Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/3137372e37312e3130302e302f32342d3234203d3e20323731333336.roa
File:                     3137372e37312e3130302e302f32342d3234203d3e20323731333336.roa (raw, json)
Hash identifier:          epXzKixUQY6xsgG8fihaQ7wfWDTfNQCT/XAVs3Rwyfc=
Subject key identifier:   D4:24:B2:9F:BC:B3:72:66:9A:19:C3:46:A4:D7:88:3C:A6:7D:A5:1E
Certificate issuer:       /CN=C8395D8D16513ABA5BCE3876BC86946E464F3BC7
Certificate serial:       0295BDB97424B80B2C6905233BAB07A1901BEAD3
Authority key identifier: C8:39:5D:8D:16:51:3A:BA:5B:CE:38:76:BC:86:94:6E:46:4F:3B:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/3137372e37312e3130302e302f32342d3234203d3e20323731333336.roa
Signing time:             Wed 12 Jul 2023 01:23:43 +0000
ROA not before:           Wed 12 Jul 2023 01:18:43 +0000
ROA not after:            Wed 10 Jul 2024 01:23:43 +0000
asID:                     271336
IP address blocks:        177.71.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:95:bd:b9:74:24:b8:0b:2c:69:05:23:3b:ab:07:a1:90:1b:ea:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8395D8D16513ABA5BCE3876BC86946E464F3BC7
        Validity
            Not Before: Jul 12 01:18:43 2023 GMT
            Not After : Jul 10 01:23:43 2024 GMT
        Subject: CN=D424B29FBCB372669A19C346A4D7883CA67DA51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:58:55:b9:a0:29:55:bf:e5:05:e7:3c:81:
                    b5:5a:c4:ef:9e:50:82:73:41:99:7c:68:7c:bb:7f:
                    ba:f5:08:d3:67:1b:12:b0:35:ec:fe:d4:07:3c:4d:
                    c1:00:35:7e:74:d9:97:ea:3b:7a:d4:08:d5:55:33:
                    be:e7:98:c7:c4:0c:40:06:41:12:90:e9:47:81:95:
                    f2:69:6e:05:d5:e7:48:75:9e:c1:04:76:bb:36:da:
                    8c:53:5e:e6:27:85:78:85:ac:ad:73:b1:b4:29:49:
                    fb:45:c6:0d:2b:82:6c:69:37:f2:c6:8a:08:24:db:
                    7e:09:a9:b0:42:04:ae:94:a2:3f:79:fa:48:aa:3a:
                    05:3a:de:d0:b1:64:63:5e:ed:c0:cb:87:a2:fa:d2:
                    8f:cc:e6:81:71:11:91:fc:52:67:50:00:1b:e0:ac:
                    2f:bf:7c:2b:fc:25:10:f7:30:a8:5e:83:cd:9b:1d:
                    c8:9a:d7:29:51:26:1a:67:cd:1b:05:4d:6d:4f:a8:
                    fa:ab:d0:b5:56:1f:8d:ac:db:7b:52:39:50:ca:c5:
                    69:2f:db:19:ba:df:4c:e9:bf:5a:d1:ce:68:bb:0a:
                    b4:bf:6f:45:af:4b:f8:82:5a:7a:d2:9d:10:f9:7d:
                    8b:c0:65:f2:27:af:1d:64:51:64:9b:15:e1:95:92:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:24:B2:9F:BC:B3:72:66:9A:19:C3:46:A4:D7:88:3C:A6:7D:A5:1E
            X509v3 Authority Key Identifier:
                keyid:C8:39:5D:8D:16:51:3A:BA:5B:CE:38:76:BC:86:94:6E:46:4F:3B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/3137372e37312e3130302e302f32342d3234203d3e20323731333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:52:42:47:35:b0:b3:98:98:db:ec:c0:80:cf:9c:c4:09:93:
         63:e8:ff:14:79:59:0a:f7:20:11:47:08:04:82:4d:bf:7b:a4:
         b0:90:0c:be:85:34:5b:d0:40:21:3e:2f:a9:1e:15:8e:b7:24:
         0d:3c:ff:ed:56:f3:1f:7d:a6:92:ea:a8:61:5d:a6:71:30:bd:
         bb:d3:ee:31:5d:85:35:bc:99:91:89:15:61:de:2a:ca:a7:e5:
         c1:44:be:53:a1:df:b4:49:61:ec:2a:f3:d4:27:13:93:a6:fc:
         75:39:1a:00:e1:c4:e1:da:02:b0:07:5e:a2:54:89:7d:e4:ff:
         00:21:7b:16:31:ca:cf:c7:0b:d1:dd:fa:fd:56:3f:1a:8b:43:
         94:34:92:a3:fd:84:0e:d2:b4:b7:17:56:7e:12:f1:10:85:d0:
         f5:84:d1:67:86:59:28:2a:54:a1:d3:84:b7:18:6f:57:b8:76:
         65:d7:ee:c2:8a:a6:cb:69:2a:24:9f:13:f8:ce:b9:7b:58:b9:
         25:ad:9f:06:05:81:2c:bc:98:82:3a:dc:fe:78:b3:6d:e7:51:
         3e:55:f7:f7:05:eb:9f:38:a4:14:21:75:0c:04:00:c3:e1:70:
         f2:b7:b6:3e:52:21:2b:ab:4d:85:75:1d:b6:42:e2:a7:14:47:
         e9:e3:a8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org