Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/3137372e38372e3234382e302f32332d3234203d3e20323731313535.roa
File:                     3137372e38372e3234382e302f32332d3234203d3e20323731313535.roa (raw, json)
Hash identifier:          C/DF3l3poKliGs0VWfGCfQFXFdpyhW4Eg6gCXrorbl4=
Subject key identifier:   FF:40:EA:87:7C:A3:0A:DE:73:E1:4F:F8:E9:D2:45:8E:B7:BF:00:07
Certificate issuer:       /CN=9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF
Certificate serial:       4BCE0499CB86C924B25E96FC3235BD013D1986A0
Authority key identifier: 9B:07:FF:5C:1E:CD:FE:49:22:F0:BC:DD:35:14:CA:41:27:A6:B4:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/3137372e38372e3234382e302f32332d3234203d3e20323731313535.roa
Signing time:             Wed 20 Dec 2023 20:14:54 +0000
ROA not before:           Wed 20 Dec 2023 20:09:54 +0000
ROA not after:            Wed 18 Dec 2024 20:14:54 +0000
asID:                     271155
IP address blocks:        177.87.248.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ce:04:99:cb:86:c9:24:b2:5e:96:fc:32:35:bd:01:3d:19:86:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF
        Validity
            Not Before: Dec 20 20:09:54 2023 GMT
            Not After : Dec 18 20:14:54 2024 GMT
        Subject: CN=FF40EA877CA30ADE73E14FF8E9D2458EB7BF0007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:63:d7:08:bf:bd:a5:11:91:02:5b:b0:60:
                    b6:fe:b7:35:00:61:03:79:76:43:40:29:95:b0:36:
                    02:da:7b:87:39:0d:57:86:e1:03:be:a8:9f:05:e9:
                    dc:03:b5:3a:c9:1f:84:2a:af:04:cc:22:5e:e7:86:
                    f4:0b:30:75:83:72:f1:fc:50:60:cd:1f:52:61:ea:
                    1c:74:a3:6f:3f:31:9b:e4:d6:75:e0:eb:d5:ba:30:
                    b0:16:db:ce:c5:56:38:a5:9d:e1:4b:b0:75:6d:c0:
                    a8:69:7c:40:a1:b1:eb:25:90:2f:d7:f9:17:e2:05:
                    02:5c:67:2c:50:b0:4c:fb:6e:f9:9e:db:55:4e:6d:
                    35:d5:27:42:98:9d:9e:70:14:f1:8f:5a:9d:64:23:
                    90:4b:08:8c:d8:a0:08:c1:43:ac:a7:27:4b:bd:12:
                    ef:c2:e9:47:00:14:73:03:b7:95:47:af:38:04:45:
                    bc:89:a8:1e:32:48:d2:8b:8f:46:bc:3a:68:4b:b7:
                    dd:46:84:69:78:6c:5d:22:57:00:11:1c:80:ff:d8:
                    78:09:fe:df:e9:59:93:e9:1e:fc:5a:b2:e8:4d:a7:
                    64:79:18:1d:40:b8:ea:21:8f:e7:ba:ad:61:dc:aa:
                    68:4f:c9:6f:0f:99:21:3e:2c:59:2b:84:f1:05:40:
                    41:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:40:EA:87:7C:A3:0A:DE:73:E1:4F:F8:E9:D2:45:8E:B7:BF:00:07
            X509v3 Authority Key Identifier:
                keyid:9B:07:FF:5C:1E:CD:FE:49:22:F0:BC:DD:35:14:CA:41:27:A6:B4:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B07FF5C1ECDFE4922F0BCDD3514CA4127A6B4CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/3137372e38372e3234382e302f32332d3234203d3e20323731313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:e6:15:60:1c:85:37:9e:6c:b3:1d:ab:0c:b9:2f:cb:a5:
         b6:f8:ca:25:bd:1b:e3:88:fb:d9:53:57:db:5d:96:5f:d3:65:
         b2:b8:8f:64:7c:19:1c:90:df:ef:44:4c:c4:88:66:ef:cb:56:
         21:3a:5a:c8:2e:81:67:61:9b:37:81:73:d8:5f:89:18:1f:3e:
         d4:ff:71:20:9b:d5:4b:87:47:cc:24:30:e3:e9:42:c1:8d:b5:
         71:23:8b:07:d1:4a:95:7c:73:9b:5e:70:a1:54:81:a0:8e:bf:
         f6:d7:49:cf:05:be:73:a7:26:21:44:09:98:f8:8e:7e:b1:53:
         14:aa:4a:48:e2:c0:c6:67:79:33:83:c6:e3:27:dd:4a:ac:6e:
         5f:6f:56:5c:73:73:7a:bc:01:d4:c4:b9:91:4e:76:e7:69:d8:
         01:87:5c:0d:1c:5d:5e:0e:d0:82:ce:1e:42:6f:8f:61:4d:b5:
         2f:9f:8e:c1:6b:d8:bf:f1:6d:b2:92:5c:49:2a:a5:6b:f7:68:
         40:30:31:da:91:39:16:9c:df:b0:bf:d6:d2:75:bf:03:4b:2d:
         61:4f:b7:5b:5d:32:cc:2d:a3:1c:c7:43:d0:dc:30:e9:c3:bd:
         09:5e:2b:98:72:05:6f:da:b1:e5:27:f2:04:c8:b1:d9:9d:04:
         6b:cf:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org