Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38372e31312e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38372e31312e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          Jx0AKNNzEkDhb3oMWHhRtGrEwXFSaEi09uxUh3LjU/U=
Subject key identifier:   D4:FE:53:CD:7C:B0:4C:CC:AD:67:86:36:35:63:37:98:56:4F:B5:F7
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       655FC7B875153AF4A3077CD8866278D7114E1D80
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38372e31312e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:11 +0000
ROA not before:           Thu 03 Aug 2023 13:04:11 +0000
ROA not after:            Thu 01 Aug 2024 13:09:11 +0000
asID:                     262617
IP address blocks:        177.87.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5f:c7:b8:75:15:3a:f4:a3:07:7c:d8:86:62:78:d7:11:4e:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:11 2023 GMT
            Not After : Aug  1 13:09:11 2024 GMT
        Subject: CN=D4FE53CD7CB04CCCAD67863635633798564FB5F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:45:fa:fd:0d:22:f3:6d:d5:36:52:a2:43:
                    49:98:e1:f7:59:fc:6d:a2:c5:fc:79:3c:e5:0d:67:
                    43:c6:6c:7c:43:1e:6a:91:7b:07:75:f0:96:28:80:
                    d0:94:27:60:ea:d8:0b:7a:e9:d0:ac:9d:cb:36:a3:
                    62:80:84:10:8f:a1:67:03:95:92:6d:31:ab:14:a8:
                    75:a5:e1:5e:8d:1b:d3:90:16:2b:92:c5:cd:6f:93:
                    64:57:4b:83:25:48:0e:9d:c7:a2:cc:d8:6a:93:6f:
                    19:11:36:bf:61:d6:fb:82:9c:b0:10:b1:68:28:8d:
                    35:da:61:8f:f3:9c:9b:a9:45:41:c4:43:7b:d1:4a:
                    64:0c:25:07:f6:b4:bf:c8:7d:99:7e:2e:b7:25:a4:
                    3c:a7:7d:e7:65:45:d3:90:c2:fe:83:67:1e:3c:8d:
                    ca:f6:ce:31:60:bd:41:10:98:ae:00:31:89:67:c6:
                    b0:aa:44:8e:00:b4:11:0a:6c:56:c1:19:28:55:6e:
                    e3:94:8a:2d:21:b0:6a:5b:13:bc:cb:22:e6:8b:a5:
                    88:f6:4e:57:cf:a9:09:2c:8e:db:86:df:17:7f:dd:
                    3d:af:c3:06:4e:85:53:c4:46:59:8b:81:3a:d3:ef:
                    c9:af:74:8b:47:52:be:39:3e:a1:fc:35:c7:8f:33:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FE:53:CD:7C:B0:4C:CC:AD:67:86:36:35:63:37:98:56:4F:B5:F7
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38372e31312e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:39:4a:d1:80:ae:42:23:f3:89:70:15:71:f1:1e:13:ac:0e:
         83:78:bd:8a:b0:49:e6:a2:8c:26:3e:9a:42:dc:ef:06:ad:26:
         4a:ac:20:fb:90:fd:85:b9:96:1d:76:08:09:fe:35:02:58:61:
         e8:59:75:73:25:5f:b7:6f:be:f9:b1:6b:82:55:b6:34:8a:86:
         6f:7b:2d:96:e6:b1:63:cf:b9:b8:b7:31:6c:80:47:db:d9:67:
         67:9e:56:09:35:f3:1f:8c:2b:2d:54:4f:12:f7:0d:bd:51:f5:
         0e:97:1a:c3:c0:fd:b9:fc:2d:87:fd:7c:da:59:db:2f:7a:de:
         8d:ab:8e:4c:67:93:49:05:ca:a1:ce:19:82:0d:74:3d:3a:02:
         6f:f3:36:e7:01:6c:f3:70:9d:de:8b:11:86:6d:fd:ef:d1:f5:
         30:19:21:b0:3c:e6:38:a3:3a:36:f0:d0:e1:0f:ae:d8:39:42:
         20:61:1e:f5:88:26:8b:f4:f5:81:9a:5a:12:5d:05:2c:ae:05:
         ca:83:c7:ca:73:09:de:84:b2:31:b8:60:67:b2:46:5a:8c:7e:
         24:2a:13:9c:b5:89:ec:9d:c4:70:d7:33:93:25:a2:57:4b:2d:
         b6:4a:17:9c:e1:51:bf:60:a9:a4:49:6f:ca:e7:7d:3e:71:16:
         7a:d0:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org