Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3137372e3132382e3138352e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138352e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          deRoCaQnZ/h6dNJcgVioHBEazm70lmulsWUPqb+Stak=
Subject key identifier:   79:A5:07:F2:30:6A:45:C1:83:1A:6B:56:96:05:EA:F0:88:64:9E:6C
Certificate issuer:       /CN=3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E
Certificate serial:       33F3C73CC6E9C8AC7809B5EBB024ED13979459BD
Authority key identifier: 3F:C9:5E:4F:5D:50:BC:7A:6C:95:DC:41:79:80:C7:45:E1:DC:F2:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3137372e3132382e3138352e302f32342d3234203d3e203238353837.roa
Signing time:             Thu 04 Apr 2024 20:38:55 +0000
ROA not before:           Thu 04 Apr 2024 20:33:55 +0000
ROA not after:            Thu 03 Apr 2025 20:38:55 +0000
asID:                     28587
IP address blocks:        177.128.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f3:c7:3c:c6:e9:c8:ac:78:09:b5:eb:b0:24:ed:13:97:94:59:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E
        Validity
            Not Before: Apr  4 20:33:55 2024 GMT
            Not After : Apr  3 20:38:55 2025 GMT
        Subject: CN=79A507F2306A45C1831A6B569605EAF088649E6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:d0:b4:d8:4f:09:2b:43:fa:0d:e6:5f:f4:
                    f7:10:f4:2d:8e:f9:8f:35:2d:d3:54:98:29:96:c7:
                    65:22:0b:47:3f:ed:7b:a8:28:e8:34:dc:24:7a:8b:
                    35:65:c1:81:cc:3f:ab:59:78:9d:e7:c4:8f:a4:7c:
                    ca:a2:b0:84:2d:17:6d:cb:89:46:b9:e4:10:da:48:
                    6f:02:68:64:7f:fc:37:04:67:16:09:79:e1:b4:3f:
                    f5:45:c9:16:a6:90:32:a5:26:10:cd:5c:c6:5d:22:
                    6a:b1:1d:a2:b9:82:fe:90:01:9f:c2:d5:c9:b5:ac:
                    76:2e:45:e4:62:55:a7:93:1f:0d:ff:86:d7:11:6c:
                    cd:91:ce:aa:e8:7e:46:a7:8b:cd:94:ef:05:62:09:
                    85:2f:66:2a:32:92:30:47:70:c9:94:1c:a4:1d:16:
                    a8:45:e1:11:27:00:62:32:f8:36:ff:9e:f3:d5:91:
                    7d:66:be:07:27:09:57:0c:3c:f0:58:a0:0d:b5:e4:
                    9d:0e:72:ee:1b:4c:29:fd:25:31:00:2c:b8:bc:a8:
                    aa:06:75:99:05:ff:24:64:e6:dd:ec:91:a5:ce:ec:
                    66:39:c9:6a:92:af:07:0c:66:ee:80:9d:02:34:53:
                    ba:5f:ec:5b:5d:f6:85:97:5e:a1:e4:f7:6b:79:0c:
                    6b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A5:07:F2:30:6A:45:C1:83:1A:6B:56:96:05:EA:F0:88:64:9E:6C
            X509v3 Authority Key Identifier:
                keyid:3F:C9:5E:4F:5D:50:BC:7A:6C:95:DC:41:79:80:C7:45:E1:DC:F2:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3137372e3132382e3138352e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:2e:7f:87:4a:b9:42:a0:b1:84:d3:9d:5d:b7:b4:45:16:52:
         19:ab:c4:a7:2c:b0:95:15:90:09:a3:9c:f2:61:c2:a2:12:db:
         40:be:8f:67:b0:74:6b:36:a6:47:48:04:07:b5:f6:f1:e7:c3:
         76:a5:9c:5e:4f:a1:a9:7e:da:17:94:8e:0f:c0:eb:19:52:21:
         97:8c:d5:4f:57:2d:67:87:ea:3b:25:99:4f:56:fb:86:74:40:
         d8:a9:f3:25:e0:de:ef:b5:1e:44:c5:c5:0d:6c:c2:e5:27:82:
         d4:eb:25:bd:34:ff:50:27:cc:6c:07:9e:df:16:27:4e:9b:f8:
         3b:dd:bf:c0:1d:62:66:55:2d:b8:dd:1b:1b:26:4b:ed:ed:c7:
         c9:a4:fc:34:d9:9f:3f:5f:95:0e:b6:94:0b:77:b7:f0:fb:96:
         d2:cf:1c:b6:f9:34:9f:b6:27:05:6a:af:c7:0f:5b:87:f6:84:
         e8:48:ab:f2:11:75:8e:89:58:73:03:9b:ce:96:b7:11:44:e1:
         e9:c4:1f:e0:81:7c:28:ae:87:75:3f:6e:15:ed:01:0c:5c:c7:
         bd:e9:f0:21:10:45:01:c6:ea:9d:0f:2b:ac:b1:36:80:d7:bf:
         88:ef:be:78:ac:9e:45:ed:ca:91:f1:55:78:59:de:f5:32:e5:
         bf:b6:49:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org