Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e34392e302f32342d3234203d3e203533303438.roa
File:                     3137372e3133372e34392e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          cyQZrq4gevJ8or+9OS8K9sZDzlZ/JgTCGGpMIcwXdOU=
Subject key identifier:   30:CE:F2:2F:09:C5:16:60:4B:76:71:E4:E4:92:C3:31:11:71:89:4D
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       63BA544785F978C0F942CA29B8EB1987978D892B
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e34392e302f32342d3234203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:13 +0000
ROA not before:           Wed 23 Nov 2022 18:34:13 +0000
ROA not after:            Wed 22 Nov 2023 18:39:13 +0000
asID:                     53048
IP address blocks:        177.137.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ba:54:47:85:f9:78:c0:f9:42:ca:29:b8:eb:19:87:97:8d:89:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:13 2022 GMT
            Not After : Nov 22 18:39:13 2023 GMT
        Subject: CN=30CEF22F09C516604B7671E4E492C3311171894D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b8:d2:3e:f3:11:66:7b:3d:90:c3:85:5e:b1:
                    c7:21:55:e2:81:40:a1:63:7c:41:7d:64:2a:ef:0c:
                    5d:0f:95:b7:65:87:f6:8a:62:29:5c:d7:74:32:a1:
                    43:ba:62:2f:08:91:8e:e2:ea:2b:ca:50:b6:0b:29:
                    cb:12:9c:9b:d6:9f:6d:d8:55:9a:01:43:5e:6f:68:
                    5d:a7:1e:f5:26:eb:72:6a:dc:46:af:0b:bb:85:de:
                    38:11:b1:1c:9a:48:f1:1d:05:82:f8:8c:1f:f8:ef:
                    40:bd:b1:f4:6a:78:de:82:11:4b:e6:de:0a:d0:b4:
                    90:fe:fd:e4:2c:0c:68:4e:30:b5:e9:2e:c5:c2:fd:
                    03:bf:51:45:04:4b:a8:5b:b8:9b:5c:d7:31:a6:5c:
                    0f:01:6f:db:5e:6a:98:68:8a:2f:3a:ac:4e:29:93:
                    d9:d3:36:f2:6c:42:aa:51:3c:a7:e3:58:0f:87:85:
                    00:89:7b:5c:fe:e2:9a:0f:9e:37:ac:91:aa:b3:79:
                    bd:e3:d9:f0:d7:2f:35:96:12:48:f3:b5:15:58:f7:
                    4d:ce:0e:32:cd:6e:1d:e2:7b:76:29:01:74:84:80:
                    ef:19:14:35:d3:30:f0:ba:b9:3b:90:bf:6a:c9:35:
                    46:b3:64:b1:99:43:7e:96:a5:32:43:d3:f7:13:7a:
                    ab:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CE:F2:2F:09:C5:16:60:4B:76:71:E4:E4:92:C3:31:11:71:89:4D
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e34392e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:de:2e:2a:1d:43:03:9a:23:58:f3:76:c0:1c:c6:e1:51:6f:
         f7:bd:78:3f:1e:6f:27:b9:a8:14:e9:01:04:52:27:ab:2a:10:
         28:d0:c1:f5:e1:4c:74:36:be:6b:62:b2:22:f5:a3:a7:d8:42:
         48:dd:f9:88:86:b4:46:93:96:f3:78:ef:0e:71:38:e7:53:ef:
         a6:0e:46:c9:ab:3a:64:42:21:f6:a5:01:ac:3b:f0:a9:0c:83:
         d2:db:46:be:83:a6:a6:e2:07:6c:e4:69:ee:b1:47:00:de:47:
         54:d4:0d:e1:08:d1:ad:c0:e7:36:9f:44:fa:7f:b5:67:71:f9:
         ae:db:32:28:35:cf:6c:76:0d:de:35:8a:6e:d9:7f:50:22:1c:
         43:dd:e6:1e:55:07:25:45:f1:2b:6b:0a:86:fc:a1:ac:30:f8:
         11:1d:4d:62:fb:de:1a:3e:65:a8:bb:3a:4a:a2:ad:b2:ba:c9:
         7f:24:ef:15:15:19:c1:c4:7e:7e:87:d9:34:5a:fe:9d:66:9c:
         eb:6c:2c:8f:cd:ab:97:c9:a3:fa:4c:29:ca:35:dc:70:2a:38:
         15:90:c4:0b:aa:68:72:6f:d3:b6:79:a1:bd:54:b8:c6:8e:de:
         03:e6:4d:fe:0d:e0:d1:a0:f2:df:c0:f2:8b:e0:37:e7:6d:37:
         ce:85:ab:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org