Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3137372e3132382e3138372e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138372e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          AJL6Yj9TceGtqffNKgrNT4EG20QzXpZnHvnAZSeR51U=
Subject key identifier:   BA:42:71:35:B6:B1:68:F6:7D:DB:7D:CD:34:9B:D7:F3:BF:36:C5:56
Certificate issuer:       /CN=3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E
Certificate serial:       50D9A14AC88BEEE1EBA8AE3CD52A8F867264CFF9
Authority key identifier: 3F:C9:5E:4F:5D:50:BC:7A:6C:95:DC:41:79:80:C7:45:E1:DC:F2:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3137372e3132382e3138372e302f32342d3234203d3e203238353837.roa
Signing time:             Thu 04 Apr 2024 20:38:55 +0000
ROA not before:           Thu 04 Apr 2024 20:33:55 +0000
ROA not after:            Thu 03 Apr 2025 20:38:55 +0000
asID:                     28587
IP address blocks:        177.128.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d9:a1:4a:c8:8b:ee:e1:eb:a8:ae:3c:d5:2a:8f:86:72:64:cf:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E
        Validity
            Not Before: Apr  4 20:33:55 2024 GMT
            Not After : Apr  3 20:38:55 2025 GMT
        Subject: CN=BA427135B6B168F67DDB7DCD349BD7F3BF36C556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5f:fd:f8:c8:2e:28:23:2e:5b:8d:1c:54:03:
                    9b:eb:a8:8d:5c:4b:73:d5:ff:87:b0:39:14:8c:50:
                    10:50:95:68:7f:17:4c:65:fe:19:41:62:05:10:ca:
                    16:c0:5e:0d:5c:5c:63:f5:9f:a0:5f:e2:18:b9:60:
                    cf:69:1b:f9:d5:dc:02:b7:7d:a0:cf:40:c3:d0:83:
                    45:e1:4f:6a:28:9a:b6:e1:e2:96:80:e6:7d:0e:c4:
                    f2:3b:36:38:06:39:8d:a4:c1:5a:73:19:3e:e5:9b:
                    4f:5f:af:67:16:05:12:92:23:c2:3a:9b:5c:59:ca:
                    3d:84:ed:0d:9a:14:27:cb:79:fc:fe:b5:5a:41:a4:
                    7a:4c:8b:61:71:52:9e:2a:9c:cb:05:e7:f7:8a:5b:
                    b7:c6:f2:47:ce:9f:46:f4:33:4e:bf:fe:2a:51:93:
                    91:94:63:a3:23:49:b0:d0:be:86:5a:6d:76:46:cc:
                    31:d7:53:dd:d9:07:d4:be:03:bf:ec:f8:97:4e:1b:
                    19:d1:56:d9:ab:e2:f0:8b:70:67:40:9e:a7:32:a8:
                    07:13:6c:5d:17:8a:07:17:5b:c0:89:74:4c:5b:23:
                    84:f0:33:8d:a0:1f:3e:cf:5f:df:a2:26:0a:a8:d0:
                    84:8f:bc:ab:61:39:06:a4:bd:71:17:77:65:97:1b:
                    69:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:42:71:35:B6:B1:68:F6:7D:DB:7D:CD:34:9B:D7:F3:BF:36:C5:56
            X509v3 Authority Key Identifier:
                keyid:3F:C9:5E:4F:5D:50:BC:7A:6C:95:DC:41:79:80:C7:45:E1:DC:F2:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3137372e3132382e3138372e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:ff:37:3e:7d:5b:bf:8a:cc:4a:bd:f5:d9:00:18:37:79:
         ff:11:8e:c4:cc:7a:53:4b:92:fe:88:e6:c4:cb:9b:6e:c8:fc:
         b7:1e:ad:c2:57:58:7b:8f:f2:34:8e:eb:ac:2a:90:e7:1d:0d:
         ff:48:34:d4:3f:e2:83:6d:b3:f3:d9:ca:78:8c:e0:8b:f0:35:
         f7:50:1c:85:53:b2:aa:77:68:80:90:76:ce:6a:6f:5e:9b:b3:
         09:14:e7:a2:f1:df:cf:e4:da:34:cc:ae:81:d1:76:08:18:57:
         ab:43:9c:96:19:a1:ff:e5:54:47:7a:a3:06:98:31:ed:f9:64:
         3d:ad:e4:2e:d6:80:ec:dc:3c:ff:f9:4b:65:5f:dd:5f:cf:fd:
         6f:ca:5d:cb:ac:2c:c1:c4:74:d8:9d:c7:70:d9:65:ff:ae:e5:
         3c:6a:5e:9b:81:b2:bd:2d:6b:74:ce:69:5f:2f:6f:66:eb:5a:
         d8:ae:69:d4:f7:1e:e4:c7:5b:38:6d:63:bf:f6:d1:39:51:68:
         e3:61:39:8d:eb:56:76:4c:1a:92:b6:1e:26:fe:90:8a:1d:c4:
         28:b4:ae:55:8e:74:95:b5:3d:b7:37:5b:73:37:5f:7f:d0:3e:
         09:9c:df:10:be:27:3d:0b:3c:f6:02:3d:e8:49:47:26:db:8e:
         cb:55:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org