Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131362e302f32322d3232203d3e203238353938.roa
File:                     3137372e3130342e3131362e302f32322d3232203d3e203238353938.roa (raw, json)
Hash identifier:          OkymkB9H/BqrzcgSf2wxjwse9M95iq+sEIEp1CjcP18=
Subject key identifier:   06:67:C8:B1:39:A5:46:B3:29:06:13:54:AB:8C:60:EA:23:10:B6:C1
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       57867CD9863EC42D1F0175B51FD59313B8A63F0C
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131362e302f32322d3232203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:01:00 +0000
ROA not before:           Mon 23 Oct 2023 12:56:00 +0000
ROA not after:            Mon 21 Oct 2024 13:01:00 +0000
asID:                     28598
IP address blocks:        177.104.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:86:7c:d9:86:3e:c4:2d:1f:01:75:b5:1f:d5:93:13:b8:a6:3f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:56:00 2023 GMT
            Not After : Oct 21 13:01:00 2024 GMT
        Subject: CN=0667C8B139A546B329061354AB8C60EA2310B6C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fb:fe:5c:2a:70:93:90:c3:f6:c5:d5:22:ac:
                    7e:0a:f2:ec:b5:1d:ff:ff:16:a1:e7:15:e2:6a:ff:
                    a8:48:f9:ee:42:41:26:49:cd:23:08:08:e7:a5:1a:
                    fd:60:49:14:f3:27:67:d1:04:e8:a5:12:54:b7:8e:
                    73:44:3b:1f:bb:c1:49:6a:ae:21:84:13:5f:40:93:
                    c3:d3:52:ca:83:02:2a:f5:87:75:86:1f:c8:75:7f:
                    52:41:9b:55:19:0a:9b:29:16:f1:09:cd:6b:a7:21:
                    39:5c:54:b1:83:01:82:b9:6f:1c:fe:9d:15:1e:b7:
                    d5:b0:e2:24:6e:2e:fb:3b:f4:0f:0c:25:85:95:2a:
                    ba:51:05:f1:0a:23:b3:ea:39:76:36:d1:d4:06:fc:
                    a8:63:0c:d9:89:4c:f9:e9:55:63:76:51:85:55:b5:
                    65:57:77:85:6d:d4:d4:c4:f8:9b:f8:9f:b3:ec:3f:
                    80:d2:c2:28:47:63:ee:8c:14:6e:63:df:cc:76:ed:
                    e0:75:8e:ef:7f:53:61:35:b4:7e:71:5e:6a:c9:0e:
                    86:41:e2:25:22:63:f8:0f:52:45:18:ac:92:fb:57:
                    e4:43:de:25:eb:22:8a:ae:4d:03:92:d0:bb:cd:ee:
                    93:d8:8d:b8:c9:d2:7c:60:03:c8:6d:58:4e:b6:70:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:67:C8:B1:39:A5:46:B3:29:06:13:54:AB:8C:60:EA:23:10:B6:C1
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131362e302f32322d3232203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:7f:71:68:e4:34:7c:17:f6:5c:cc:da:87:d0:36:69:b0:15:
         c6:96:02:09:be:b5:b6:2b:db:6a:b7:a5:c6:c6:d0:1a:c0:20:
         f7:89:42:7e:5d:da:d6:e9:26:0b:49:65:7d:b5:5b:01:19:23:
         5d:ea:6f:1e:d6:16:92:d2:04:e1:0a:d2:d7:b7:4f:00:be:92:
         00:0f:d2:17:07:af:72:d4:28:3a:06:25:72:2b:2d:6f:d6:c6:
         c8:51:b2:c8:55:e9:9e:20:31:ce:29:90:ca:79:89:f1:ad:a7:
         c8:37:44:90:4d:fc:63:94:03:ab:87:a0:64:e3:fb:54:9a:ed:
         1a:f3:8a:f4:7f:aa:71:a2:dc:86:4f:8c:3a:8a:94:ac:68:33:
         01:bf:bf:1f:33:96:a8:94:dc:a1:c8:f2:90:da:c5:6a:86:f0:
         06:1a:26:7c:49:34:fb:66:be:d8:33:76:b3:a8:13:bb:19:bd:
         60:26:bd:b3:20:4c:38:f6:2c:45:bb:9c:22:e3:f4:e9:f8:8e:
         ad:e2:e0:34:8a:95:e0:64:b0:0a:b1:6e:90:83:3f:c0:22:48:
         4f:8d:2f:fe:d3:aa:89:c1:e1:e2:2b:1c:07:68:8b:a3:25:a1:
         95:1c:87:49:9d:24:86:bd:e4:29:8b:21:6a:af:67:41:58:0d:
         80:ae:41:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org