Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38372e392e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38372e392e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          fJTtzoY7LfoaQMhH3bzVGZhldWuxxDvKuOIdU/uPMq0=
Subject key identifier:   ED:C8:3F:F8:AD:75:5B:4C:F1:B3:10:BE:50:37:F0:6D:75:B5:70:9C
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       2B98D420622490D66B62F3E442F461F9A785343D
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38372e392e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:08 +0000
ROA not before:           Thu 03 Aug 2023 13:04:08 +0000
ROA not after:            Thu 01 Aug 2024 13:09:08 +0000
asID:                     262617
IP address blocks:        177.87.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:98:d4:20:62:24:90:d6:6b:62:f3:e4:42:f4:61:f9:a7:85:34:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:08 2023 GMT
            Not After : Aug  1 13:09:08 2024 GMT
        Subject: CN=EDC83FF8AD755B4CF1B310BE5037F06D75B5709C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3e:2d:6a:9f:ce:20:0e:d7:9d:fb:53:ce:f2:
                    7a:82:01:59:7c:11:da:69:19:b2:4d:20:c3:c5:34:
                    82:fb:8b:0a:0b:90:fc:87:65:42:5d:13:a6:f2:6d:
                    91:70:2b:d8:6c:d8:8d:3a:f5:80:41:33:e5:f4:8f:
                    c4:84:95:a0:99:d6:e6:38:d8:bf:74:a6:32:1e:15:
                    60:5e:15:b1:01:64:2c:05:29:29:41:60:a2:a1:12:
                    53:74:bd:48:6a:16:64:8c:4e:93:78:b8:b4:5e:8e:
                    72:03:25:87:74:b7:66:56:d7:41:6b:37:de:08:1a:
                    cd:46:38:1c:ff:93:02:04:f0:e0:39:c0:32:c2:44:
                    89:37:50:d7:1e:6e:dd:26:b3:97:bd:07:f5:89:83:
                    f3:5d:2d:20:cb:e4:4a:b0:1a:49:87:8a:4d:de:de:
                    84:1b:27:64:a5:27:f4:06:a3:de:c6:05:cd:5f:ee:
                    c2:ea:a3:c9:b8:e4:f5:45:1c:5f:45:de:75:48:f5:
                    41:c9:d3:a1:7e:56:10:34:e9:7c:24:e5:0a:58:a5:
                    78:8d:ae:f6:50:36:e6:5e:9e:a1:fe:1f:dd:df:3c:
                    9e:0a:de:dc:1c:94:e9:49:25:0d:3c:94:0f:6e:52:
                    63:30:14:2f:42:94:31:0d:db:54:8b:45:51:e4:ea:
                    fd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C8:3F:F8:AD:75:5B:4C:F1:B3:10:BE:50:37:F0:6D:75:B5:70:9C
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38372e392e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:1e:d8:02:e0:c3:2c:cd:91:81:ac:1c:c1:51:99:1c:42:bd:
         1d:15:a2:35:4d:cd:a0:a4:32:37:7d:30:a1:3f:5f:a5:12:81:
         1f:6c:43:8c:cb:e3:13:6f:83:b3:63:1f:91:53:f6:db:17:22:
         78:60:79:10:01:6f:e5:7e:cf:75:ab:f1:d8:72:78:b6:35:f8:
         58:9b:5e:58:a8:18:d3:12:5b:f1:ea:c9:9c:ce:ad:c4:dc:b2:
         4c:41:c8:3d:2c:12:20:01:39:be:2b:65:31:1e:3b:c6:41:b5:
         3a:26:ea:ee:00:68:ad:ef:46:72:fd:45:19:25:9b:6a:6f:a9:
         19:33:59:8f:b0:46:5a:f5:c3:f3:46:f6:83:9e:2c:07:03:58:
         d9:4b:01:66:1b:60:58:39:fe:c3:41:9d:2a:57:4a:a2:c2:c1:
         97:a9:16:29:b8:35:1c:a1:10:5b:55:27:39:c0:a3:43:09:2e:
         b8:3e:30:c0:a2:bc:a1:a8:5e:ad:32:df:93:3c:e6:1d:c4:45:
         6c:f6:46:ce:a7:4b:78:89:c2:7d:d9:de:66:5e:8b:bc:97:8e:
         bf:74:aa:4f:1e:cf:d7:74:3d:7c:6c:75:5d:2a:a8:04:e3:e9:
         49:42:13:82:e1:86:62:45:47:ec:59:53:15:c5:ff:2f:9b:5b:
         5e:2e:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org