Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132302e302f32322d3232203d3e203238353938.roa
File:                     3137372e3130342e3132302e302f32322d3232203d3e203238353938.roa (raw, json)
Hash identifier:          3pNBJj+GpPj4iz39osstmssWoRzQSF2xvBZD1koaXJY=
Subject key identifier:   08:20:8F:DC:4F:C4:D6:57:02:6D:45:5A:ED:0D:28:F8:19:81:2B:D9
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       3D68546FAF36430CC6DB2FB29EDBC295E019AEED
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132302e302f32322d3232203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:00:58 +0000
ROA not before:           Mon 23 Oct 2023 12:55:58 +0000
ROA not after:            Mon 21 Oct 2024 13:00:58 +0000
asID:                     28598
IP address blocks:        177.104.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:68:54:6f:af:36:43:0c:c6:db:2f:b2:9e:db:c2:95:e0:19:ae:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:55:58 2023 GMT
            Not After : Oct 21 13:00:58 2024 GMT
        Subject: CN=08208FDC4FC4D657026D455AED0D28F819812BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:66:73:03:ed:e5:6c:11:2a:27:c4:e8:ec:
                    b3:a9:78:78:c5:fc:46:ec:1d:9d:76:c6:7c:c9:94:
                    a2:25:96:45:6b:0f:e4:1c:7a:a1:cd:1e:6b:b7:91:
                    b3:18:c3:75:ea:46:69:19:96:aa:0e:4c:b8:68:fb:
                    8c:d7:14:99:8b:b3:3b:f0:85:99:9e:8b:2e:40:3b:
                    8f:56:9b:10:e4:09:d3:2a:16:55:e1:5f:c6:ec:32:
                    ef:b4:c6:c1:fe:4c:dd:7b:fe:b4:c5:ed:3a:88:a4:
                    c0:8e:59:83:b6:63:ff:75:40:86:a0:41:c3:59:97:
                    cc:db:09:21:cd:8e:0d:e4:a1:92:ad:23:3a:75:c3:
                    de:05:8b:06:5c:d9:25:70:e6:b6:e7:15:8e:f1:2d:
                    dd:9c:8a:d1:bf:0b:6b:e2:fb:27:40:f1:e5:e6:12:
                    62:39:54:bc:c0:b3:65:b4:7b:02:79:c1:9e:09:48:
                    8e:5b:84:82:1f:0b:4f:03:dc:da:98:0a:57:32:19:
                    7d:e6:86:b8:25:59:79:7f:1f:4f:1d:65:98:c1:fb:
                    3e:bb:7b:7d:c8:af:f5:71:f5:59:be:b4:ab:4d:a1:
                    19:ee:4e:25:07:fd:d2:fa:4b:a8:cd:cd:e8:53:8c:
                    1b:ff:97:7a:a1:76:a9:66:93:47:b2:93:ed:0c:67:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:20:8F:DC:4F:C4:D6:57:02:6D:45:5A:ED:0D:28:F8:19:81:2B:D9
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132302e302f32322d3232203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:25:aa:a4:b4:6b:97:42:72:c0:b6:14:34:ba:45:8f:6a:
         99:b5:74:a4:f2:46:71:9b:a6:7f:3f:7a:09:ac:1f:ca:9d:6a:
         29:6c:f9:43:e6:5f:da:be:5b:05:a5:8b:96:c1:b5:f0:9b:66:
         99:c1:c6:ad:a1:57:cf:8a:21:45:bc:3b:20:5f:23:71:e5:89:
         e0:81:74:c0:79:cb:d1:f2:34:eb:1e:d3:16:61:e7:d8:ac:65:
         38:5c:a3:33:f5:12:78:e8:11:6d:e8:84:74:1e:49:b3:c4:4e:
         e2:58:45:69:7d:b9:00:79:0c:d3:51:e0:f1:f9:5e:8d:d0:c7:
         22:3e:10:21:9b:5b:9e:e3:f6:40:32:c1:2c:bd:b6:aa:98:de:
         56:da:56:0e:b4:fc:28:d2:0b:d4:2b:ba:60:ed:a9:97:ac:13:
         ec:45:47:9e:ac:06:1d:bd:de:20:b2:fe:0b:cb:4f:26:6a:58:
         b6:10:f7:8b:81:9a:75:e9:fa:ce:04:9d:47:68:ff:24:4e:05:
         67:43:68:0d:68:13:71:b1:fa:d9:32:67:40:14:c3:c7:2f:e0:
         38:ce:3e:18:61:a6:10:e2:4d:95:db:f1:1a:bf:e4:18:fd:8b:
         94:fa:5c:ee:ab:22:2d:5a:52:e6:83:98:02:23:0f:f0:85:f2:
         75:9c:a6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org