Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa
File:                     3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          rNEO6H1Ln6Jyh/8tnDyDjeHjcs4pCdnPSIkktxTPvQ8=
Subject key identifier:   C8:C3:D1:1C:72:40:03:A3:E4:70:A5:B9:F0:A7:5A:5B:FA:26:5A:74
Certificate issuer:       /CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
Certificate serial:       12F9AFB6238DFFB61FEA506B9CD830D8C94FEC59
Authority key identifier: 04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa
Signing time:             Wed 22 Nov 2023 13:09:04 +0000
ROA not before:           Wed 22 Nov 2023 13:04:04 +0000
ROA not after:            Wed 20 Nov 2024 13:09:04 +0000
asID:                     262369
IP address blocks:        177.130.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f9:af:b6:23:8d:ff:b6:1f:ea:50:6b:9c:d8:30:d8:c9:4f:ec:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
        Validity
            Not Before: Nov 22 13:04:04 2023 GMT
            Not After : Nov 20 13:09:04 2024 GMT
        Subject: CN=C8C3D11C724003A3E470A5B9F0A75A5BFA265A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:b6:91:7f:d7:2c:1f:cc:5a:61:dc:29:a5:
                    d4:bc:89:e7:4b:ae:4f:51:25:2e:f7:b4:d1:6d:42:
                    d2:6b:f4:3b:48:02:14:05:37:96:82:e9:ab:ef:6e:
                    5a:5f:d4:8b:bd:e2:2c:81:85:95:a0:7a:1f:73:5b:
                    92:d3:bd:3d:55:66:13:71:06:ff:2b:5e:ed:3b:8b:
                    a6:58:1f:e7:c7:b0:2f:85:77:0f:6f:fa:72:28:b6:
                    5d:e4:35:f1:c3:92:31:a9:11:c1:b5:38:e7:cb:41:
                    a8:71:09:63:bb:2d:2d:b8:0a:e6:a6:91:ca:59:41:
                    2a:12:ce:86:ab:d0:6f:a3:d4:43:96:f8:df:09:24:
                    c3:83:da:cf:79:cb:91:05:f1:43:b0:e7:42:8f:72:
                    43:14:7b:2b:69:76:54:81:2b:93:e7:3c:23:14:14:
                    31:f6:e3:86:92:fa:3b:c7:22:bc:a3:3e:2b:e7:8b:
                    d9:7f:35:0b:12:69:0c:e2:27:9d:74:d1:0f:ab:cb:
                    74:b2:8c:51:cc:1d:e8:ad:ae:1a:d4:0b:bc:17:d6:
                    0d:df:51:47:e1:c6:27:c1:17:b3:43:fc:a6:33:38:
                    cf:2e:2e:90:db:9c:c9:df:22:af:c4:3f:29:17:f5:
                    bd:73:f4:6e:20:8c:4c:42:c5:c7:41:5a:26:58:7b:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C3:D1:1C:72:40:03:A3:E4:70:A5:B9:F0:A7:5A:5B:FA:26:5A:74
            X509v3 Authority Key Identifier:
                keyid:04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cc:2c:de:b1:67:f5:c6:72:51:ed:02:8e:76:8c:cb:3d:43:18:
         4a:61:e3:24:fb:65:ea:f7:08:01:8c:7b:90:27:7f:36:62:08:
         f7:fa:1c:4e:45:bc:bb:4a:5b:30:c7:00:0b:09:3b:e5:1a:76:
         c5:6f:99:0a:69:45:94:5a:f5:4b:a6:2a:b3:39:cd:7a:7d:1f:
         c1:f7:97:66:46:32:25:df:2b:60:0e:5d:cf:fc:ef:6a:a2:b1:
         24:6c:1b:8e:1a:35:bf:29:3d:32:1e:26:f8:0b:99:0b:96:28:
         74:df:c4:32:ef:77:ea:9f:9e:de:b9:a6:d1:89:fc:8e:1d:3c:
         f5:22:5b:8b:20:51:69:a3:af:1f:b0:7c:ee:ae:e6:b2:5e:3f:
         8c:15:48:b4:a7:f1:b7:47:33:f6:fb:f9:2e:7e:3a:32:f1:af:
         54:ca:de:4d:d7:fe:90:2c:9b:c9:cc:44:fb:21:c2:ef:4d:0e:
         81:b3:59:32:60:a4:25:59:53:ef:c5:aa:50:c2:cf:7d:6e:f1:
         a3:cf:ff:c3:0e:d8:e3:41:1c:16:a2:05:9e:29:10:c5:93:c7:
         af:f2:e3:91:83:e0:85:d1:2c:4b:70:11:0c:bc:9a:41:92:d2:
         cf:8e:7f:d3:7c:d5:b1:f5:02:b0:fd:a2:6e:a9:66:d3:62:56:
         ef:64:41:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org