Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132342e302f32342d3234203d3e203238353938.roa
File:                     3137372e3130342e3132342e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          WXR+PQSgXR/FM1SnLq+IuyKty4Eob7J0fka3YquLpZU=
Subject key identifier:   93:5D:40:CA:1B:F7:D4:72:51:A9:AE:77:EA:87:53:EC:89:65:A7:36
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       111770A2788EBBB79E423BE1BDB0D6869D9A5235
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132342e302f32342d3234203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:01:01 +0000
ROA not before:           Mon 23 Oct 2023 12:56:01 +0000
ROA not after:            Mon 21 Oct 2024 13:01:01 +0000
asID:                     28598
IP address blocks:        177.104.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:17:70:a2:78:8e:bb:b7:9e:42:3b:e1:bd:b0:d6:86:9d:9a:52:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:56:01 2023 GMT
            Not After : Oct 21 13:01:01 2024 GMT
        Subject: CN=935D40CA1BF7D47251A9AE77EA8753EC8965A736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2f:05:ba:50:8b:cf:d1:91:f3:00:1a:1b:16:
                    ed:ff:34:41:b1:da:6e:ff:99:14:26:74:f3:59:c1:
                    4c:9a:df:b3:83:c0:26:84:d3:09:bb:bd:6b:45:1f:
                    4d:7b:d0:11:41:60:b2:8d:0c:87:b2:b8:fc:10:3d:
                    78:0c:53:bf:0c:11:a4:aa:7d:99:a4:f4:25:57:d8:
                    d0:62:2b:3f:36:f9:26:bf:83:5b:d4:2d:81:66:3a:
                    c2:82:90:56:4f:15:0c:93:15:5e:bb:5c:90:db:c5:
                    3e:04:ec:47:16:e7:84:5a:c7:cc:97:f1:3b:25:d4:
                    43:4b:c7:aa:ac:df:2f:32:e4:c3:ab:03:01:44:09:
                    d1:43:8b:44:51:e2:5c:cd:41:d7:68:c1:5b:7b:b4:
                    65:6b:9d:2c:b1:fd:04:af:99:a8:97:e3:cd:af:58:
                    f2:d1:c1:63:2b:a2:37:b7:b3:94:5b:28:08:9b:e8:
                    b2:dd:b2:0b:1b:91:c9:78:ba:13:4b:bf:94:7c:9c:
                    df:d6:13:56:f2:f0:83:e5:32:53:4a:22:dc:25:cf:
                    8b:d1:f5:f1:0b:97:57:fb:3b:11:fb:16:3c:39:aa:
                    35:72:10:90:3e:ad:75:3a:a1:22:57:3e:5e:02:31:
                    51:dd:6e:92:50:26:a1:8c:81:41:08:b0:12:f5:7c:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5D:40:CA:1B:F7:D4:72:51:A9:AE:77:EA:87:53:EC:89:65:A7:36
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132342e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:32:eb:ad:03:fb:0a:47:04:27:f2:f0:ba:e0:12:4d:e5:1d:
         8b:dc:78:41:d1:d9:57:eb:1a:4c:c2:d7:83:ba:51:99:28:a0:
         ec:51:96:bc:e0:03:cc:22:57:6c:0c:15:05:8b:d5:77:7b:90:
         e5:c9:cc:e5:b8:61:5f:97:3f:ff:9e:99:f6:63:90:b9:5a:ff:
         6b:9f:cb:d6:65:42:a1:00:0e:c2:eb:6d:fc:a5:41:b7:3d:71:
         ec:dd:cc:d0:18:6a:4c:38:14:12:b3:96:0c:0a:06:8e:63:47:
         68:f2:10:57:5e:b2:a0:07:f9:11:d6:de:59:b9:04:72:cf:33:
         26:d6:3e:a1:4c:c9:51:7b:a4:e1:91:85:aa:f3:11:a6:f8:6c:
         83:c7:80:49:12:55:13:a7:c4:38:91:f0:99:34:b3:64:49:9e:
         96:c5:46:4e:f3:b4:da:8d:60:e1:b3:2d:a9:e1:e6:c5:75:24:
         32:8a:cc:a0:5e:7a:89:3f:b9:8a:7a:b0:23:1c:42:ca:80:e1:
         96:0e:2f:37:02:20:dd:69:a2:f9:95:87:0f:56:ab:83:70:c7:
         1f:be:8f:dd:5b:8b:f7:cd:47:50:2e:91:cc:3b:40:25:07:c8:
         3f:5d:24:74:56:27:e5:63:15:e3:77:f5:03:3e:02:3e:b6:c0:
         c8:ff:fe:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org