Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3139322e302f32302d3230203d3e203533303539.roa
File:                     3137372e3133372e3139322e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier:          d1bSTsX4AKWMTK8ClL31lUpqqLsF67mdzYnVsK/WC6g=
Subject key identifier:   AB:A4:B7:D1:7F:7C:9E:64:2E:3B:F8:74:69:E6:2C:D6:F6:06:AD:EA
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       1EB34F804A196A01E585FBE0CD1E79D370ADFD37
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3139322e302f32302d3230203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:08 +0000
ROA not before:           Fri 03 Mar 2023 12:13:08 +0000
ROA not after:            Fri 01 Mar 2024 12:18:08 +0000
asID:                     53059
IP address blocks:        177.137.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b3:4f:80:4a:19:6a:01:e5:85:fb:e0:cd:1e:79:d3:70:ad:fd:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:08 2023 GMT
            Not After : Mar  1 12:18:08 2024 GMT
        Subject: CN=ABA4B7D17F7C9E642E3BF87469E62CD6F606ADEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:eb:93:de:5a:cc:00:1f:e6:d2:8f:58:0e:
                    92:e8:0f:0b:34:bd:0a:c8:1a:4c:c1:d1:67:31:28:
                    09:cb:7f:43:61:4c:2c:a0:24:50:f0:eb:49:bd:e7:
                    3a:b2:50:d3:1f:89:f9:6e:ce:3b:cb:40:10:3c:b6:
                    5c:06:e5:b3:c0:91:90:fc:91:b6:70:d9:49:9f:b7:
                    7d:4d:9e:ba:3f:83:44:01:5b:b5:cc:b3:3f:7d:46:
                    54:5e:d1:d0:87:c0:53:d1:b3:03:bd:3a:77:fd:16:
                    bb:90:b5:79:c6:e7:61:d6:03:df:3a:b0:64:1d:83:
                    3b:9d:54:21:e0:67:d2:cf:53:de:0d:38:2f:38:98:
                    d8:5f:fa:7f:be:38:d2:c7:ba:8e:2a:d3:6a:c2:f5:
                    b0:38:4f:90:a3:6e:e2:3c:d3:b7:4c:b1:7d:85:84:
                    f7:33:f7:bf:b9:42:b5:1f:86:fd:30:d8:5c:93:4f:
                    94:1c:d2:15:f2:4f:2e:b1:7c:03:69:ed:2b:4e:61:
                    1d:e1:83:c5:8f:d6:60:33:c3:3d:70:de:95:25:57:
                    7b:5e:c9:42:e8:83:8f:41:1d:fa:bf:30:82:4f:16:
                    95:1d:e7:35:9e:74:47:c0:e2:5a:55:fa:20:c1:f1:
                    a8:a6:64:b7:59:0a:0e:16:10:e8:84:b5:45:d2:94:
                    d0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A4:B7:D1:7F:7C:9E:64:2E:3B:F8:74:69:E6:2C:D6:F6:06:AD:EA
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3139322e302f32302d3230203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:b4:40:04:ea:e1:ee:5c:33:97:fe:82:d0:55:1f:74:78:72:
         d7:9d:b4:1d:8d:0f:72:f9:f8:09:ea:65:f4:e7:3f:98:5b:65:
         bf:d4:6f:ed:e9:2d:0f:ef:b4:7c:c3:96:f5:2f:fa:92:14:05:
         d6:b8:51:6b:af:71:c1:e1:bb:8a:3c:8b:04:7f:f1:f5:c9:b0:
         49:98:e5:42:db:89:aa:65:c0:0f:de:3c:56:32:c9:0b:43:6b:
         36:25:f1:ce:dc:3a:d8:3a:a2:64:c3:22:ae:66:c0:ce:84:cd:
         98:83:53:34:fb:cc:2f:54:4a:a1:de:79:ec:ee:7e:5a:d1:2e:
         d4:35:d8:8a:e2:f6:96:4a:84:68:21:5f:4e:09:41:b7:94:11:
         e9:bd:63:7e:8e:4d:fe:b9:c0:be:0b:10:54:e2:8d:33:95:9c:
         9f:36:c5:15:b6:30:24:00:7c:5e:95:73:5d:85:b3:3d:fe:00:
         66:b2:e1:0c:0c:9d:e3:8c:01:a5:02:76:3e:76:eb:67:2f:2e:
         78:55:49:74:3e:2f:c1:05:80:04:bc:23:49:9d:bb:21:b8:e1:
         53:71:9a:94:00:31:12:71:0f:02:0c:ee:c0:1d:08:67:86:60:
         2c:c9:99:8e:b2:76:52:76:76:46:4c:da:87:fc:76:f7:fb:02:
         89:25:4d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org