Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3137372e38372e3130342e302f32322d3234203d3e20323632333030.roa
File:                     3137372e38372e3130342e302f32322d3234203d3e20323632333030.roa (raw, json)
Hash identifier:          vdQoIb1Q+6ETQcFhRHz+7eO/yhCcZWx8A9hQRMCIZJ4=
Subject key identifier:   95:05:ED:6D:DC:1B:8D:B3:27:FF:26:0F:51:CE:80:5E:31:89:DA:DF
Certificate issuer:       /CN=0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40
Certificate serial:       50080B332A74F1CA65EE3ADCBE3BB9475FAD1CD3
Authority key identifier: 0C:41:1B:1D:C2:8D:14:EC:9C:2D:6D:35:F8:EC:D2:23:AB:78:ED:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3137372e38372e3130342e302f32322d3234203d3e20323632333030.roa
Signing time:             Sun 14 Jan 2024 03:44:58 +0000
ROA not before:           Sun 14 Jan 2024 03:39:58 +0000
ROA not after:            Sun 12 Jan 2025 03:44:58 +0000
asID:                     262300
IP address blocks:        177.87.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:08:0b:33:2a:74:f1:ca:65:ee:3a:dc:be:3b:b9:47:5f:ad:1c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40
        Validity
            Not Before: Jan 14 03:39:58 2024 GMT
            Not After : Jan 12 03:44:58 2025 GMT
        Subject: CN=9505ED6DDC1B8DB327FF260F51CE805E3189DADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:84:b2:04:a5:60:2a:de:bf:ea:01:4a:7c:73:
                    f5:89:25:fa:ee:6f:c4:e2:9d:8f:dc:19:9c:6a:0a:
                    30:79:e8:ca:52:12:42:97:8a:38:52:fb:a4:1d:9e:
                    20:be:b0:43:af:35:05:19:ec:69:05:6c:1b:4b:88:
                    11:91:15:5e:3d:60:90:49:52:dd:c5:5a:3c:f0:98:
                    63:10:59:07:33:f6:86:21:97:40:f3:e8:de:f3:97:
                    2e:97:fc:32:7c:80:51:32:d8:bb:9a:87:91:2b:8e:
                    ae:1b:e9:f9:8f:71:d6:59:a1:0b:42:88:d5:3b:95:
                    f0:30:07:4f:aa:f3:fb:40:9e:95:db:94:af:29:05:
                    23:d5:be:97:74:5d:2f:d5:8f:48:f0:7c:7d:df:f6:
                    42:b3:79:20:0f:06:80:3b:9a:8c:98:90:56:34:a7:
                    58:4c:85:b9:76:e8:69:05:c3:f7:29:7b:b7:47:a6:
                    59:5d:5d:cf:0a:55:24:a7:cd:d2:0c:a7:d7:56:8e:
                    9e:9d:f0:b8:4c:3f:e1:dd:68:91:09:89:0f:2a:7b:
                    ec:9e:cb:f8:40:e4:25:71:ca:6e:9c:65:42:a1:d5:
                    98:f9:c1:5b:a3:f1:e0:cb:92:e8:41:1c:ac:7e:5c:
                    1e:5a:9b:b4:db:3f:44:27:76:00:21:23:fb:f7:23:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:05:ED:6D:DC:1B:8D:B3:27:FF:26:0F:51:CE:80:5E:31:89:DA:DF
            X509v3 Authority Key Identifier:
                keyid:0C:41:1B:1D:C2:8D:14:EC:9C:2D:6D:35:F8:EC:D2:23:AB:78:ED:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3137372e38372e3130342e302f32322d3234203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:24:6f:68:cf:97:09:70:ca:82:94:cb:c6:a5:36:18:a9:56:
         61:21:95:12:43:a1:58:d1:78:72:9e:8e:02:a3:0a:98:c6:f8:
         b0:0b:50:b1:4b:43:7d:a3:29:a6:2a:ca:ad:8e:c9:1a:38:41:
         66:de:dc:b5:fb:82:23:70:08:10:4f:7f:b3:24:f7:96:aa:09:
         a4:e8:2b:df:40:89:df:d6:44:99:f7:ab:fc:2d:0f:d6:50:34:
         f6:31:d5:b9:5e:12:f2:3d:12:1d:ad:d9:d1:bb:1d:45:25:5d:
         5c:20:81:1a:55:1e:29:e6:3b:cf:23:cf:7f:f3:df:ea:6e:f8:
         72:4d:7b:6e:42:75:ff:35:21:18:1a:d6:b3:fe:9f:8a:c6:65:
         fc:42:d1:50:3c:a6:b6:6d:28:d9:9d:9c:c9:a6:31:f7:62:76:
         d5:9d:a3:9b:6f:78:bf:ed:bb:5c:76:a5:d9:21:eb:59:b0:89:
         da:c5:89:d0:cb:c9:b7:75:f0:69:6d:89:33:5b:fc:b9:24:e6:
         a4:3e:8d:6d:02:bc:8f:5a:ad:3f:7d:23:ee:d6:06:22:52:5c:
         d2:a4:a9:e4:55:b0:9a:81:35:91:3d:f1:0b:de:61:73:8c:72:
         3d:b7:e9:50:71:0b:0d:c6:3d:b5:d8:fd:6a:f5:b1:95:5c:06:
         e0:26:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org