Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e37302e38302e302f32302d3234203d3e203238323431.roa
File:                     3137372e37302e38302e302f32302d3234203d3e203238323431.roa (raw, json)
Hash identifier:          Ddz34x66DvTt/au0jx/Lai8Cl4T2lHiTwu0jUPYus+U=
Subject key identifier:   E0:05:2F:96:0F:39:22:4F:3B:29:A3:8C:87:12:8C:EC:5E:7B:74:6D
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       64C0147E6C61A571F7562C7833B5E71F0C80C36E
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e37302e38302e302f32302d3234203d3e203238323431.roa
Signing time:             Fri 03 May 2024 21:19:10 +0000
ROA not before:           Fri 03 May 2024 21:14:10 +0000
ROA not after:            Fri 02 May 2025 21:19:10 +0000
asID:                     28241
IP address blocks:        177.70.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c0:14:7e:6c:61:a5:71:f7:56:2c:78:33:b5:e7:1f:0c:80:c3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:14:10 2024 GMT
            Not After : May  2 21:19:10 2025 GMT
        Subject: CN=E0052F960F39224F3B29A38C87128CEC5E7B746D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:39:4b:61:b5:58:06:39:27:b7:e8:11:97:
                    0f:81:73:7a:b4:89:53:7a:1b:83:5a:21:42:54:27:
                    cf:38:c5:18:b0:00:9f:96:67:37:83:89:3c:1c:6b:
                    a6:41:41:10:ee:d9:30:f9:0c:32:48:5f:08:ec:0a:
                    b2:91:4f:a3:d2:b3:6e:68:3d:a2:b5:c2:7f:ef:c2:
                    16:8c:63:00:8e:df:ed:94:b7:20:15:12:64:f6:6f:
                    25:67:1f:23:99:ce:8e:63:48:33:75:88:a4:a2:0e:
                    74:ad:8d:2e:ec:6a:4f:12:af:4d:19:63:ba:b2:ce:
                    e6:ec:04:57:83:f9:8e:ce:a1:0a:31:7b:84:1c:63:
                    03:51:ea:00:91:fc:0e:66:96:59:fb:a3:45:68:9c:
                    09:26:5e:0c:46:e7:e5:04:ac:b6:95:3c:53:f8:08:
                    10:d0:bd:bc:77:cc:7c:6b:93:4a:4e:03:5f:8e:af:
                    1d:8d:ab:81:b3:d6:f0:a1:dc:78:0e:2b:be:3e:f0:
                    11:c8:3f:db:09:3e:ba:dd:17:cc:07:a4:5c:5a:5d:
                    1f:d7:55:79:61:39:92:d6:3c:7e:f7:a0:6d:86:55:
                    49:73:5e:0c:7e:b3:1c:e6:aa:a4:a5:0e:91:8c:b2:
                    79:83:dd:da:58:9e:3e:c7:aa:b9:42:70:91:4d:2f:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:05:2F:96:0F:39:22:4F:3B:29:A3:8C:87:12:8C:EC:5E:7B:74:6D
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137372e37302e38302e302f32302d3234203d3e203238323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:b0:04:93:46:de:9b:dd:8d:9b:f2:a4:4b:6d:70:44:65:1c:
         2d:17:03:83:ea:dd:c0:44:e5:83:46:55:0e:1d:cc:d5:e5:52:
         8d:7a:32:19:0d:58:4c:cc:fc:95:b0:64:c0:5b:2f:be:91:74:
         e9:ad:92:69:08:fc:2b:34:ea:e1:9e:ed:06:8b:10:c8:75:74:
         6c:63:07:3e:6a:be:0f:ed:17:bc:0d:da:d5:4d:0d:76:81:3c:
         7c:6b:c1:87:2a:13:32:3f:57:5e:8d:cc:88:80:df:86:b3:b6:
         29:35:f4:6a:66:ea:2e:eb:04:b4:f6:57:23:55:14:13:d1:86:
         07:89:45:ff:40:dc:c7:04:e6:8c:2c:4e:18:d9:f5:58:a6:2b:
         08:e8:50:66:52:68:ac:e2:c2:81:52:44:5a:0a:4a:f2:df:36:
         bd:46:20:71:b7:4b:d7:5a:15:a6:54:0a:f5:ab:86:18:d3:ab:
         4a:0a:f9:83:ad:f2:0a:68:2f:bd:c5:e3:ee:ff:34:07:5b:20:
         cd:27:c6:2d:5c:13:ac:ff:5a:b7:b9:b5:82:ea:1c:85:4f:df:
         5d:2f:56:43:ce:7f:90:08:4b:c6:71:b8:eb:fd:e6:52:48:ec:
         05:3a:fb:f6:0e:8a:c8:e8:60:38:6b:2d:5e:b4:d2:22:4e:7e:
         fc:b6:b4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org