Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137372e38372e31362e302f32312d3234203d3e203533313731.roa
File:                     3137372e38372e31362e302f32312d3234203d3e203533313731.roa (raw, json)
Hash identifier:          03X/p4tHS7i7hs/0CgCFUYsl5tLUAQedNZMlx3zBS/E=
Subject key identifier:   A6:44:82:CA:44:47:24:4B:91:F0:3E:24:08:D8:B8:40:61:44:D1:94
Certificate issuer:       /CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
Certificate serial:       74E9125A4DD69A37E28D0BD8BAA5D98503984D2E
Authority key identifier: 9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137372e38372e31362e302f32312d3234203d3e203533313731.roa
Signing time:             Fri 03 May 2024 21:04:05 +0000
ROA not before:           Fri 03 May 2024 20:59:05 +0000
ROA not after:            Fri 02 May 2025 21:04:05 +0000
asID:                     53171
IP address blocks:        177.87.16.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e9:12:5a:4d:d6:9a:37:e2:8d:0b:d8:ba:a5:d9:85:03:98:4d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
        Validity
            Not Before: May  3 20:59:05 2024 GMT
            Not After : May  2 21:04:05 2025 GMT
        Subject: CN=A64482CA4447244B91F03E2408D8B8406144D194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:43:6e:16:00:d1:73:5d:bb:91:fe:36:6d:
                    72:1e:6a:06:35:7e:92:d1:ab:71:9a:0c:16:19:fa:
                    60:61:b7:bf:71:0c:7d:aa:83:9f:88:88:63:ba:28:
                    c1:c9:40:67:8c:69:5d:9f:e7:c3:c1:ae:90:ad:d7:
                    4d:27:3f:9f:31:db:73:6d:b9:c6:30:11:3b:47:16:
                    e6:7c:cd:08:4d:03:32:87:85:13:f7:39:d6:04:aa:
                    ef:42:f6:d1:9a:1f:f3:f7:e7:cc:a6:0f:86:55:28:
                    31:69:a8:79:2c:36:1b:67:46:43:2a:3c:36:bb:5a:
                    a3:7a:62:10:b1:7b:ab:e0:27:f4:cd:3c:44:f2:9a:
                    4c:21:2d:45:e1:2d:93:4f:36:f8:9b:07:e2:a7:ed:
                    90:92:05:f0:8f:ee:59:c2:14:7b:ab:2b:89:49:e2:
                    05:69:3d:7f:06:56:e5:7e:c9:b7:8c:d0:89:f5:cc:
                    1a:26:cc:1e:73:79:20:60:77:8f:02:d6:48:30:60:
                    c5:f6:ba:26:eb:8b:a0:a1:d6:bb:00:c8:bc:a3:d2:
                    db:69:ae:19:1c:8d:e8:98:b9:68:27:f3:bc:36:c5:
                    8d:9e:06:e1:2e:4d:2d:3f:c3:24:b4:7c:c0:41:65:
                    6d:80:c8:09:82:a6:12:1d:99:cc:0a:6e:f8:a3:19:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:44:82:CA:44:47:24:4B:91:F0:3E:24:08:D8:B8:40:61:44:D1:94
            X509v3 Authority Key Identifier:
                keyid:9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3137372e38372e31362e302f32312d3234203d3e203533313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:5b:45:6c:98:ed:84:bb:4b:d2:16:2a:3d:d8:46:ce:0f:11:
         df:a1:91:f3:a8:78:40:5d:6b:25:a2:da:f3:7d:6f:7d:de:18:
         ce:bc:b4:b9:27:8b:7c:fa:b2:71:93:61:88:d3:29:80:bc:d1:
         08:20:91:29:ce:9d:86:91:37:92:24:ec:ce:74:bb:34:c6:49:
         5d:a3:8a:52:14:c3:18:a6:36:77:6f:71:85:2c:b5:4e:b9:6f:
         8c:2a:e8:d3:c4:8c:34:8f:92:d9:7a:5c:7b:ec:15:30:12:d4:
         22:2c:89:3d:cf:0e:4e:4b:46:3b:b1:ec:9f:94:21:e3:2c:6a:
         b0:96:bc:04:4d:1e:86:e0:05:c7:45:f4:5f:59:31:f7:af:e6:
         a7:e0:67:5a:dc:e5:31:a3:5e:92:07:07:43:4e:38:08:20:16:
         a9:87:ba:9e:b9:6d:4b:99:8c:2f:f7:38:2c:64:66:1f:53:54:
         b4:72:fb:c0:cf:30:b5:69:30:4e:fb:35:b0:eb:0c:c4:ff:82:
         23:45:4a:45:98:bc:d0:ce:9b:50:03:a8:84:aa:1d:51:58:b8:
         3b:ce:4e:6a:88:62:06:1f:da:02:f2:ec:cf:d1:ec:07:2f:5c:
         c3:58:64:52:b8:44:67:6e:54:39:9a:b5:a7:d3:cd:77:88:70:
         b3:cc:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org