Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/0/3137372e38362e33322e302f32322d3234203d3e20323632363231.roa
File:                     3137372e38362e33322e302f32322d3234203d3e20323632363231.roa (raw, json)
Hash identifier:          7+lc0RrMdgUb6dC+a8UvzCDPDzZxUdGI0wTvKnzFXsQ=
Subject key identifier:   86:39:BE:D8:8E:97:E5:03:DE:85:22:BC:25:3F:ED:81:61:C6:C9:32
Certificate issuer:       /CN=451763EEA73AF05AA3138E10173C59B220D0046A
Certificate serial:       2FBF26760074B2E286E4ED42853FE6A3C776DC94
Authority key identifier: 45:17:63:EE:A7:3A:F0:5A:A3:13:8E:10:17:3C:59:B2:20:D0:04:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/451763EEA73AF05AA3138E10173C59B220D0046A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/0/3137372e38362e33322e302f32322d3234203d3e20323632363231.roa
Signing time:             Thu 07 Dec 2023 12:30:56 +0000
ROA not before:           Thu 07 Dec 2023 12:25:56 +0000
ROA not after:            Thu 05 Dec 2024 12:30:56 +0000
asID:                     262621
IP address blocks:        177.86.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:bf:26:76:00:74:b2:e2:86:e4:ed:42:85:3f:e6:a3:c7:76:dc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451763EEA73AF05AA3138E10173C59B220D0046A
        Validity
            Not Before: Dec  7 12:25:56 2023 GMT
            Not After : Dec  5 12:30:56 2024 GMT
        Subject: CN=8639BED88E97E503DE8522BC253FED8161C6C932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:4b:91:3e:b5:ab:7f:ad:ad:6b:eb:2b:ce:
                    24:e2:ea:be:f1:93:c0:9e:89:60:5c:64:2b:9c:2e:
                    92:cf:e0:67:08:91:44:f5:1e:03:4f:cf:bd:ab:5b:
                    c1:60:b0:1a:af:0e:69:3c:c8:44:1c:73:45:cb:65:
                    d1:17:a5:df:06:69:63:34:f0:cc:71:67:ce:34:0a:
                    8d:76:95:c2:15:05:6c:54:3b:16:b3:ad:14:77:e3:
                    d8:7c:75:db:e7:2a:43:aa:f7:d0:99:a9:bf:7e:34:
                    89:aa:6d:ad:ad:b4:cf:30:17:5d:c7:c0:38:c8:71:
                    4a:dc:bb:49:cd:e2:49:97:0b:a6:7f:ad:8c:53:b7:
                    0f:b1:4f:f6:90:9e:82:59:80:6b:60:cf:0c:86:35:
                    80:42:86:c3:95:99:cd:79:2d:4f:64:ed:06:05:62:
                    44:1c:8a:2c:4e:13:b1:64:15:7a:d1:aa:31:4f:df:
                    d8:5e:43:47:84:d4:4d:96:5c:a9:b8:a5:b0:0c:7f:
                    58:ce:32:51:7a:f4:35:fb:8b:51:fe:32:56:4c:b6:
                    66:31:2a:18:f7:e2:47:56:26:72:3d:16:46:76:b8:
                    57:28:97:43:01:1a:87:f7:7b:de:c1:e0:17:87:d6:
                    dd:d8:94:de:55:a9:12:db:52:2e:3c:4d:3f:08:75:
                    68:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:39:BE:D8:8E:97:E5:03:DE:85:22:BC:25:3F:ED:81:61:C6:C9:32
            X509v3 Authority Key Identifier:
                keyid:45:17:63:EE:A7:3A:F0:5A:A3:13:8E:10:17:3C:59:B2:20:D0:04:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/0/451763EEA73AF05AA3138E10173C59B220D0046A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/451763EEA73AF05AA3138E10173C59B220D0046A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/0/3137372e38362e33322e302f32322d3234203d3e20323632363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:b9:fe:08:96:af:fc:b4:df:ae:b7:ee:f9:4c:13:41:11:9e:
         48:f8:fd:4b:ed:54:89:6c:09:ff:96:7e:eb:66:12:e6:90:f2:
         c0:3a:03:06:95:c6:c9:1b:bb:43:b5:00:be:b6:8e:86:1f:5d:
         7f:be:4f:47:70:05:fe:51:20:54:06:e4:7e:6b:9c:2a:e4:e0:
         cb:16:f8:19:36:5b:10:73:41:cb:39:96:53:3a:e9:6c:53:47:
         75:83:86:5b:04:7d:6f:5f:e3:7b:55:47:6e:11:ac:1a:5b:cd:
         24:56:8d:e2:68:e5:06:da:28:3b:5f:4c:85:fd:be:a4:16:24:
         c1:2c:c0:65:0a:e0:1e:c8:76:5d:af:fb:6b:6a:78:f6:48:86:
         f9:08:d0:ad:f1:8e:df:b5:3e:49:8f:59:cf:b2:6a:e8:a7:9e:
         01:7a:e4:8a:ec:25:8d:96:b5:c7:69:de:38:96:b9:67:99:4c:
         2f:b5:b1:9d:4b:d0:c8:0f:fc:4c:6c:58:00:56:a6:f3:bb:6a:
         35:b9:dc:12:a9:9a:16:40:68:a1:dd:89:cb:4e:78:24:81:9d:
         79:33:87:55:49:8c:5e:8c:8d:de:68:a6:f2:15:63:ac:66:2b:
         22:87:f3:22:26:63:a1:bd:74:eb:ab:c9:d0:f6:a6:7b:dc:91:
         00:59:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org