Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaFL5TNpMBo9J3fiVv3ndPXc8Z7HXSBmgBMVfsSCyJ3j/0/3137372e38342e31362e302f32322d3332203d3e20323632353736.roa
File:                     3137372e38342e31362e302f32322d3332203d3e20323632353736.roa (raw, json)
Hash identifier:          bmw/aBwIUBw/yMijtQebYjTsDMUtsenUbzj0bHB7Lys=
Subject key identifier:   08:CC:AC:6D:FA:40:6C:01:51:B1:E5:28:96:A3:11:6A:B8:D4:AC:FD
Certificate issuer:       /CN=8A8BE111941CDDC38809849D58F2E8A67233B99C
Certificate serial:       468487358F69F438968890150905118456A00BFE
Authority key identifier: 8A:8B:E1:11:94:1C:DD:C3:88:09:84:9D:58:F2:E8:A6:72:33:B9:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A8BE111941CDDC38809849D58F2E8A67233B99C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaFL5TNpMBo9J3fiVv3ndPXc8Z7HXSBmgBMVfsSCyJ3j/0/3137372e38342e31362e302f32322d3332203d3e20323632353736.roa
Signing time:             Thu 20 Jul 2023 17:14:23 +0000
ROA not before:           Thu 20 Jul 2023 17:09:23 +0000
ROA not after:            Thu 18 Jul 2024 17:14:23 +0000
asID:                     262576
IP address blocks:        177.84.16.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:84:87:35:8f:69:f4:38:96:88:90:15:09:05:11:84:56:a0:0b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A8BE111941CDDC38809849D58F2E8A67233B99C
        Validity
            Not Before: Jul 20 17:09:23 2023 GMT
            Not After : Jul 18 17:14:23 2024 GMT
        Subject: CN=08CCAC6DFA406C0151B1E52896A3116AB8D4ACFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:86:4a:e8:81:5d:81:6d:28:90:06:b5:b9:
                    05:0c:c1:9c:95:9a:35:61:8d:d0:3a:cd:17:32:14:
                    1b:92:6f:ca:5e:85:34:fb:80:bc:d2:4d:04:ef:8d:
                    f8:87:46:f8:9b:f5:3c:20:c9:b5:12:ad:94:07:ba:
                    28:3c:69:81:1e:6d:7f:24:e6:b8:2a:3f:2c:17:e1:
                    c7:60:aa:6f:52:05:4e:26:61:0a:97:ed:c9:f7:60:
                    fb:02:33:11:82:8e:6d:a1:be:bd:b2:3b:62:96:3b:
                    51:e4:01:35:8f:e4:27:bb:26:51:70:60:e8:40:a4:
                    3a:5c:fb:e9:64:0f:9f:2e:98:57:45:e9:4f:03:c9:
                    cf:42:9a:e2:fc:8a:1c:6d:89:9b:56:77:f1:2c:99:
                    7b:83:74:f9:95:e0:85:79:dd:c4:af:51:2d:06:9a:
                    06:b6:ae:ff:e6:71:8c:bc:a8:89:4e:6d:4b:4f:c4:
                    13:5f:17:6a:78:d6:09:ff:1f:80:65:31:c5:31:43:
                    d3:10:67:d5:51:72:1a:71:ce:bd:40:29:c6:e9:62:
                    74:be:e3:5b:1d:70:d0:f5:c7:a2:a5:32:44:5c:03:
                    ed:c7:b0:e6:63:ba:2f:cd:da:18:25:e6:91:42:e9:
                    1f:48:35:55:58:f8:6e:44:6f:3c:b8:8d:72:e0:73:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CC:AC:6D:FA:40:6C:01:51:B1:E5:28:96:A3:11:6A:B8:D4:AC:FD
            X509v3 Authority Key Identifier:
                keyid:8A:8B:E1:11:94:1C:DD:C3:88:09:84:9D:58:F2:E8:A6:72:33:B9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaFL5TNpMBo9J3fiVv3ndPXc8Z7HXSBmgBMVfsSCyJ3j/0/8A8BE111941CDDC38809849D58F2E8A67233B99C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A8BE111941CDDC38809849D58F2E8A67233B99C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaFL5TNpMBo9J3fiVv3ndPXc8Z7HXSBmgBMVfsSCyJ3j/0/3137372e38342e31362e302f32322d3332203d3e20323632353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:5f:4b:46:69:af:84:c5:8a:ac:b2:d6:bb:32:4d:14:4c:e3:
         ea:e7:a6:8b:82:c4:72:f4:4f:2b:ca:85:2e:f7:ac:a2:6d:93:
         b6:37:63:43:05:b2:1c:ff:5e:1d:87:7f:ca:84:f5:96:58:0a:
         7a:3c:ff:d1:0b:15:76:de:4a:9e:62:83:b8:74:92:06:e8:21:
         0d:c4:61:79:ae:d9:3d:94:59:26:ae:a7:e9:eb:4c:53:73:90:
         d6:bf:d8:25:1b:39:4b:14:b7:43:e2:3c:0a:69:2d:28:ee:c0:
         d4:fa:6d:19:c2:9a:dd:b0:10:8e:09:f7:45:00:cd:4e:56:f3:
         42:7c:a6:a7:95:a9:97:f1:c2:14:0a:ab:d2:b9:e6:8b:58:88:
         93:19:48:ba:d5:27:2a:d0:b2:bc:32:a3:e1:dd:af:f6:51:0a:
         d2:20:1a:5d:53:43:e4:17:fc:5c:57:f4:e7:3b:2f:7f:c8:66:
         52:7f:36:12:b1:ed:83:27:79:ea:da:07:02:36:29:11:e0:be:
         78:27:bc:80:46:bc:ae:48:64:fe:20:19:38:09:79:d5:97:4a:
         8a:ad:fe:65:01:bf:ab:44:8e:07:77:d1:f4:23:df:bb:6c:af:
         59:a2:f3:a9:fb:f9:8d:50:2b:e2:d3:7c:ff:f6:70:9f:31:45:
         c6:9c:50:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org