Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/3137372e38372e3234382e302f32332d3332203d3e20323731313535.roa
File:                     3137372e38372e3234382e302f32332d3332203d3e20323731313535.roa (raw, json)
Hash identifier:          4lMw7g4A94vdABA7AP9cD81cAqz8TXIPXeW4j7H+/6g=
Subject key identifier:   76:C3:92:7D:CB:49:B0:A9:62:33:56:71:46:D0:5D:08:03:E6:67:71
Certificate issuer:       /CN=44A0A3F77E79040FEEC7F1822ADB061950301667
Certificate serial:       7F83B0CEEEF8F4777858F83FFB0BA0436A130FB3
Authority key identifier: 44:A0:A3:F7:7E:79:04:0F:EE:C7:F1:82:2A:DB:06:19:50:30:16:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44A0A3F77E79040FEEC7F1822ADB061950301667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/3137372e38372e3234382e302f32332d3332203d3e20323731313535.roa
Signing time:             Tue 11 Apr 2023 13:16:45 +0000
ROA not before:           Tue 11 Apr 2023 13:11:45 +0000
ROA not after:            Tue 09 Apr 2024 13:16:45 +0000
asID:                     271155
IP address blocks:        177.87.248.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:83:b0:ce:ee:f8:f4:77:78:58:f8:3f:fb:0b:a0:43:6a:13:0f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44A0A3F77E79040FEEC7F1822ADB061950301667
        Validity
            Not Before: Apr 11 13:11:45 2023 GMT
            Not After : Apr  9 13:16:45 2024 GMT
        Subject: CN=76C3927DCB49B0A96233567146D05D0803E66771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e5:7e:aa:51:9f:ed:a8:5f:e1:98:e9:9b:f7:
                    1a:01:68:c3:bb:b4:e7:9d:c2:20:c6:b7:92:d1:17:
                    a7:ec:ca:67:4c:34:54:74:96:4b:a8:cb:37:d6:ad:
                    3a:1c:5d:a9:cd:17:7c:3f:ed:38:a1:38:d3:68:b6:
                    a6:bc:9f:7d:e1:45:cf:02:3c:48:4a:84:1a:aa:60:
                    48:3d:6c:e4:45:c1:43:e4:53:b3:76:a3:b6:e7:1b:
                    63:bc:c0:a1:f2:50:3d:0a:10:12:5f:6f:d6:32:2c:
                    e4:bf:56:a2:bb:c8:92:27:2c:a3:66:f6:27:cf:67:
                    a1:16:3c:fa:34:0e:b7:80:97:ef:07:68:4e:7a:0b:
                    eb:26:70:90:30:c0:b7:65:85:37:18:56:43:89:83:
                    52:c4:bc:6f:7b:a3:c2:ea:80:50:63:76:f1:fc:99:
                    78:fa:05:31:7d:d9:f8:66:89:5a:30:9d:5e:40:a1:
                    52:a1:ef:cd:09:2b:a6:3e:3f:61:c6:95:d1:5b:4e:
                    09:09:38:05:bc:78:01:6a:b8:00:f0:34:ee:ab:6d:
                    7e:ba:57:23:1d:c1:ef:1c:ab:fd:dd:98:85:35:a7:
                    29:01:b8:bb:39:2d:e8:ee:40:a1:44:98:0f:55:e2:
                    e5:5e:14:11:20:c1:65:ec:5e:ee:cb:5e:d0:c4:df:
                    11:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C3:92:7D:CB:49:B0:A9:62:33:56:71:46:D0:5D:08:03:E6:67:71
            X509v3 Authority Key Identifier:
                keyid:44:A0:A3:F7:7E:79:04:0F:EE:C7:F1:82:2A:DB:06:19:50:30:16:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/44A0A3F77E79040FEEC7F1822ADB061950301667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44A0A3F77E79040FEEC7F1822ADB061950301667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/3137372e38372e3234382e302f32332d3332203d3e20323731313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:2d:7b:7a:0d:fe:ac:9c:a6:3f:77:af:0c:cf:dc:8a:43:59:
         c1:4d:88:51:db:31:5b:52:1d:ea:96:4a:5c:ef:c4:73:aa:2b:
         94:42:d6:7e:f3:6b:1e:38:5e:cc:66:52:9a:91:e0:f1:58:f1:
         57:c2:98:f3:a2:2d:a9:9a:fd:76:74:fe:7b:6c:31:64:b4:4b:
         97:55:60:8b:28:b9:72:90:32:72:78:95:23:e3:f1:41:44:25:
         aa:b4:a6:bb:87:3c:e6:85:64:bd:47:ed:dd:a0:8d:6d:92:17:
         b3:d4:4d:b9:30:d3:f6:de:24:40:6a:2d:ac:bf:8d:b2:bd:c9:
         21:49:3c:8c:66:b5:d8:6a:d1:49:13:db:bd:1e:61:e8:94:0e:
         dc:73:49:0d:2e:9a:9a:c3:9e:09:f0:62:cd:3a:bc:fa:56:d4:
         80:43:95:17:c3:c2:30:60:15:88:66:94:3b:b8:8f:91:ad:88:
         fa:af:77:db:6b:51:f9:13:3d:a1:d7:36:b1:08:1c:72:c2:92:
         0a:06:cb:f0:d8:36:fa:b8:9f:1b:4f:27:30:4d:54:c5:65:a3:
         de:b0:8b:5e:2c:30:3d:e0:17:25:53:c2:3b:82:5b:96:af:19:
         33:3b:3e:6b:fb:12:2e:0d:ae:7e:2f:09:98:10:70:94:3d:41:
         8b:bb:f1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org