Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          L+qSfSZWpm0IMDgHXPunG9KSz955QrNZPFSSuYLebyM=
Subject key identifier:   70:BE:9B:E1:F9:80:C9:01:BD:52:C4:69:5F:B0:D0:13:7D:73:30:B4
Certificate issuer:       /CN=3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E
Certificate serial:       5D0DFFE6BBBC5B5CCAD8D07F46A75187CE305A9D
Authority key identifier: 3F:C9:5E:4F:5D:50:BC:7A:6C:95:DC:41:79:80:C7:45:E1:DC:F2:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa
Signing time:             Thu 04 Apr 2024 20:38:55 +0000
ROA not before:           Thu 04 Apr 2024 20:33:55 +0000
ROA not after:            Thu 03 Apr 2025 20:38:55 +0000
asID:                     28587
IP address blocks:        177.128.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0d:ff:e6:bb:bc:5b:5c:ca:d8:d0:7f:46:a7:51:87:ce:30:5a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E
        Validity
            Not Before: Apr  4 20:33:55 2024 GMT
            Not After : Apr  3 20:38:55 2025 GMT
        Subject: CN=70BE9BE1F980C901BD52C4695FB0D0137D7330B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:a5:6c:cb:f0:65:e4:c8:c0:70:33:af:7c:
                    d6:b7:57:fd:6c:92:2f:3d:f9:3f:cb:2d:00:de:a9:
                    07:9c:0f:7f:43:6c:46:d9:bf:d8:06:a9:55:d3:f1:
                    f7:df:9e:36:fd:a8:e8:dc:99:ae:77:3f:c4:63:91:
                    64:ad:41:9a:87:ee:ed:32:16:ea:8c:1a:07:9c:bb:
                    fc:b7:98:90:27:a5:b4:9b:0d:5c:59:ec:9b:13:13:
                    5d:58:f2:cc:65:c7:b6:d8:7a:ea:11:e9:ae:64:6b:
                    f8:ef:57:bb:2d:ea:b8:86:93:05:db:7a:e4:76:77:
                    29:0a:50:4d:d7:53:6e:78:79:ad:91:44:c2:1b:2c:
                    2e:a2:95:49:da:3a:b7:c3:db:ba:df:97:fb:1a:bf:
                    5f:52:fc:b7:f6:ed:59:83:74:69:82:f7:2b:fb:7d:
                    c8:21:a7:e2:dc:2c:77:58:c9:10:49:15:46:50:a2:
                    2b:79:74:29:fe:3e:a6:38:b8:8e:8a:12:09:c7:a4:
                    e2:3e:b0:2f:d2:cc:e9:2a:ce:b4:3b:d2:c3:19:8c:
                    b0:6c:75:ab:c5:aa:2e:23:e2:b0:3e:c9:f5:62:19:
                    ae:f7:60:f3:a0:b2:91:49:50:e6:25:71:c2:1d:c9:
                    99:f1:1a:cd:5e:02:94:74:da:44:38:f8:bb:ce:3a:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BE:9B:E1:F9:80:C9:01:BD:52:C4:69:5F:B0:D0:13:7D:73:30:B4
            X509v3 Authority Key Identifier:
                keyid:3F:C9:5E:4F:5D:50:BC:7A:6C:95:DC:41:79:80:C7:45:E1:DC:F2:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:ce:46:fd:b9:e8:60:93:bf:d2:b1:f7:eb:c5:1c:8e:59:00:
         50:55:f0:c9:71:41:bd:70:62:62:d0:fb:42:24:89:9d:0a:f3:
         ed:20:7d:62:b3:bd:a6:10:7c:fc:67:73:cc:3f:c5:0e:f7:e3:
         59:1d:46:45:60:b6:11:0a:ce:a8:59:c5:08:dd:eb:f3:81:e4:
         c2:a4:a7:46:cf:47:ad:23:0f:79:ed:89:00:20:a4:0d:4a:eb:
         71:2e:45:13:3f:60:71:da:94:fd:05:7d:da:cd:bd:40:54:cf:
         ed:4b:46:51:68:a7:09:93:29:32:10:bc:30:ce:82:22:7f:08:
         1e:dc:9c:81:81:64:ba:bb:eb:9f:f5:24:38:aa:54:ff:17:ff:
         b0:13:58:45:5d:af:b3:2f:d6:67:47:16:37:19:44:e0:61:52:
         99:71:f3:36:14:e8:c0:a7:d6:ff:5d:35:61:7b:76:bd:c9:1d:
         9c:d2:2f:49:e6:c3:4f:ba:a4:54:81:2b:a4:2f:ae:6b:c8:3a:
         fe:9f:8c:65:b9:42:17:9f:75:10:1b:49:fe:e5:3c:82:a2:98:
         9c:da:dd:ea:b0:91:11:9c:e3:39:ae:6e:c7:32:70:b1:56:67:
         0e:61:e9:ee:fb:05:8a:9c:20:d0:4d:ad:16:62:eb:81:8e:11:
         2a:44:81:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org