Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          Lsiy+qxwdTC3KZMJJTuLeOmR6cvgYEj2WTpZaSQroh0=
Subject key identifier:   38:53:B7:59:B1:A8:17:E8:F4:32:FA:60:26:C5:91:0F:C3:C7:34:83
Certificate issuer:       /CN=3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E
Certificate serial:       20AFED3B90916CCEB1A7FF52401C35F0C20643BD
Authority key identifier: 3F:C9:5E:4F:5D:50:BC:7A:6C:95:DC:41:79:80:C7:45:E1:DC:F2:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa
Signing time:             Thu 04 Apr 2024 20:38:55 +0000
ROA not before:           Thu 04 Apr 2024 20:33:55 +0000
ROA not after:            Thu 03 Apr 2025 20:38:55 +0000
asID:                     28587
IP address blocks:        177.128.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:af:ed:3b:90:91:6c:ce:b1:a7:ff:52:40:1c:35:f0:c2:06:43:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E
        Validity
            Not Before: Apr  4 20:33:55 2024 GMT
            Not After : Apr  3 20:38:55 2025 GMT
        Subject: CN=3853B759B1A817E8F432FA6026C5910FC3C73483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:3b:f0:35:4b:9b:b2:2b:5f:24:f7:74:fc:
                    4c:f0:6a:6d:99:52:07:ed:bb:1f:46:e4:f0:f9:24:
                    82:56:69:01:f8:43:a0:a0:b5:52:c0:97:12:ee:14:
                    5a:6c:2d:85:80:f1:d3:40:c0:2b:60:22:5e:14:13:
                    3e:99:ad:b2:24:4a:34:6b:0a:9d:bc:00:cb:c7:e2:
                    a9:7f:11:64:e7:fe:b7:cc:7f:a6:9e:de:0c:ce:07:
                    46:e8:8b:f0:dd:68:03:6c:3b:b1:a7:41:4f:d8:53:
                    be:88:e6:fe:59:4c:b3:6a:24:50:f7:15:ad:b0:74:
                    89:27:83:9b:24:ee:ef:96:b1:c6:50:86:5e:1f:78:
                    60:bb:b1:5e:29:ed:ac:33:6e:85:27:83:04:b3:ba:
                    17:cb:9b:35:4c:d9:ea:3a:53:27:c0:8f:56:f1:e4:
                    18:29:db:55:c2:12:a7:66:d1:02:a3:2b:c0:7b:36:
                    18:37:05:34:40:e8:60:36:b7:a9:be:c0:8a:6e:8f:
                    62:0c:19:34:42:9a:36:bb:43:f7:9a:fb:25:db:b1:
                    ee:55:af:52:78:3c:62:75:f3:a2:5c:6c:4d:0a:94:
                    bb:59:0e:aa:a7:4f:76:e4:5e:2d:71:27:c0:17:56:
                    f5:67:1d:d8:47:88:23:58:7b:f5:45:79:9a:8e:cc:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:53:B7:59:B1:A8:17:E8:F4:32:FA:60:26:C5:91:0F:C3:C7:34:83
            X509v3 Authority Key Identifier:
                keyid:3F:C9:5E:4F:5D:50:BC:7A:6C:95:DC:41:79:80:C7:45:E1:DC:F2:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:84:09:e5:6e:2b:4d:db:cd:89:0c:c7:70:32:14:3e:96:f5:
         55:b3:00:01:0d:0e:ce:95:de:96:6e:de:13:ee:84:b2:cb:12:
         f5:1d:a4:f2:59:1e:da:b5:82:95:43:b0:ea:09:2b:11:34:86:
         45:db:1f:0d:a0:16:be:51:ec:17:92:7e:43:93:28:a8:ab:3e:
         dd:9f:b3:e3:26:0f:16:f0:0d:7a:0e:bc:c0:51:9e:d4:43:0a:
         7d:58:53:f1:5e:c2:74:b9:fe:3a:29:13:d9:9f:e1:a3:19:d4:
         38:29:4b:9a:45:8e:e8:1f:56:7a:ad:b8:69:79:2a:68:3a:cb:
         02:87:28:de:55:45:a3:4f:e8:29:65:20:81:07:3a:d4:92:26:
         7a:a3:60:97:64:af:c0:96:e0:a6:02:18:fb:07:48:54:9d:b7:
         5a:b6:cf:3c:e5:eb:e6:2c:66:c7:f9:c6:79:01:47:21:37:71:
         3a:66:5c:56:0a:57:14:21:f0:8b:6f:d2:8e:b3:29:2c:c0:7d:
         61:73:60:f9:fd:4b:b5:3d:26:a8:d1:2d:b1:70:e7:79:20:00:
         e4:8b:dc:f1:c4:3c:cb:08:8c:a9:4c:98:a5:f0:7c:23:fe:1d:
         b7:d2:4d:64:0f:7d:be:76:a2:e0:7c:82:80:c7:1e:f4:d8:9b:
         7d:b6:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org