Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/0/3137372e31302e38302e302f32312d3232203d3e20323632383436.roa
File:                     3137372e31302e38302e302f32312d3232203d3e20323632383436.roa (raw, json)
Hash identifier:          TzR63HT4ZmjJB6WeB+QlulgjYL/3YQoslBCPUcOxMNE=
Subject key identifier:   06:97:07:E7:00:54:64:D0:C9:38:90:2E:A0:42:BD:00:E4:57:DF:58
Certificate issuer:       /CN=2B52B1DB686046175EE418BD9ACE67606D48092C
Certificate serial:       788DD6FD358AA0D219C322FC2355430B764D3B
Authority key identifier: 2B:52:B1:DB:68:60:46:17:5E:E4:18:BD:9A:CE:67:60:6D:48:09:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B52B1DB686046175EE418BD9ACE67606D48092C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/0/3137372e31302e38302e302f32312d3232203d3e20323632383436.roa
Signing time:             Fri 19 May 2023 11:12:43 +0000
ROA not before:           Fri 19 May 2023 11:07:43 +0000
ROA not after:            Fri 17 May 2024 11:12:43 +0000
asID:                     262846
IP address blocks:        177.10.80.0/21 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8d:d6:fd:35:8a:a0:d2:19:c3:22:fc:23:55:43:0b:76:4d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B52B1DB686046175EE418BD9ACE67606D48092C
        Validity
            Not Before: May 19 11:07:43 2023 GMT
            Not After : May 17 11:12:43 2024 GMT
        Subject: CN=069707E7005464D0C938902EA042BD00E457DF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:23:b7:c8:8b:10:16:89:95:4f:b4:88:3f:
                    61:b2:55:e5:3a:46:79:1d:36:bc:a1:c0:24:f3:5f:
                    09:cf:c0:fd:85:47:27:21:ff:fd:9c:81:d0:5d:3c:
                    63:03:c3:3e:05:1a:92:fa:2b:05:94:3c:e7:9e:03:
                    d6:57:86:53:e3:ab:4e:3d:aa:4d:44:84:d8:29:bd:
                    d7:d5:34:dd:11:6a:85:b0:37:e9:28:6d:62:b0:2f:
                    15:dd:3a:85:cc:14:c2:2d:28:27:a4:e6:90:3c:86:
                    15:55:d0:a4:7e:e1:6f:65:39:4c:7a:54:e3:c6:2d:
                    7d:7e:df:5f:36:bc:6f:06:e8:f7:4e:72:4c:09:dd:
                    47:92:b2:05:0a:6b:ef:45:54:05:67:74:95:79:5e:
                    22:c4:c8:a5:72:2b:46:70:d5:16:7a:8f:73:be:67:
                    b4:36:ba:da:c2:25:6c:95:d3:0e:07:3e:dd:5a:ed:
                    de:6d:38:11:9d:9f:f8:a2:be:12:45:53:9d:07:b8:
                    49:86:8b:b8:af:7d:d2:a0:5f:55:e2:08:a7:2c:2e:
                    eb:ea:ad:4d:32:cf:63:8b:97:5b:4a:8c:f7:05:0a:
                    79:72:ed:a6:69:2b:b4:fa:e0:ac:27:37:66:97:b7:
                    82:2f:4a:87:ad:d5:7d:1e:c0:24:7a:18:eb:1c:7d:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:97:07:E7:00:54:64:D0:C9:38:90:2E:A0:42:BD:00:E4:57:DF:58
            X509v3 Authority Key Identifier:
                keyid:2B:52:B1:DB:68:60:46:17:5E:E4:18:BD:9A:CE:67:60:6D:48:09:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/0/2B52B1DB686046175EE418BD9ACE67606D48092C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B52B1DB686046175EE418BD9ACE67606D48092C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/0/3137372e31302e38302e302f32312d3232203d3e20323632383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:04:9f:8f:5a:4f:56:34:c8:b6:66:15:e5:dc:80:91:40:8d:
         04:2a:b5:93:c2:d8:13:d8:bd:ed:b7:30:7b:2f:d8:67:c9:be:
         d6:06:fc:d4:b7:cd:b0:44:30:07:d7:5d:69:5c:75:60:2b:3b:
         1b:4c:2c:40:1e:58:bd:01:c4:51:8a:a1:92:c7:e9:bf:a8:c3:
         ea:46:3f:2f:fa:5c:1e:97:73:88:bc:e4:96:a6:19:1b:f8:eb:
         43:a9:89:e5:d6:17:25:56:d7:17:54:0c:60:05:86:83:b4:c2:
         aa:3c:12:9b:e7:4c:43:e6:af:9f:f2:e4:31:51:45:7e:e1:ce:
         ab:5c:7e:ed:ef:7f:43:5e:21:1a:04:ff:b5:9c:5a:d8:20:9a:
         6b:76:ce:a2:7b:a8:52:3d:47:4e:a3:0b:1f:a7:4a:bb:de:a3:
         b2:b8:44:ae:0a:dd:6e:6a:79:d3:9b:90:17:a6:37:d2:22:08:
         02:6a:01:eb:2f:31:b1:55:9e:17:3e:cd:c8:0a:83:66:52:cb:
         80:50:84:43:5a:0f:12:08:6a:ef:a9:5e:e9:36:1e:a9:71:02:
         43:52:04:0a:0b:5a:eb:a9:58:f1:83:e3:5e:08:c5:24:eb:a9:
         33:26:97:c8:0f:08:fe:99:aa:af:e3:38:91:e5:d2:0a:93:fd:
         50:0f:fc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org