Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3230312e302f32342d3234203d3e203238323230.roa
File:                     3137372e3133372e3230312e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          dSNWsyrQIkm4SJT4JTqR4nw1SLF4x+LpGTtz05WUJl8=
Subject key identifier:   70:73:DD:51:8C:26:82:1E:BA:B7:65:72:5E:95:13:87:91:D2:E3:96
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       75AA25535A04362D65FA791BB08C44607431B7B5
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3230312e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:22 +0000
ROA not before:           Tue 12 Mar 2024 19:46:22 +0000
ROA not after:            Tue 11 Mar 2025 19:51:22 +0000
asID:                     28220
IP address blocks:        177.137.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:aa:25:53:5a:04:36:2d:65:fa:79:1b:b0:8c:44:60:74:31:b7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:22 2024 GMT
            Not After : Mar 11 19:51:22 2025 GMT
        Subject: CN=7073DD518C26821EBAB765725E95138791D2E396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:af:67:ec:31:27:d8:7e:e8:81:28:f8:59:
                    b8:4f:8b:9d:31:2d:2a:ad:dc:d3:b2:3a:f1:1c:41:
                    11:63:18:3a:79:59:c2:8a:48:3b:6b:32:c1:55:56:
                    1f:c4:0f:3f:b9:f8:65:93:7c:6c:03:d9:81:85:76:
                    1a:7e:5a:0b:99:c6:52:5f:31:aa:d4:5f:2f:b2:58:
                    31:84:bb:26:53:d4:f1:1f:08:fb:c0:87:52:82:e5:
                    45:ce:92:d1:b7:9f:d6:0c:f8:73:a7:3e:53:00:1c:
                    b7:7c:ef:27:bd:9c:48:34:f5:f7:ff:4e:7a:8d:80:
                    b8:54:1b:6f:cf:2f:aa:f1:8f:9d:ef:9a:ce:a4:0a:
                    78:9b:87:9e:e6:80:54:b8:08:b3:98:cd:6d:5f:86:
                    23:43:7d:3b:40:20:24:19:79:87:f2:3d:36:9d:2f:
                    59:0e:29:48:b7:6e:e8:d4:a2:0b:ef:fe:89:da:56:
                    d4:89:11:ef:92:89:6e:19:6f:16:f0:8e:0f:2a:ad:
                    6d:d1:28:25:37:53:70:fc:de:f9:cf:aa:d3:ef:7e:
                    66:d3:a7:9d:f7:e8:fb:95:6a:57:1e:7c:f9:1c:a5:
                    78:9f:48:a8:2c:e5:60:ae:58:80:9d:ac:dd:42:23:
                    27:b2:e9:99:23:4c:39:e4:93:bf:65:82:ec:c9:db:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:73:DD:51:8C:26:82:1E:BA:B7:65:72:5E:95:13:87:91:D2:E3:96
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137372e3133372e3230312e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:8d:18:ee:36:1d:64:8e:57:5a:db:a9:ad:b4:0f:7e:0f:5d:
         7b:9d:72:f4:6c:bf:f7:33:8f:84:ee:2e:47:88:1d:7e:31:6e:
         3a:b8:7f:e8:38:8c:bc:1e:85:59:22:4d:41:90:93:05:3a:31:
         c8:d7:38:7a:65:5c:fc:b4:6e:bc:a0:71:a7:35:8f:fb:a9:15:
         32:58:6f:71:09:06:f0:44:ba:2a:ec:11:80:4e:a2:71:72:ff:
         01:c5:65:b5:52:e3:68:39:8a:c1:f5:07:44:04:b3:03:ef:8a:
         0d:c8:e7:a5:91:07:11:69:8a:43:ba:39:84:7a:b1:40:a2:61:
         1d:4c:75:05:57:ef:13:51:66:2c:b8:c6:a6:ec:42:c3:ac:37:
         22:a3:4a:86:4a:20:0e:73:5e:1e:1d:04:63:70:4c:f3:e0:04:
         34:e4:4a:76:94:d5:6e:fb:4a:79:51:d9:4a:4e:1b:19:25:0f:
         63:73:51:c0:c2:46:2e:91:b3:56:ce:2e:ca:5d:0b:74:73:ef:
         22:06:97:eb:a4:b5:71:87:3b:8e:2f:79:64:dd:4d:98:5b:ee:
         97:af:25:29:ae:e1:da:9a:60:86:e9:3a:1a:74:e1:94:bb:b7:
         1c:00:9f:09:d5:2c:d5:24:bb:56:ee:26:a0:27:76:12:5a:55:
         a7:a0:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org