Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131382e302f32332d3234203d3e20323632333031.roa
File:                     3137372e38372e3131382e302f32332d3234203d3e20323632333031.roa (raw, json)
Hash identifier:          KYr6Y9M4a1MEMlJPHud5qsa7m81Y/zTz9TEpcPi2AIo=
Subject key identifier:   71:9F:62:C4:FB:70:B6:65:FC:3B:C7:F5:D4:E2:C9:2D:8D:BE:D3:2C
Certificate issuer:       /CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Certificate serial:       6DE27F23008DBD62780A0805E8C5C6F44BE90479
Authority key identifier: 20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131382e302f32332d3234203d3e20323632333031.roa
Signing time:             Tue 12 Mar 2024 12:56:20 +0000
ROA not before:           Tue 12 Mar 2024 12:51:20 +0000
ROA not after:            Tue 11 Mar 2025 12:56:20 +0000
asID:                     262301
IP address blocks:        177.87.118.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e2:7f:23:00:8d:bd:62:78:0a:08:05:e8:c5:c6:f4:4b:e9:04:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
        Validity
            Not Before: Mar 12 12:51:20 2024 GMT
            Not After : Mar 11 12:56:20 2025 GMT
        Subject: CN=719F62C4FB70B665FC3BC7F5D4E2C92D8DBED32C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:c3:80:1a:08:96:3e:8a:64:ad:0a:5c:1f:
                    13:7a:af:04:b2:95:dc:4b:ab:f7:ad:51:56:dd:c9:
                    c3:e6:92:0d:08:47:76:16:75:e2:98:82:5b:e0:f3:
                    a4:3a:56:6f:d0:7a:8f:70:00:16:3c:28:73:87:c0:
                    4d:06:02:f3:58:4d:a6:32:c8:28:8a:df:c9:cc:5e:
                    28:8d:88:1e:df:fc:27:f4:d7:c6:c3:f4:5f:97:20:
                    ba:22:e9:d6:ad:0f:1d:34:cb:99:b3:5f:b4:26:97:
                    f5:d9:36:26:82:cb:b2:e8:39:0b:e2:18:b5:15:60:
                    91:52:68:80:3f:ec:65:82:ca:a1:5b:29:8b:e5:51:
                    c1:d5:be:88:aa:c5:b7:78:8e:2e:fb:8f:57:8c:34:
                    44:27:f9:5e:9a:dc:2b:e0:03:8a:12:6d:e3:79:f4:
                    48:61:57:ab:ac:9a:68:0b:27:b4:0c:0d:3c:b8:db:
                    9c:4e:02:81:4a:99:e1:c5:79:04:74:31:f3:1b:7f:
                    e5:d8:08:e4:d2:8b:b3:f6:50:1e:ea:11:94:ed:7e:
                    97:ee:fd:83:b4:7a:f5:0e:8e:7d:6b:43:db:ea:e4:
                    e1:97:af:b7:1a:4e:92:c7:5e:cf:65:af:a6:bb:da:
                    41:e2:11:86:3e:d4:6f:33:1a:31:06:a9:60:39:ef:
                    fb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9F:62:C4:FB:70:B6:65:FC:3B:C7:F5:D4:E2:C9:2D:8D:BE:D3:2C
            X509v3 Authority Key Identifier:
                keyid:20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131382e302f32332d3234203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:5f:a0:33:ca:95:86:1f:86:b9:64:6f:8b:e4:eb:26:b7:97:
         25:b9:48:0f:fb:14:a8:12:27:4f:27:15:e9:50:1a:b6:07:86:
         60:6f:25:ee:cf:d8:39:9b:76:45:ec:cb:8d:c4:ef:05:15:c5:
         f5:75:52:55:d9:80:b2:88:8c:ca:21:fb:85:6d:67:93:fe:de:
         e4:5e:99:02:11:2f:40:65:9b:93:c8:2d:6c:ed:29:36:59:43:
         04:b6:3a:4d:a8:7b:28:6f:40:66:1a:f3:0d:88:4b:bf:d0:12:
         0b:00:ac:ed:b5:af:90:2b:c3:f9:b1:1c:5e:68:95:fa:1e:a6:
         11:ad:61:2f:ab:eb:c0:d1:89:9f:59:cb:9a:f2:ea:74:9b:d8:
         a9:d1:8d:46:9d:86:0a:a0:51:ee:27:c9:cb:66:65:d1:3b:f5:
         d4:db:21:7d:16:8d:74:ea:44:9b:d8:04:a3:d8:9c:7d:bd:3b:
         3a:ab:e5:3d:54:28:ff:49:cd:57:d3:ac:56:21:8f:7b:76:2a:
         cc:fd:5e:80:54:a5:f5:65:41:a2:3b:dc:9a:cf:55:02:ef:c9:
         57:fa:a2:48:39:2c:fa:f7:08:d9:84:13:6d:a9:9c:d3:37:20:
         1a:1e:72:7f:cc:ce:58:df:b3:86:7b:55:1d:aa:e7:c1:d8:1d:
         07:90:e3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org