Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131352e302f32342d3234203d3e203532353531.roa
File:                     3137372e3133302e3131352e302f32342d3234203d3e203532353531.roa (raw, json)
Hash identifier:          XwwZ389DtP0hhs1HsgEX7F7sdbSxgd84CT+/ImSsiII=
Subject key identifier:   73:EE:00:E9:7A:90:18:FE:C6:C4:25:44:E8:8E:FD:AD:6B:EE:29:1F
Certificate issuer:       /CN=8D69381991FAB54B082E60AF03ED726BB215241F
Certificate serial:       3859C478EAE25C894ABA067886039CC9E28FD9E8
Authority key identifier: 8D:69:38:19:91:FA:B5:4B:08:2E:60:AF:03:ED:72:6B:B2:15:24:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D69381991FAB54B082E60AF03ED726BB215241F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131352e302f32342d3234203d3e203532353531.roa
Signing time:             Wed 03 May 2023 19:15:19 +0000
ROA not before:           Wed 03 May 2023 19:10:19 +0000
ROA not after:            Wed 01 May 2024 19:15:19 +0000
asID:                     52551
IP address blocks:        177.130.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:59:c4:78:ea:e2:5c:89:4a:ba:06:78:86:03:9c:c9:e2:8f:d9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D69381991FAB54B082E60AF03ED726BB215241F
        Validity
            Not Before: May  3 19:10:19 2023 GMT
            Not After : May  1 19:15:19 2024 GMT
        Subject: CN=73EE00E97A9018FEC6C42544E88EFDAD6BEE291F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:29:0a:9a:f5:cc:03:a5:c2:9b:0c:be:b2:
                    29:08:5f:17:f6:a2:1f:c1:2e:0f:eb:9d:82:7e:4a:
                    72:f0:b3:6f:9d:87:9a:3a:ff:bf:3b:5a:61:89:d0:
                    07:93:4d:f5:08:61:a7:50:43:0e:e7:d3:88:52:29:
                    57:0b:02:bd:09:23:3b:ba:47:f3:55:8f:04:d5:d4:
                    7d:5d:36:33:b7:8e:55:28:ce:50:41:3b:6d:b6:56:
                    d6:e1:1a:02:64:e7:bf:81:1b:79:b5:5b:f8:ce:1b:
                    4a:b8:78:36:36:2b:dd:71:a9:78:77:c1:63:da:a7:
                    d9:0c:02:75:aa:82:76:32:96:a7:fd:40:5c:40:83:
                    78:47:24:0e:60:bd:d2:e9:5a:8d:da:8f:36:de:ac:
                    87:d4:67:17:60:e0:a4:b3:be:4e:7e:e9:3f:36:b7:
                    6d:a7:e0:c9:64:89:a6:94:83:48:3d:c5:8c:7e:47:
                    cc:92:2d:15:fb:83:a6:40:6e:3c:e7:94:0a:04:a4:
                    5d:8a:73:1d:c9:b4:38:6e:9e:9c:1f:a6:ae:21:09:
                    14:2c:a0:01:bb:10:ae:3e:cf:8c:84:14:e8:5d:93:
                    cd:5e:b9:2f:68:a7:d4:be:fe:8a:5d:dd:70:0e:dc:
                    95:ca:f7:59:55:96:09:a9:38:ad:76:49:eb:a3:e7:
                    87:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EE:00:E9:7A:90:18:FE:C6:C4:25:44:E8:8E:FD:AD:6B:EE:29:1F
            X509v3 Authority Key Identifier:
                keyid:8D:69:38:19:91:FA:B5:4B:08:2E:60:AF:03:ED:72:6B:B2:15:24:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/8D69381991FAB54B082E60AF03ED726BB215241F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D69381991FAB54B082E60AF03ED726BB215241F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/0/3137372e3133302e3131352e302f32342d3234203d3e203532353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:56:e7:f0:e8:e1:dd:b5:0e:bd:a7:89:ba:b9:f2:45:ae:b9:
         c3:c7:25:3f:97:6b:e5:73:43:ba:7d:b3:dc:c8:fd:12:3b:32:
         7d:b3:6f:27:bf:bc:39:4b:4f:86:6d:c1:3d:c1:01:d4:c1:90:
         a6:90:df:19:42:0b:03:c8:b1:fa:b7:27:c7:06:e6:43:76:d9:
         64:83:88:ad:f0:f6:d6:01:4a:b2:f8:10:a4:b7:3e:a0:8d:5c:
         ad:52:f9:a4:13:0b:cd:87:ce:76:ba:c0:db:1b:a7:8b:a1:80:
         85:62:3e:e9:ec:76:a9:46:51:1c:0f:2e:6f:94:05:d9:b3:9a:
         43:b7:ab:52:eb:4e:0b:78:3f:e0:4a:19:8c:e8:28:91:ed:1d:
         b9:0f:52:91:61:8b:bf:d4:25:62:f4:17:61:76:02:c2:14:7b:
         12:89:5a:34:52:6d:6b:4e:08:12:17:a0:15:30:d8:f1:7a:bd:
         7b:d0:80:38:1c:0f:c7:90:e2:17:22:1c:d1:cb:d0:79:0e:08:
         b5:e1:54:21:c2:32:c8:15:0b:80:c5:00:62:f0:bf:0d:65:a8:
         58:d4:0c:7b:71:87:be:8c:b0:c7:7f:04:4a:72:a5:a8:db:52:
         ef:b1:cb:88:c4:99:23:28:64:0c:3f:72:eb:ad:2b:f4:11:cc:
         15:c3:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org