Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3137372e31322e3132382e302f32322d3234203d3e20323634313230.roa
File:                     3137372e31322e3132382e302f32322d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          rrOAO12tGgPZWQqCSEjP2ticcZjzW039eTGjzGN4te4=
Subject key identifier:   B2:23:10:BA:DC:99:E6:42:7C:D9:E3:93:A3:1C:50:0C:AB:E9:20:0C
Certificate issuer:       /CN=3295B9AB4DA3695748C7EEA28733CEF3C4265285
Certificate serial:       2387BE7F444B0C4C8DAC2B79CE1947055A2A4817
Authority key identifier: 32:95:B9:AB:4D:A3:69:57:48:C7:EE:A2:87:33:CE:F3:C4:26:52:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295B9AB4DA3695748C7EEA28733CEF3C4265285.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3137372e31322e3132382e302f32322d3234203d3e20323634313230.roa
Signing time:             Fri 23 Feb 2024 12:18:38 +0000
ROA not before:           Fri 23 Feb 2024 12:13:38 +0000
ROA not after:            Fri 21 Feb 2025 12:18:38 +0000
asID:                     264120
IP address blocks:        177.12.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:87:be:7f:44:4b:0c:4c:8d:ac:2b:79:ce:19:47:05:5a:2a:48:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3295B9AB4DA3695748C7EEA28733CEF3C4265285
        Validity
            Not Before: Feb 23 12:13:38 2024 GMT
            Not After : Feb 21 12:18:38 2025 GMT
        Subject: CN=B22310BADC99E6427CD9E393A31C500CABE9200C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:b8:29:b2:8d:7b:d7:df:79:5f:03:5a:bd:
                    12:cc:b1:43:d2:1f:1d:55:cc:f2:50:83:8a:b1:17:
                    30:70:24:e6:9b:5a:55:6f:ce:46:e3:a5:09:48:34:
                    c1:e3:43:bb:4e:af:85:6f:f7:e1:67:ae:0a:17:ed:
                    0e:04:61:93:14:e4:2b:61:5a:c0:bd:d0:0a:4a:63:
                    1e:46:6c:df:ee:03:28:a6:eb:d6:40:17:25:32:6a:
                    ef:41:7d:5b:fc:bd:cd:78:3a:c6:a4:36:6f:74:d9:
                    12:ad:48:b2:a9:70:92:42:e7:2e:53:2c:cf:d9:01:
                    6e:53:23:19:8f:5f:20:5d:6d:eb:e8:58:81:86:4a:
                    3a:72:ac:9d:c5:e2:0c:3b:df:bf:b9:32:1e:4c:4b:
                    74:87:49:5e:93:03:7c:06:7c:40:9d:44:cf:86:8c:
                    14:e1:ab:4d:b8:c9:a0:3e:f0:46:0e:0e:05:1b:35:
                    13:38:85:66:76:cf:89:de:b8:85:1c:32:c7:d5:7f:
                    ac:fb:6c:fe:5c:f0:ec:97:87:f0:65:69:c8:1f:b1:
                    23:6d:1d:e0:5a:f8:23:68:ee:c1:16:cc:a2:c7:71:
                    78:d4:5c:3e:ae:e6:49:a0:55:ac:ed:e4:04:86:5c:
                    51:8f:ce:0d:c8:ad:ec:14:a1:fe:d0:df:54:f6:c6:
                    c6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:23:10:BA:DC:99:E6:42:7C:D9:E3:93:A3:1C:50:0C:AB:E9:20:0C
            X509v3 Authority Key Identifier:
                keyid:32:95:B9:AB:4D:A3:69:57:48:C7:EE:A2:87:33:CE:F3:C4:26:52:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3295B9AB4DA3695748C7EEA28733CEF3C4265285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295B9AB4DA3695748C7EEA28733CEF3C4265285.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3137372e31322e3132382e302f32322d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:e3:d1:cc:7c:1d:49:5f:b4:e5:f8:ea:56:f2:f2:c5:54:d5:
         5d:5f:fc:f4:3d:cb:53:91:8a:44:57:3b:49:a8:60:b1:87:bb:
         72:cd:0d:a7:5d:15:96:50:22:9e:c9:af:7c:28:a4:93:04:7b:
         2d:72:b9:51:b6:60:87:ed:4a:72:d2:b2:75:a5:d2:6d:a5:a3:
         45:a8:af:78:de:32:26:0d:ef:87:16:35:fd:8c:44:8e:5c:3b:
         e2:4b:54:a0:43:60:ab:25:32:e7:54:54:40:49:62:85:6b:50:
         3e:24:33:6a:0e:2f:99:53:2b:c6:bd:f4:88:2e:c3:38:03:f2:
         fc:03:cb:b6:c7:2c:83:85:4f:bd:7d:63:1d:53:d6:bf:ce:6f:
         9b:f5:8a:82:60:de:f4:4a:88:11:00:86:40:00:5c:a9:9c:67:
         aa:79:c2:e2:b1:9f:4f:61:99:27:15:0d:93:5f:fa:ff:7f:b8:
         dd:c7:54:a2:36:7f:b6:57:4a:50:88:0b:91:ce:1b:46:58:fe:
         0b:6b:d5:9e:dc:13:e3:a0:82:84:4c:f9:6d:6b:4f:92:b3:6f:
         64:e7:7c:b4:72:d2:1f:c8:cf:93:88:0d:32:ee:48:5a:90:7d:
         ed:01:31:6b:e1:69:78:d2:81:19:80:53:1c:17:f6:79:60:f0:
         cc:66:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org