Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32322d3234203d3e20323633353733.roa
File:                     3137372e3138342e3231362e302f32322d3234203d3e20323633353733.roa (raw, json)
Hash identifier:          JdJxfsqHBWCk2Ph3GxTqmf7Dc47xQplAP1fKRGPZN4I=
Subject key identifier:   3B:27:60:A6:46:66:79:5F:0B:CA:9D:F9:9B:AF:57:9C:F0:59:F2:8F
Certificate issuer:       /CN=12D5E6753F0953AA0492298DB65F4F16200D508E
Certificate serial:       656D309D2668E793FAB948566984BEA62498CDF0
Authority key identifier: 12:D5:E6:75:3F:09:53:AA:04:92:29:8D:B6:5F:4F:16:20:0D:50:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12D5E6753F0953AA0492298DB65F4F16200D508E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32322d3234203d3e20323633353733.roa
Signing time:             Fri 15 Mar 2024 23:21:38 +0000
ROA not before:           Fri 15 Mar 2024 23:16:38 +0000
ROA not after:            Fri 14 Mar 2025 23:21:38 +0000
asID:                     263573
IP address blocks:        177.184.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6d:30:9d:26:68:e7:93:fa:b9:48:56:69:84:be:a6:24:98:cd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12D5E6753F0953AA0492298DB65F4F16200D508E
        Validity
            Not Before: Mar 15 23:16:38 2024 GMT
            Not After : Mar 14 23:21:38 2025 GMT
        Subject: CN=3B2760A64666795F0BCA9DF99BAF579CF059F28F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a8:6a:60:39:bc:fb:ac:f9:17:40:c9:bb:4d:
                    f3:90:57:dd:25:4d:a1:dc:11:86:e4:79:2c:81:af:
                    f2:0a:81:e8:1b:dc:37:07:7e:63:00:e5:94:b9:43:
                    19:14:11:21:7a:d0:6d:b4:68:4e:cf:87:c4:17:e5:
                    2d:47:c4:8d:6a:c7:b9:07:3e:90:c1:27:0c:7e:ba:
                    e7:f3:cf:e6:e6:99:54:80:77:9d:91:08:31:4b:49:
                    b5:c9:72:58:9f:06:8f:14:55:e0:ab:7b:58:3a:11:
                    c0:4a:76:a1:d6:4a:ac:3a:73:24:dd:48:33:69:83:
                    ed:bf:7e:a9:24:69:d5:05:23:59:ca:1a:73:d0:aa:
                    6d:1e:fd:db:40:32:03:08:ac:4a:94:fd:52:89:65:
                    7d:b1:5c:10:0c:14:50:02:04:32:08:f3:4f:ba:ce:
                    87:3e:3f:44:82:d8:2d:5d:5a:17:cf:a7:47:66:38:
                    33:79:25:29:3f:d1:c9:de:40:22:4d:35:e0:01:4d:
                    e6:6c:a4:4e:51:13:86:b5:bd:de:05:28:db:32:59:
                    45:97:51:4c:23:c5:3d:a8:11:a6:8e:15:38:5a:8a:
                    ec:5d:5a:f8:01:35:29:50:4e:7b:c0:86:4e:08:81:
                    3e:e6:42:55:10:f7:6a:46:36:39:11:42:50:5b:b7:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:27:60:A6:46:66:79:5F:0B:CA:9D:F9:9B:AF:57:9C:F0:59:F2:8F
            X509v3 Authority Key Identifier:
                keyid:12:D5:E6:75:3F:09:53:AA:04:92:29:8D:B6:5F:4F:16:20:0D:50:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/12D5E6753F0953AA0492298DB65F4F16200D508E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12D5E6753F0953AA0492298DB65F4F16200D508E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32322d3234203d3e20323633353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:40:15:c1:5b:e0:7f:01:95:02:29:5d:76:5b:df:00:f5:e8:
         d6:73:79:1b:09:1f:49:48:d1:21:a4:c1:c4:27:40:b3:a2:ab:
         87:7c:d6:13:3e:51:13:86:51:6b:74:28:bb:a4:cd:4e:5b:0a:
         26:55:98:4e:f7:9d:4e:9f:a9:f8:3b:7e:e9:8a:1d:e0:08:2d:
         3a:b5:65:33:82:19:e3:70:d8:03:15:cf:09:9d:f7:88:15:a3:
         ce:09:18:3c:03:37:47:b0:59:8a:c8:79:fa:f0:65:3d:28:3b:
         1b:06:fb:52:ca:2c:b9:e2:27:bf:16:d3:9e:e8:62:cc:a0:1e:
         d0:7c:63:6e:64:f7:19:29:e3:c6:89:6b:d5:be:4a:6a:77:93:
         2d:fb:f1:e3:8e:7b:76:29:c9:80:1f:ce:d4:e3:50:15:2c:53:
         3e:c8:8c:59:78:47:30:7c:49:ca:e3:47:16:e1:01:64:cb:b4:
         b3:bf:be:55:3b:74:61:b2:7c:d0:0b:5d:25:e3:02:30:c7:7a:
         2f:1a:a6:2b:88:b8:eb:dd:a4:e0:8e:a9:51:8e:ea:65:df:83:
         ad:de:49:7e:68:8b:f1:e4:4b:a5:e1:28:c9:bc:69:96:64:b1:
         c3:c5:f4:37:a2:33:d8:d1:cf:27:ba:24:3a:3a:4c:70:3d:eb:
         16:ff:68:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org