Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137372e3232332e302e302f32302d3234203d3e203532363939.roa
File:                     3137372e3232332e302e302f32302d3234203d3e203532363939.roa (raw, json)
Hash identifier:          +j0VfXZn0UyGT8m8lCW1FYs2GCmRbZ/Xnt3BuL2WSgU=
Subject key identifier:   43:73:69:01:11:9F:FF:75:D1:B7:ED:D5:46:3D:08:7B:85:46:66:6E
Certificate issuer:       /CN=B17FDBB2898DEB3128D0DFBC517CB982BDA2D370
Certificate serial:       32AED7FC32288DCB4DE9909797CC5BD42B60DC2B
Authority key identifier: B1:7F:DB:B2:89:8D:EB:31:28:D0:DF:BC:51:7C:B9:82:BD:A2:D3:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17FDBB2898DEB3128D0DFBC517CB982BDA2D370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137372e3232332e302e302f32302d3234203d3e203532363939.roa
Signing time:             Thu 14 Sep 2023 21:03:04 +0000
ROA not before:           Thu 14 Sep 2023 20:58:04 +0000
ROA not after:            Thu 12 Sep 2024 21:03:04 +0000
asID:                     52699
IP address blocks:        177.223.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ae:d7:fc:32:28:8d:cb:4d:e9:90:97:97:cc:5b:d4:2b:60:dc:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B17FDBB2898DEB3128D0DFBC517CB982BDA2D370
        Validity
            Not Before: Sep 14 20:58:04 2023 GMT
            Not After : Sep 12 21:03:04 2024 GMT
        Subject: CN=43736901119FFF75D1B7EDD5463D087B8546666E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:49:77:d5:b1:3c:d9:dc:05:4e:2f:03:80:
                    bf:02:29:b2:99:ef:c9:c5:d4:a4:34:83:95:19:30:
                    9d:39:9b:3e:fe:14:87:e6:94:26:1a:95:e4:83:17:
                    da:3a:4c:95:f4:e3:9c:14:3d:b9:34:64:58:d7:c0:
                    a2:88:72:c3:a3:88:11:17:88:d2:d3:b5:68:d6:69:
                    a9:4b:bc:a1:cc:91:eb:35:a8:b2:1b:3d:63:a4:df:
                    5c:3a:71:25:3d:7f:97:d8:20:ce:bc:88:72:e6:4f:
                    6c:2b:51:e1:b0:43:94:fd:b8:a7:2a:6d:e1:83:77:
                    fd:48:8f:2e:66:e0:ff:49:3d:38:00:33:c9:b3:a3:
                    c0:0b:7d:58:e0:fd:72:ed:f6:bd:f9:c2:d9:09:56:
                    c7:d7:62:6a:6f:9a:75:76:12:93:82:91:f2:7d:7d:
                    98:27:46:7a:96:d0:36:a0:36:33:d9:30:e8:63:f2:
                    47:70:97:68:7c:c1:db:e9:07:89:71:37:97:7e:73:
                    28:5e:d6:f0:db:b9:cb:1c:1e:7f:8d:0c:12:50:94:
                    22:3d:6a:e6:9d:cc:8b:14:ca:2a:a3:68:77:f4:8f:
                    38:bb:c1:31:cf:e9:30:d6:fe:28:8d:72:82:ee:a4:
                    87:1f:fa:52:2e:60:7d:5f:bc:46:68:0c:51:f1:73:
                    a5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:73:69:01:11:9F:FF:75:D1:B7:ED:D5:46:3D:08:7B:85:46:66:6E
            X509v3 Authority Key Identifier:
                keyid:B1:7F:DB:B2:89:8D:EB:31:28:D0:DF:BC:51:7C:B9:82:BD:A2:D3:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/B17FDBB2898DEB3128D0DFBC517CB982BDA2D370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17FDBB2898DEB3128D0DFBC517CB982BDA2D370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/3137372e3232332e302e302f32302d3234203d3e203532363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:5c:5d:39:58:2a:19:80:f0:40:6e:8f:b3:ab:0a:f1:e8:38:
         6c:d4:a1:67:0e:77:a2:d4:2f:51:cf:2f:70:65:7b:43:2d:98:
         c3:cc:01:70:78:b0:23:c5:e3:8d:19:fd:70:fb:86:7d:4c:b9:
         e8:55:17:01:c4:80:94:f5:66:37:11:c5:0a:98:99:17:52:7b:
         fc:eb:8f:34:23:a4:26:c1:2e:03:3a:5f:f5:3c:29:68:0a:95:
         ca:3f:e8:4d:6f:13:fe:fd:6d:88:4b:0e:37:26:b6:da:8a:48:
         57:9c:9e:31:24:d6:c7:83:67:8c:f0:e3:fb:56:f2:e6:25:a1:
         14:05:ee:f5:0f:03:c9:d4:da:55:f0:a3:cb:a7:fb:cc:e4:22:
         4f:3d:38:47:ae:f4:e0:ef:66:90:bd:91:00:cd:58:6c:59:b3:
         5e:11:7a:5d:19:cc:5a:23:64:26:13:c6:2e:08:80:ce:23:a8:
         50:10:7c:8e:a1:02:a4:c8:d5:ff:1d:7f:59:13:a7:da:81:d3:
         2a:ff:e8:77:51:8b:b2:d0:45:bf:5e:00:3d:1b:9f:4e:b5:a1:
         ef:bd:7d:09:80:eb:62:bc:2e:cb:3a:cd:ea:a1:d8:4e:60:4b:
         d3:d5:46:98:51:24:11:b2:0a:f1:96:fe:6d:52:31:7c:9f:c5:
         b4:bf:e2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org