Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3137322e302f32332d3234203d3e203532393133.roa
File:                     3137372e32332e3137322e302f32332d3234203d3e203532393133.roa (raw, json)
Hash identifier:          81PR4ScNHGateM1sNrUjqtbkOvlTjQk2ruvAXFUppnY=
Subject key identifier:   2E:2E:88:91:01:09:8A:0D:63:8A:6B:38:A0:46:94:4E:3A:9B:89:36
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       20DC12C3CB4A385C8BC29452FF4BC8B88A320AC4
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3137322e302f32332d3234203d3e203532393133.roa
Signing time:             Fri 22 Mar 2024 18:50:28 +0000
ROA not before:           Fri 22 Mar 2024 18:45:28 +0000
ROA not after:            Fri 21 Mar 2025 18:50:28 +0000
asID:                     52913
IP address blocks:        177.23.172.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:dc:12:c3:cb:4a:38:5c:8b:c2:94:52:ff:4b:c8:b8:8a:32:0a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar 22 18:45:28 2024 GMT
            Not After : Mar 21 18:50:28 2025 GMT
        Subject: CN=2E2E889101098A0D638A6B38A046944E3A9B8936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:ca:a9:13:0d:6d:31:24:11:c6:25:26:b4:
                    10:d6:f2:34:a8:0d:70:1d:ea:6a:90:4a:67:bc:62:
                    5f:71:36:c5:85:0d:69:5b:63:b8:d7:ec:97:4e:a2:
                    bd:96:e4:0e:8c:41:aa:94:7f:57:07:82:d3:e0:4e:
                    e2:2b:5b:b2:de:61:d7:19:c4:1a:37:cc:38:11:33:
                    7d:69:5a:0b:0a:4e:52:0a:d5:67:de:6c:02:1b:ed:
                    51:64:09:ed:a0:82:24:63:ad:7a:5b:d4:d0:d0:c8:
                    74:88:05:02:52:42:77:80:12:30:cc:65:9d:90:7c:
                    76:13:bf:ff:66:53:73:80:cc:7c:80:11:73:0a:16:
                    28:1b:00:25:dc:6d:ab:76:35:3b:1e:c4:3b:50:18:
                    15:6a:2a:12:d6:53:95:b9:46:27:bc:3b:64:a2:0e:
                    c3:f5:1c:b7:c8:c7:84:66:dd:67:5b:27:51:be:02:
                    e0:72:45:71:0d:b1:56:67:f2:76:25:ec:16:68:b7:
                    b1:6c:20:ac:ac:2d:ab:e0:71:b7:c9:ba:5a:be:e0:
                    eb:60:f8:f6:7c:bf:27:aa:b8:59:c8:61:f8:90:ce:
                    98:a4:74:a1:84:d5:e6:2b:ad:4a:5e:61:5f:7e:0d:
                    60:f7:3b:fe:4b:0b:fd:d9:74:47:eb:88:38:a3:cb:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:88:91:01:09:8A:0D:63:8A:6B:38:A0:46:94:4E:3A:9B:89:36
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137372e32332e3137322e302f32332d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:fe:09:29:8f:0f:ec:a8:d2:a5:25:fa:a3:dc:fb:33:cd:
         25:58:3c:7c:2c:d5:25:ae:4b:0b:24:82:a8:ee:d7:cb:e5:d4:
         2d:bd:a9:4e:8a:b5:e9:31:5f:a4:cc:bf:fe:2a:ae:10:82:4c:
         05:ec:5e:06:3b:35:4f:5e:98:8e:a2:54:ce:24:60:9d:74:94:
         83:7b:25:0e:a8:78:25:ed:6a:a7:70:0e:6d:ea:23:dc:73:f2:
         0d:51:88:1b:23:26:51:1f:69:37:f1:b7:33:6e:a5:55:56:1c:
         f0:08:60:9c:d2:11:d0:09:13:8f:e1:7f:1b:39:35:c4:76:8a:
         a3:92:6b:3b:39:d1:67:92:10:f3:0b:db:df:46:6a:9e:d0:4f:
         12:10:e2:06:19:df:d0:3f:68:9f:ba:d2:f3:84:b9:8a:32:97:
         98:33:1a:b5:c9:28:33:ec:87:c3:a6:7e:e7:88:a3:68:ea:2d:
         db:c7:bc:1a:90:8d:c9:4d:fa:70:26:85:b0:19:48:59:25:ae:
         7c:78:9e:94:a6:19:bc:95:4a:55:62:1a:7f:26:3d:81:f9:e3:
         e7:d1:4c:0b:8a:1e:e5:69:86:42:02:d4:7d:09:11:0b:eb:b1:
         b9:e5:4d:39:9f:be:64:6a:1b:b1:9d:62:69:f7:43:df:2f:5d:
         b7:77:bc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org