:13:be:b5:19:e0:0f:65:
                    31:60:62:a1:d0:9e:fd:5f:04:c4:db:db:ec:34:5e:
                    6b:f6:60:53:3e:c1:07:e8:10:b5:3f:03:d9:28:6b:
                    93:af:35:d9:a3:31:61:dc:dd:4b:55:c8:93:66:79:
                    20:7e:4e:f2:10:76:e0:0b:a3:b9:f3:c5:38:92:32:
                    6b:f3:d7:d9:9e:be:9e:3b:09:43:d3:8f:25:5d:64:
                    a9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:75:77:64:45:5D:2F:A5:1F:36:E4:96:38:5E:57:ED:65:8E:5C:95
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38372e31302e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:bc:b8:ab:1e:5b:45:e7:61:86:5c:20:1e:40:bd:00:bb:b3:
         06:f8:c2:b7:a0:4f:58:bd:73:f8:8e:5b:a1:06:ae:aa:f7:38:
         c4:de:3e:69:62:45:ab:73:83:3f:1f:75:82:62:83:2a:75:c8:
         9c:1e:b6:fb:ac:58:e4:ba:c6:c8:a9:4d:e6:3b:49:7d:92:7b:
         f1:c9:b8:04:4e:f5:43:55:85:fc:77:ba:7e:31:65:2d:73:9f:
         61:c3:ca:4b:07:bb:7a:5d:54:03:c5:d8:53:8c:07:08:68:33:
         06:be:f4:49:1a:1b:6b:97:5b:ce:5d:00:ae:a7:f1:48:78:52:
         f9:11:84:85:8f:48:ad:ac:18:2a:81:d0:d9:2b:1b:8c:42:43:
         67:08:bb:51:8a:5c:b1:fa:97:c5:b1:a1:bd:b3:15:d8:21:2c:
         97:4a:c8:52:b0:32:73:53:79:07:9b:a8:1a:22:65:52:17:0d:
         cb:5b:a9:86:c6:17:ed:2d:73:4f:0f:54:59:19:0a:a8:68:f0:
         d9:34:22:f8:8b:43:6a:a9:23:f4:d8:4a:78:67:f3:0b:e0:20:
         34:88:d7:46:a9:34:c8:d4:b2:51:41:08:0b:cf:5e:8d:a3:b6:
         4a:07:4e:65:36:8b:05:f4:c0:74:5a:80:b9:5e:81:d9:3d:70:
         d8:22:0b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org