Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132302e302f32312d3231203d3e203238353938.roa
File:                     3137372e3130342e3132302e302f32312d3231203d3e203238353938.roa (raw, json)
Hash identifier:          zUslLxml6LsZurKxtdojT5PrgqYsG7F0UQVzbWeji2I=
Subject key identifier:   A7:AF:6B:FC:9F:4B:CA:1F:AE:75:36:2E:4B:D1:E1:B3:1A:BD:55:C9
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       2EE5472C81110FFB372BA3019E9ECFE5A59C85D4
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132302e302f32312d3231203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:00:57 +0000
ROA not before:           Mon 23 Oct 2023 12:55:57 +0000
ROA not after:            Mon 21 Oct 2024 13:00:57 +0000
asID:                     28598
IP address blocks:        177.104.120.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e5:47:2c:81:11:0f:fb:37:2b:a3:01:9e:9e:cf:e5:a5:9c:85:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:55:57 2023 GMT
            Not After : Oct 21 13:00:57 2024 GMT
        Subject: CN=A7AF6BFC9F4BCA1FAE75362E4BD1E1B31ABD55C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2f:c9:97:f4:c1:57:47:a2:80:ec:94:b2:8e:
                    92:5e:c5:2a:58:93:51:aa:1c:28:b9:86:07:a8:88:
                    84:92:12:43:2c:d1:c4:9e:e3:42:89:11:74:d0:18:
                    49:0b:0d:be:a0:19:a4:56:e2:f6:b6:e1:ff:b5:06:
                    8c:df:41:e2:4e:9c:2d:a7:65:0a:6f:d9:5b:e9:8f:
                    be:37:3f:ae:92:35:dd:3e:70:c5:2f:cd:4c:35:4f:
                    5c:08:f0:18:d1:86:70:aa:fd:93:58:76:d5:48:1b:
                    c4:fe:da:0a:5f:1a:0c:03:53:46:d3:40:a2:ba:0f:
                    6d:f1:57:a1:83:05:b2:14:25:74:fe:40:dd:fe:bb:
                    80:d8:9a:66:f3:c8:99:f4:ad:fd:8d:b5:50:54:84:
                    b2:83:0a:64:b7:22:72:ff:01:15:d8:ec:5d:57:93:
                    d0:fd:5b:50:57:d3:2d:d1:d6:2b:60:4a:3c:ee:e3:
                    41:10:74:0c:9d:5c:c5:1f:51:63:34:4e:94:4e:0e:
                    c5:d2:28:e3:04:38:ca:55:a5:7d:89:61:e9:50:0e:
                    7d:b6:3c:54:13:df:3e:97:0d:94:18:8c:d2:4b:b4:
                    7a:28:32:0d:53:5a:63:6d:68:b9:fd:08:18:0e:b8:
                    b6:8a:01:8e:d8:04:28:0a:fc:79:f4:c1:8e:25:4a:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AF:6B:FC:9F:4B:CA:1F:AE:75:36:2E:4B:D1:E1:B3:1A:BD:55:C9
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132302e302f32312d3231203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:7b:cf:e7:10:a6:60:4c:2c:96:0b:b8:5a:7b:1c:c0:0f:d2:
         7f:c7:8c:94:aa:ef:9b:f1:6c:43:67:6e:7c:ef:ad:ba:2e:b4:
         2d:a9:35:91:31:62:48:ae:0b:a6:2c:09:55:22:6b:e7:32:eb:
         35:53:f8:47:35:25:1b:28:14:f1:62:32:56:c0:79:a8:50:5d:
         ce:d3:57:f3:3b:69:ad:dd:92:1c:e0:51:08:40:34:ee:62:b3:
         00:da:75:5f:6f:ff:73:fe:eb:66:f4:2b:03:f8:20:c2:15:bf:
         72:f8:fe:99:a1:1a:3e:87:9a:50:c8:a2:a0:8e:4a:1a:fa:ad:
         94:8c:dd:77:75:3d:d7:69:e3:0f:bf:d9:62:39:60:bc:90:f4:
         b8:c0:6b:ab:95:07:72:66:1b:6b:1c:33:e5:38:15:a4:43:f4:
         09:d3:cf:54:5f:85:aa:21:57:23:20:6b:e9:29:d9:13:3b:3d:
         7c:ba:01:4b:93:db:5d:a2:a1:ab:ec:46:65:9b:1a:b6:b2:d5:
         d8:48:18:34:87:a3:be:bb:56:e0:3e:dd:50:e6:58:b8:6f:87:
         83:6a:4a:a8:c3:7a:60:e6:7c:14:af:77:09:bd:74:73:2c:9a:
         58:9e:68:61:83:93:65:03:6c:a5:65:da:ae:59:70:60:d4:92:
         be:1e:67:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org