Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e33392e3136302e302f32312d3234203d3e203238353834.roa
File:                     3137372e33392e3136302e302f32312d3234203d3e203238353834.roa (raw, json)
Hash identifier:          a+gE9Q/hOlXPEh+fVVyKFU1NDuY6/xmsLEkkPljcbxc=
Subject key identifier:   C2:EF:93:BB:95:0F:29:A4:2C:70:11:82:D0:92:2F:4E:97:FE:5C:31
Certificate issuer:       /CN=6D52CD8BD09198EF226E5087C7F2A88085A91B46
Certificate serial:       25789D17710423927DF641306E189432C3423102
Authority key identifier: 6D:52:CD:8B:D0:91:98:EF:22:6E:50:87:C7:F2:A8:80:85:A9:1B:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D52CD8BD09198EF226E5087C7F2A88085A91B46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e33392e3136302e302f32312d3234203d3e203238353834.roa
Signing time:             Fri 09 Feb 2024 15:49:15 +0000
ROA not before:           Fri 09 Feb 2024 15:44:15 +0000
ROA not after:            Fri 07 Feb 2025 15:49:15 +0000
asID:                     28584
IP address blocks:        177.39.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:78:9d:17:71:04:23:92:7d:f6:41:30:6e:18:94:32:c3:42:31:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D52CD8BD09198EF226E5087C7F2A88085A91B46
        Validity
            Not Before: Feb  9 15:44:15 2024 GMT
            Not After : Feb  7 15:49:15 2025 GMT
        Subject: CN=C2EF93BB950F29A42C701182D0922F4E97FE5C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:f5:56:21:44:38:24:bf:80:ea:23:46:8d:
                    10:d9:d4:2b:65:00:27:f5:7a:6f:55:b1:ab:74:a5:
                    61:a4:10:7f:0d:78:59:48:9b:a7:7c:c3:0d:73:0f:
                    90:e0:d0:76:01:6b:af:7b:70:b3:52:76:1f:e8:7b:
                    0b:6c:2c:03:df:08:c4:9b:cf:34:db:15:89:11:3e:
                    25:5a:6c:ac:52:9a:3f:a4:42:2b:ac:ef:8e:39:d8:
                    a6:9f:3c:5a:c1:e6:cd:74:24:5a:96:cd:e0:12:f8:
                    b6:96:4c:f4:92:19:4b:46:03:c9:10:47:f2:c9:51:
                    a9:d4:1d:a1:ce:d1:a5:4b:da:99:87:cd:ce:27:68:
                    1c:19:c5:61:77:48:fe:82:2c:a7:1b:d3:96:37:ee:
                    19:fd:c8:d0:16:ca:ab:0e:9c:95:90:65:ee:7c:79:
                    62:df:42:14:24:06:dc:88:18:fe:e2:e7:87:4a:9e:
                    d9:07:ea:a6:d7:18:59:7f:8b:32:08:96:a5:44:7c:
                    a5:0f:1b:25:77:cd:c2:2b:20:d3:e9:82:6e:e8:88:
                    ab:c4:17:8c:de:b7:07:93:3a:6e:1c:7b:5e:3b:3a:
                    69:94:99:96:11:bd:76:62:d9:25:f5:72:5b:09:0c:
                    4b:66:2f:f5:7e:ee:0d:c1:35:5f:63:2f:05:62:37:
                    7e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EF:93:BB:95:0F:29:A4:2C:70:11:82:D0:92:2F:4E:97:FE:5C:31
            X509v3 Authority Key Identifier:
                keyid:6D:52:CD:8B:D0:91:98:EF:22:6E:50:87:C7:F2:A8:80:85:A9:1B:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/6D52CD8BD09198EF226E5087C7F2A88085A91B46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D52CD8BD09198EF226E5087C7F2A88085A91B46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e33392e3136302e302f32312d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:bb:2a:32:07:6a:c0:28:95:68:0a:99:42:09:ae:cb:aa:30:
         df:b0:62:b3:94:9f:06:5a:62:0f:08:93:5c:d6:f0:93:c1:55:
         5f:b2:c8:1f:5c:bb:25:64:67:e5:37:73:a8:70:d3:e8:35:b1:
         c6:63:45:d5:ed:de:12:f4:00:1a:86:6d:e9:74:a9:02:dc:bd:
         1a:ab:b1:67:05:5f:d2:91:5e:fe:be:a1:d3:ba:51:ec:42:b8:
         86:ba:3e:ca:63:3e:9f:16:bd:fc:1d:44:2b:4e:38:cb:e0:45:
         4e:fc:09:5f:dd:01:39:cd:43:ad:c2:75:7d:cc:f0:b3:79:2f:
         4f:af:c2:f9:6e:81:8c:45:0d:74:9f:d7:f7:b8:cb:f2:1e:98:
         30:72:19:5a:ba:dc:85:45:da:a6:d3:f5:53:16:29:f2:e3:da:
         da:4b:7d:bd:a1:e0:f6:78:bb:73:74:81:dc:e7:1b:03:20:30:
         5a:ac:32:df:7d:5c:0c:0b:17:8d:23:bd:58:bc:6a:a2:1e:d2:
         08:65:e9:78:56:e8:09:11:87:33:75:75:24:bf:1e:21:00:c4:
         d3:2b:0c:ac:a5:cf:c6:38:fc:05:f3:24:e4:59:cb:62:17:6b:
         5d:55:21:93:d1:cb:c2:fb:09:43:d0:48:62:d5:61:68:85:20:
         ea:21:2a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org