Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3139322e302f32302d3230203d3e203238323230.roa
File:                     3137372e3133372e3139322e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          Ms7E8VuWTdM5ogaVXqBwC7DoXqbGAIZQ1Us7mheoVV8=
Subject key identifier:   7C:72:AA:60:D6:79:5B:B1:AB:C1:C8:05:02:17:4D:D2:56:6B:37:64
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       0A41F4FF51D8AB11B37ACBDA7F66860B1407C980
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3139322e302f32302d3230203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:14 +0000
ROA not before:           Tue 12 Mar 2024 19:46:14 +0000
ROA not after:            Tue 11 Mar 2025 19:51:14 +0000
asID:                     28220
IP address blocks:        177.137.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:41:f4:ff:51:d8:ab:11:b3:7a:cb:da:7f:66:86:0b:14:07:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:14 2024 GMT
            Not After : Mar 11 19:51:14 2025 GMT
        Subject: CN=7C72AA60D6795BB1ABC1C80502174DD2566B3764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:06:a4:fc:ac:4b:28:27:45:d7:d6:85:eb:
                    5a:02:5a:b9:3f:84:ca:10:18:c9:e4:33:f8:1c:68:
                    82:bf:70:9e:3d:de:32:ae:25:c2:c4:4e:52:1a:f7:
                    04:67:04:b5:c1:5f:87:df:58:09:9f:7d:87:fe:63:
                    77:e0:73:8c:96:81:53:ff:bf:33:d6:1d:3e:24:5e:
                    4e:e4:60:08:6e:4d:1c:b4:1f:ba:02:a9:a6:46:33:
                    28:a0:68:65:76:79:b9:3a:f0:fc:91:3c:da:73:af:
                    1b:a7:71:9c:bd:fd:e9:f0:e9:89:36:95:2a:2f:90:
                    eb:59:82:74:e3:c0:36:c1:4d:9b:06:7e:ec:08:6d:
                    e9:a0:0c:16:3a:71:da:77:9a:dc:ee:56:af:a5:91:
                    52:35:9a:40:cd:e3:7e:c7:14:f3:66:a2:62:cc:23:
                    0c:4f:a0:d4:30:20:9a:54:c1:78:96:89:37:67:8e:
                    89:81:90:96:ce:8c:28:e1:e0:51:f9:3f:90:97:c9:
                    d6:77:77:f5:0c:8f:3e:72:ae:c6:f0:f8:4d:00:fc:
                    2d:a5:3e:34:68:8d:52:79:f7:e5:b9:44:84:b2:fb:
                    6b:24:42:65:c5:b7:fb:47:64:44:53:ce:bd:65:9e:
                    ca:96:d9:cf:73:21:4d:3f:31:0b:88:43:01:fb:9b:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:72:AA:60:D6:79:5B:B1:AB:C1:C8:05:02:17:4D:D2:56:6B:37:64
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3139322e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:ec:98:55:2e:c8:a6:af:9d:35:29:5f:af:ad:11:86:9a:01:
         c1:91:31:75:35:b4:ff:98:53:f9:91:64:d4:79:25:32:e1:db:
         66:0b:d4:03:3a:0a:53:6c:8a:d4:ba:a5:eb:af:72:3e:a4:ce:
         d0:21:b3:84:36:1c:c2:2d:32:ca:b4:06:32:8d:27:14:b4:a4:
         13:15:05:04:4e:65:a4:00:88:2c:c4:85:9a:da:f5:fd:c2:73:
         f8:00:7b:94:32:1f:5c:8d:0c:14:2c:cc:5b:88:15:1c:af:aa:
         8a:43:bc:ab:1c:05:c4:de:0c:e9:e6:54:a7:d4:39:54:1d:c0:
         91:9e:17:23:ad:1d:e4:f7:a1:59:f3:78:ba:bc:1f:d3:26:dc:
         ec:a5:ed:b5:f1:b9:9c:fc:80:90:7b:5f:d7:6d:79:b2:77:3c:
         59:1b:b5:76:0f:50:8f:c1:7f:3d:d1:d2:44:a8:5a:36:f9:47:
         a7:04:e4:41:29:b9:18:8b:83:5d:51:0a:2c:bd:06:6f:f2:e5:
         b5:7e:6f:34:43:da:71:6e:2b:9d:60:5b:d5:7c:75:a0:e7:a6:
         a4:e8:c1:f6:bb:8c:50:88:0f:dc:35:3b:a2:21:f1:2f:15:34:
         01:fa:67:08:d5:fa:83:05:54:c9:26:b2:75:02:ff:87:6d:90:
         5f:05:54:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org