Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131322e302f32312d3231203d3e203238353938.roa
File:                     3137372e3130342e3131322e302f32312d3231203d3e203238353938.roa (raw, json)
Hash identifier:          ZB15gQmo4+e8IDjlamXryIMrs789L/mrZWRilRjeJ9I=
Subject key identifier:   AC:62:D2:63:D2:30:3E:B4:75:8C:2B:D6:12:A3:77:75:4A:85:E1:D6
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       092C16FB2D638864571166B6A2D691E4CF30AF47
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131322e302f32312d3231203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:00:57 +0000
ROA not before:           Mon 23 Oct 2023 12:55:57 +0000
ROA not after:            Mon 21 Oct 2024 13:00:57 +0000
asID:                     28598
IP address blocks:        177.104.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2c:16:fb:2d:63:88:64:57:11:66:b6:a2:d6:91:e4:cf:30:af:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:55:57 2023 GMT
            Not After : Oct 21 13:00:57 2024 GMT
        Subject: CN=AC62D263D2303EB4758C2BD612A377754A85E1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:2d:c7:74:ef:d5:bf:71:94:2a:0d:d1:f5:
                    94:5a:69:a2:e0:df:5a:e7:1d:5e:10:be:57:1b:46:
                    b0:a8:51:ba:f9:07:21:c5:06:8e:05:5f:1f:9c:26:
                    c5:82:f3:79:0c:27:47:47:65:f7:5d:9d:8d:0b:50:
                    f1:39:fb:3d:11:91:58:2b:c8:e0:8f:e0:de:01:72:
                    06:11:3f:77:ff:f7:56:64:39:11:52:74:8f:8b:39:
                    0d:46:ce:e0:5b:27:53:4a:5f:34:66:99:17:7a:0b:
                    ba:9b:ce:77:67:30:f8:66:bc:e3:ec:6a:45:7d:30:
                    56:31:8a:a1:a3:ee:71:d3:26:a9:10:d2:d8:72:39:
                    fe:c6:d8:0d:cf:a4:ab:a3:7f:29:b7:85:b0:82:97:
                    da:c8:c5:83:64:6b:35:88:8e:f2:47:e4:95:8a:17:
                    58:94:3f:29:2d:ac:57:3a:c4:a8:1b:f6:6e:be:3d:
                    9b:7e:43:6c:ec:a1:9a:b4:2d:d9:f5:34:5e:f1:3d:
                    e2:29:c8:f1:1b:7b:17:f2:35:b5:c6:38:7c:c5:b4:
                    0b:0c:33:27:57:cc:76:3d:a8:09:8a:22:99:a5:d1:
                    bc:84:23:5a:94:7a:4e:78:79:52:5d:a6:9e:21:32:
                    fc:a0:2e:ee:2c:df:0a:eb:36:61:28:8e:9a:c0:50:
                    8c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:62:D2:63:D2:30:3E:B4:75:8C:2B:D6:12:A3:77:75:4A:85:E1:D6
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131322e302f32312d3231203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:8d:f2:a0:0f:b1:41:50:ee:fc:0a:c1:49:0f:0f:2c:f2:69:
         78:0f:cb:fd:f1:4a:95:04:a7:c8:55:fa:52:6e:4a:0c:9a:6f:
         c5:59:32:fc:3c:60:73:9c:7c:59:40:3a:ed:bf:a1:54:36:bd:
         7c:eb:0b:88:d1:8e:27:66:cb:84:14:8f:f6:5f:0f:62:0a:31:
         6c:d4:33:16:f4:60:95:19:f9:96:5d:ff:03:b6:1f:e5:39:e3:
         72:db:83:04:c4:ea:b8:0d:83:6d:0c:ae:8d:29:dc:8c:cd:b7:
         98:01:c9:ba:96:00:2c:e0:8c:05:ad:f9:7c:a3:06:1c:d4:cb:
         e3:f2:04:24:3a:7e:0a:b3:0b:59:10:f1:8c:49:8e:d5:be:0a:
         af:42:8a:f1:2b:e6:f5:cf:88:85:c8:91:df:a3:19:d9:92:bc:
         9d:5a:3b:4c:1a:e5:4e:eb:eb:a5:7d:6c:42:c0:74:87:c7:83:
         77:ba:ce:e4:72:5e:f8:a6:4e:1b:5e:53:82:13:02:77:4f:b1:
         de:9d:24:e4:e8:c1:42:5c:87:4a:74:3d:c3:d7:5d:a5:37:d6:
         f0:9a:cf:73:ff:c4:0c:5b:33:a7:6c:d8:10:77:4f:7d:4b:d0:
         3b:70:35:c6:b3:1e:6e:ac:34:3e:64:05:64:4a:7f:a9:fa:5e:
         89:0d:19:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org