Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33322e302f32302d3332203d3e20323632383330.roa
File:                     3137372e382e33322e302f32302d3332203d3e20323632383330.roa (raw, json)
Hash identifier:          yT0kLlxDlUMKQzuKW3PYS0qHZR6JSA3Bt4y5jk+3nLU=
Subject key identifier:   90:C1:6F:93:C8:A0:01:66:D4:67:66:81:6C:FA:C2:1D:AF:41:58:3C
Certificate issuer:       /CN=C2E766FF08C2E10FBAC140414BCC53321D358C79
Certificate serial:       7FCDA9377D6067DFE99B4144EE3960C467A1637A
Authority key identifier: C2:E7:66:FF:08:C2:E1:0F:BA:C1:40:41:4B:CC:53:32:1D:35:8C:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33322e302f32302d3332203d3e20323632383330.roa
Signing time:             Tue 02 Apr 2024 11:31:43 +0000
ROA not before:           Tue 02 Apr 2024 11:26:43 +0000
ROA not after:            Tue 01 Apr 2025 11:31:43 +0000
asID:                     262830
IP address blocks:        177.8.32.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cd:a9:37:7d:60:67:df:e9:9b:41:44:ee:39:60:c4:67:a1:63:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2E766FF08C2E10FBAC140414BCC53321D358C79
        Validity
            Not Before: Apr  2 11:26:43 2024 GMT
            Not After : Apr  1 11:31:43 2025 GMT
        Subject: CN=90C16F93C8A00166D46766816CFAC21DAF41583C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:3a:da:24:0d:2c:5f:18:1e:cc:02:a2:55:
                    1d:1e:bc:b2:f1:2c:8e:11:a6:9d:39:65:43:ac:e0:
                    3c:cc:05:4e:33:2b:0c:31:b9:11:7c:01:0e:b1:55:
                    89:a5:2f:60:fd:51:5c:29:b0:cb:b3:7a:c3:dc:ab:
                    d7:13:f3:04:59:66:78:63:31:6b:73:46:2b:9d:a9:
                    be:fe:ee:39:3e:1d:16:21:e1:11:82:c1:5b:e1:37:
                    06:13:8e:1b:59:ba:aa:0f:74:7a:85:6f:0a:58:99:
                    5e:05:77:30:16:c5:60:59:2c:43:91:fe:7f:c4:a2:
                    54:99:df:9e:d7:77:eb:03:7d:e7:e0:a0:60:05:27:
                    bb:69:04:cc:95:1d:14:ac:df:4b:7c:97:1a:5d:42:
                    3b:44:e1:c9:bb:df:c2:12:9b:ef:12:69:f9:28:4a:
                    13:a2:21:56:f3:bd:6f:7b:8f:bc:8b:18:4c:19:45:
                    e6:ad:74:a9:99:e5:60:c4:56:fd:22:13:74:ca:7f:
                    60:ea:f5:90:8d:ec:ef:6a:6e:6a:f4:89:36:a3:03:
                    6d:c6:0c:56:72:11:45:9f:be:2c:64:9e:32:0f:a8:
                    a3:c4:8d:86:f4:96:c5:25:98:57:1a:e7:1d:80:16:
                    c6:a3:88:00:b7:d1:08:51:22:9c:75:f3:f8:f6:d8:
                    1e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C1:6F:93:C8:A0:01:66:D4:67:66:81:6C:FA:C2:1D:AF:41:58:3C
            X509v3 Authority Key Identifier:
                keyid:C2:E7:66:FF:08:C2:E1:0F:BA:C1:40:41:4B:CC:53:32:1D:35:8C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33322e302f32302d3332203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:02:68:7f:9e:ae:f9:c8:f8:21:b9:75:d2:73:36:59:98:a6:
         7a:2b:67:38:59:f9:0a:0a:c0:e8:ca:42:14:31:56:0a:83:2c:
         88:a6:74:ac:bb:f2:36:60:85:86:0a:6f:ec:c9:d2:0a:2f:25:
         92:64:88:48:cc:75:2d:01:2c:97:98:39:f0:07:96:cd:09:3e:
         83:de:80:16:39:df:c0:e9:ea:90:3f:42:6e:66:35:84:39:7a:
         ee:3f:86:91:2f:2d:32:08:6e:3e:ee:ee:2f:0e:1c:ea:af:e4:
         dd:37:c7:61:96:9f:a1:00:33:b0:07:92:ba:0b:e0:6a:49:4c:
         ee:7e:d4:3c:1c:96:21:b3:aa:e1:6b:39:25:13:c9:cb:e2:c9:
         34:60:55:5c:1d:fd:89:5f:d8:e4:7d:41:51:a7:34:3c:59:9a:
         61:ee:78:c1:5e:fe:e8:2f:94:13:8f:2a:70:a3:76:2d:03:a2:
         dc:02:b7:10:74:28:f0:4a:89:95:83:76:3a:57:38:58:8a:2e:
         3c:42:08:25:9a:96:e8:34:e9:c8:0a:fb:4c:53:4a:39:ac:e4:
         9d:e3:99:3e:31:0d:d9:c3:66:b7:c3:3c:52:66:7f:30:aa:70:
         ab:1a:09:7d:9e:59:4f:5d:ad:5c:25:a6:df:64:b8:25:31:0a:
         66:b1:e7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org