Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3137362e302f32322d3232203d3e20323632353439.roa
File:                     3137372e37322e3137362e302f32322d3232203d3e20323632353439.roa (raw, json)
Hash identifier:          hZF8mvBY9ZzseY8kcjEOJ0j9+hq6/RMZveeXTQmmiH8=
Subject key identifier:   77:02:6A:B6:36:FE:5D:89:B1:12:51:DB:DA:06:10:C6:9C:FC:9F:5A
Certificate issuer:       /CN=8E929E44F4E460DD232A372077C8427817A7F840
Certificate serial:       3B5C5765F91D6A910F4A9DB63D2EFD9CBF9EBF72
Authority key identifier: 8E:92:9E:44:F4:E4:60:DD:23:2A:37:20:77:C8:42:78:17:A7:F8:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E929E44F4E460DD232A372077C8427817A7F840.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3137362e302f32322d3232203d3e20323632353439.roa
Signing time:             Thu 10 Aug 2023 12:13:11 +0000
ROA not before:           Thu 10 Aug 2023 12:08:11 +0000
ROA not after:            Thu 08 Aug 2024 12:13:11 +0000
asID:                     262549
IP address blocks:        177.72.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5c:57:65:f9:1d:6a:91:0f:4a:9d:b6:3d:2e:fd:9c:bf:9e:bf:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E929E44F4E460DD232A372077C8427817A7F840
        Validity
            Not Before: Aug 10 12:08:11 2023 GMT
            Not After : Aug  8 12:13:11 2024 GMT
        Subject: CN=77026AB636FE5D89B11251DBDA0610C69CFC9F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:58:cb:99:f9:aa:aa:e0:cd:a8:5f:ab:db:
                    16:de:0b:a2:a2:80:c8:69:4f:9e:b4:a4:eb:2f:d9:
                    67:4c:3c:f6:08:1e:6b:9e:4b:64:42:68:37:f9:1b:
                    71:90:db:68:75:1f:24:b2:82:13:95:f3:1a:33:ad:
                    f8:eb:e6:38:c8:43:f0:14:99:6a:b1:89:1f:c7:fe:
                    e2:6f:a1:c3:fe:0f:46:8a:43:28:f8:cc:b0:75:b6:
                    29:4a:9b:7a:72:4d:01:2b:5e:4b:75:ca:75:9f:32:
                    a3:24:d9:a5:2f:10:e0:32:06:55:e8:54:e2:54:d6:
                    30:1a:81:11:82:b0:fb:ed:dc:46:9a:8c:7f:bc:95:
                    97:b4:ff:b3:da:50:f6:a9:27:1a:c8:c7:b1:94:16:
                    37:e8:84:d9:94:d7:37:96:82:62:04:af:e5:f8:17:
                    7b:0b:90:83:57:df:76:3a:56:c9:da:cd:ed:1f:93:
                    e2:50:5a:c3:d7:f3:e7:78:f3:df:cd:8e:0a:ce:40:
                    db:0d:c3:8c:66:d4:19:8a:97:e5:57:4d:67:bb:31:
                    19:8e:d0:ec:0c:7b:c6:67:30:59:71:1f:c4:c1:fb:
                    29:4c:9e:73:66:01:e9:5a:2f:13:82:d0:7b:57:bd:
                    69:3c:46:57:2f:d8:57:dc:7c:c7:8e:6d:67:bd:ea:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:02:6A:B6:36:FE:5D:89:B1:12:51:DB:DA:06:10:C6:9C:FC:9F:5A
            X509v3 Authority Key Identifier:
                keyid:8E:92:9E:44:F4:E4:60:DD:23:2A:37:20:77:C8:42:78:17:A7:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/8E929E44F4E460DD232A372077C8427817A7F840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E929E44F4E460DD232A372077C8427817A7F840.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3137362e302f32322d3232203d3e20323632353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:31:f5:68:03:8b:a0:6e:54:97:e9:b8:84:d0:bf:56:f9:72:
         5a:4e:b3:67:98:ed:3b:f6:e2:be:2d:91:cf:31:c2:52:44:20:
         1c:a7:f7:90:19:a4:d5:a1:08:d0:63:07:bf:3f:ae:ee:05:87:
         b1:42:69:8f:80:2c:cf:c5:87:36:73:a4:de:b4:57:9c:61:a2:
         fa:fc:fc:e3:ab:7a:51:d2:e0:61:9b:d7:1f:b0:37:53:30:7e:
         01:c6:52:9a:72:fe:d1:ca:1e:1d:06:25:37:36:50:ef:db:bc:
         1b:96:89:e6:86:0f:05:39:8c:b7:3b:c4:d1:cb:c0:ff:95:47:
         c9:c9:b5:00:f1:82:0e:cd:a5:b8:f9:bc:43:68:5e:f2:93:82:
         f1:19:9e:49:23:4e:4a:6f:29:e5:b3:c1:d6:4f:21:bd:6d:c4:
         e2:83:c6:13:f0:a8:cf:98:b1:54:2f:8a:81:72:80:fa:6b:ca:
         11:73:c1:e8:88:b2:0c:2e:e9:dc:e6:86:d1:0f:8d:db:d8:18:
         01:50:01:24:e4:00:8e:af:b0:bb:cc:f2:90:a5:2b:1f:bc:7f:
         ee:1b:56:25:9b:06:1c:08:30:fa:d1:08:64:91:8c:b5:2f:a8:
         37:97:a7:b6:f5:ef:c5:06:e7:c0:12:be:92:dd:90:9c:2d:c5:
         b8:83:7b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org