Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa
File:                     3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (raw, json)
Hash identifier:          pXpLOHUs56MrwlP6fBYVFwYpuE7JNNexgyjbqoU2pNc=
Subject key identifier:   30:14:3A:66:ED:BD:97:AB:C9:CE:D4:C8:07:FE:75:B8:0E:A0:07:7F
Certificate issuer:       /CN=003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307
Certificate serial:       06A43826416395A9F39368A58C4223E628236F9B
Authority key identifier: 00:3A:B6:DC:6A:AD:8C:55:BD:30:8C:A1:AE:1E:E4:84:1E:9D:C3:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa
Signing time:             Fri 16 Jun 2023 16:21:20 +0000
ROA not before:           Fri 16 Jun 2023 16:16:20 +0000
ROA not after:            Fri 14 Jun 2024 16:21:20 +0000
asID:                     263043
IP address blocks:        177.129.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a4:38:26:41:63:95:a9:f3:93:68:a5:8c:42:23:e6:28:23:6f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307
        Validity
            Not Before: Jun 16 16:16:20 2023 GMT
            Not After : Jun 14 16:21:20 2024 GMT
        Subject: CN=30143A66EDBD97ABC9CED4C807FE75B80EA0077F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5a:77:1d:4b:12:c0:42:3f:f1:28:27:c9:0f:
                    d1:09:49:ed:7f:b1:e7:51:16:3f:de:81:da:7d:2c:
                    ab:dc:50:70:c6:71:46:39:35:ac:aa:46:eb:1a:1a:
                    af:c9:4a:25:8b:d9:90:7d:02:99:3f:6d:78:4a:5e:
                    1e:67:d7:d9:c1:3f:f8:5a:5a:f3:57:92:aa:c8:6b:
                    f3:1a:2b:5f:94:3d:8b:07:58:34:49:d9:a8:99:0f:
                    60:c4:1b:76:c6:d4:f4:61:d2:1d:1f:ca:89:0f:f8:
                    5a:82:80:d3:d2:f4:08:4a:51:74:90:01:03:82:a4:
                    57:f4:35:d8:aa:83:6e:71:aa:d9:12:7c:bd:a0:47:
                    5b:55:48:e7:a9:d7:ed:df:c1:d9:79:17:4f:bc:38:
                    9a:8f:1c:15:eb:2f:88:16:36:46:be:42:9a:c8:09:
                    a0:4c:26:ce:85:91:3d:8b:54:08:97:36:b6:87:d4:
                    5c:c7:c5:01:b4:09:72:e1:72:e6:88:e5:00:d0:cc:
                    b8:b5:16:fe:fc:a9:53:14:c7:32:8d:01:60:21:25:
                    0d:40:50:b6:27:0b:f5:b7:6b:24:7a:ff:de:9f:8f:
                    c8:05:24:ab:00:d1:f2:7f:ac:6b:47:ba:34:f1:0e:
                    4a:c8:87:bd:b9:b0:98:f2:3e:39:48:1d:c5:46:75:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:14:3A:66:ED:BD:97:AB:C9:CE:D4:C8:07:FE:75:B8:0E:A0:07:7F
            X509v3 Authority Key Identifier:
                keyid:00:3A:B6:DC:6A:AD:8C:55:BD:30:8C:A1:AE:1E:E4:84:1E:9D:C3:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:3b:f6:97:be:03:9b:5c:82:76:9c:63:28:35:c3:32:84:74:
         ac:80:9d:be:4a:e7:e4:35:49:8b:d6:5f:85:93:22:93:52:10:
         79:a2:17:56:03:71:f0:a4:a4:70:d8:cc:b1:ce:39:98:f3:ca:
         57:50:25:cd:a5:a8:2b:aa:7d:0a:41:fb:ad:ac:cb:42:01:b1:
         d6:a5:1c:39:08:5c:4c:07:e4:f9:06:9f:6c:66:1f:0a:d9:98:
         a2:58:36:09:a2:3c:5b:42:d6:fb:4f:f6:e7:ef:93:bc:27:2b:
         64:9d:ab:5a:5d:72:b2:b8:2f:09:79:42:56:05:89:29:2a:58:
         c4:0c:d8:8b:26:11:51:39:5c:ee:7b:69:11:35:2b:17:51:7a:
         06:5c:d8:d7:41:68:f1:57:77:b4:6c:e0:99:48:03:ef:a0:d1:
         e7:4c:fb:c9:f6:30:ea:5f:59:a0:b5:c1:7d:95:6f:9d:83:6d:
         7c:05:93:25:ef:cc:58:c7:57:a4:57:95:b1:4a:19:03:71:ac:
         13:23:f8:c3:cd:93:dc:e0:f7:9d:34:75:98:18:a9:2c:b4:70:
         43:b6:ea:60:1f:ed:ce:85:fb:75:b4:3a:62:c7:39:3e:2e:a4:
         9a:b2:a8:a8:b6:d1:68:ab:57:b9:e6:0d:ba:27:c2:56:da:0f:
         64:92:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org