Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38372e382e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38372e382e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          xumRKfytuIF3cUTIDRQCZ6Jf6BmOoRw/DNXIGLLttQs=
Subject key identifier:   A4:84:CF:65:28:CF:23:31:C5:31:CB:3B:E0:94:2E:29:C1:DF:02:11
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       3FECEFAEBF400C6E200BE71FEC99F9280FC5A4FE
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38372e382e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:09 +0000
ROA not before:           Thu 03 Aug 2023 13:04:09 +0000
ROA not after:            Thu 01 Aug 2024 13:09:09 +0000
asID:                     262617
IP address blocks:        177.87.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ec:ef:ae:bf:40:0c:6e:20:0b:e7:1f:ec:99:f9:28:0f:c5:a4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:09 2023 GMT
            Not After : Aug  1 13:09:09 2024 GMT
        Subject: CN=A484CF6528CF2331C531CB3BE0942E29C1DF0211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:11:7a:9d:23:96:6b:8a:59:5b:bb:cd:f5:
                    8b:eb:ba:b2:0e:f4:04:0f:62:a1:91:b2:32:09:93:
                    e0:9e:9e:c3:ea:48:1e:e5:6a:cb:49:1d:00:29:8a:
                    24:8f:67:be:90:37:04:58:c3:29:da:4c:72:58:88:
                    8c:b5:7c:0b:f3:08:30:f5:96:85:97:16:06:a4:f8:
                    e4:1a:6b:95:34:57:d4:25:4f:a9:e4:23:69:01:0b:
                    0b:d5:a9:dd:4d:a1:a4:f3:08:65:16:e4:37:cb:72:
                    f6:c0:6b:63:dc:7b:4b:5c:48:06:9c:da:6e:49:6b:
                    10:55:e5:5d:af:69:1f:e4:1f:37:d7:55:b3:18:11:
                    29:af:cd:3e:9f:91:a5:a4:0a:97:f4:1c:c5:ae:24:
                    09:c9:ff:40:4a:6f:f7:eb:8e:e6:ae:2b:bd:9e:65:
                    6d:53:ce:29:3e:f2:8c:3d:3a:d4:8d:c9:ce:f0:5e:
                    7f:f4:52:dc:56:1e:0e:49:1a:79:fe:7a:0f:2e:c5:
                    5a:d4:33:6e:43:39:4f:6f:fe:d5:e0:b1:f8:82:bb:
                    ca:7e:27:90:79:bb:92:ee:90:8e:7d:16:b9:76:c1:
                    50:4d:74:22:b7:00:79:79:c9:fa:bf:94:da:5d:0f:
                    bc:c9:66:90:9e:15:7d:a0:0a:08:5e:3e:42:4a:3a:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:84:CF:65:28:CF:23:31:C5:31:CB:3B:E0:94:2E:29:C1:DF:02:11
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38372e382e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:37:b0:ab:76:01:0b:26:a5:3d:3f:72:59:52:6e:c5:6b:6c:
         7f:10:20:57:79:be:fb:ca:25:75:a6:75:4e:3b:e6:68:1c:32:
         d2:a5:e8:73:a8:fd:04:1f:b9:1d:37:b8:9c:a6:87:dd:1d:38:
         d4:a9:f2:86:33:13:27:33:93:97:aa:90:59:64:b5:e3:db:75:
         1e:a5:13:11:4a:3d:cb:fe:bd:cd:25:0e:42:d2:ae:8e:5d:61:
         33:ef:3b:a7:ab:bb:db:88:03:3f:0c:fb:98:dc:21:34:2a:f9:
         44:30:53:ad:b1:26:e5:e5:bb:aa:ad:63:2b:c8:61:e3:8b:f9:
         eb:6d:bf:21:fc:c4:81:79:aa:8d:bc:e0:85:ec:39:f1:34:aa:
         7c:a0:ba:dc:79:14:0d:fc:aa:11:1d:7f:82:78:b4:08:8a:42:
         bc:c0:3b:8b:56:b8:12:90:d2:bd:50:76:e7:75:37:f9:f0:e9:
         68:e9:1d:67:98:06:66:f0:69:2c:eb:c0:48:2f:e2:98:a3:b8:
         82:0b:8f:4c:91:f5:08:84:1c:6a:12:da:33:94:a9:4c:d2:f3:
         ed:5c:ca:4f:bb:95:9c:6b:d1:36:60:c2:88:49:3c:37:84:38:
         6f:f8:4a:36:73:7f:71:de:78:17:5b:4d:dd:61:70:f8:f2:c0:
         6a:5a:50:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org