Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3234203d3e20323731373234.roa
File:                     3137372e37352e3230382e302f32302d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          juY8SGqpjEq1JHQgm07P58rKtmw3fkngog8Mzn4CxKc=
Subject key identifier:   88:13:FC:85:66:39:51:9A:C0:C8:42:3E:D0:58:EB:FA:73:28:B7:AC
Certificate issuer:       /CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
Certificate serial:       336C491F15D70F218C95317B004FDFB0858A77CA
Authority key identifier: E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3234203d3e20323731373234.roa
Signing time:             Tue 28 Feb 2023 12:43:01 +0000
ROA not before:           Tue 28 Feb 2023 12:38:01 +0000
ROA not after:            Tue 27 Feb 2024 12:43:01 +0000
asID:                     271724
IP address blocks:        177.75.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6c:49:1f:15:d7:0f:21:8c:95:31:7b:00:4f:df:b0:85:8a:77:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
        Validity
            Not Before: Feb 28 12:38:01 2023 GMT
            Not After : Feb 27 12:43:01 2024 GMT
        Subject: CN=8813FC856639519AC0C8423ED058EBFA7328B7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:b2:73:49:56:48:a1:7b:cf:ca:f8:e2:22:
                    1b:00:57:c4:0b:8a:a6:82:fd:49:b5:df:77:af:e9:
                    62:85:81:b9:ac:04:2b:e9:d2:70:78:7b:af:7d:e2:
                    54:22:91:20:d0:23:4a:1d:a0:4e:cc:e2:bd:5b:6a:
                    6d:35:6a:f1:23:91:46:7b:9a:74:c2:75:ef:c9:08:
                    c0:e6:65:ce:0d:d0:93:64:fe:b9:cb:7d:fe:48:c8:
                    28:03:34:b9:6d:34:0d:84:7e:a1:e1:7f:be:e4:7a:
                    a4:13:d9:57:b4:23:44:ac:87:7d:89:ea:fd:a2:ed:
                    5e:d2:d6:8d:3f:48:66:46:35:05:91:04:07:a9:4c:
                    f3:59:e8:ce:1f:d5:63:c4:7f:0a:d2:a0:e9:f5:7b:
                    18:d1:86:93:4e:e0:61:a9:85:fe:fc:1a:be:33:fa:
                    3f:ce:bd:7f:72:9e:6d:29:2b:d5:94:e8:d7:64:6d:
                    76:ab:a6:14:a0:b7:c7:71:84:36:59:e1:c9:94:3d:
                    3e:e6:81:65:a4:af:5e:60:7e:6d:66:59:1c:a9:78:
                    1e:4f:91:ef:e2:07:0c:03:53:f0:6c:c9:a0:bc:af:
                    69:d7:0f:87:42:00:f9:d7:d9:f9:fd:29:e6:6c:3c:
                    7a:68:c9:84:07:34:d2:59:93:6b:87:0c:fe:34:a8:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:13:FC:85:66:39:51:9A:C0:C8:42:3E:D0:58:EB:FA:73:28:B7:AC
            X509v3 Authority Key Identifier:
                keyid:E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:ab:e1:6f:26:7b:a8:74:0f:f5:2e:a0:21:b7:e3:61:4b:24:
         26:19:77:e8:df:9c:b7:9f:dc:88:b5:44:fc:01:15:52:46:17:
         58:b5:2f:aa:8f:75:6c:dc:77:1a:e9:ad:a9:79:5f:67:ad:3e:
         f6:94:4b:1b:4a:5b:04:63:a4:fc:5e:fb:16:64:00:63:99:27:
         4e:98:6e:66:9b:c0:da:0a:fb:e9:43:6f:c7:7c:fa:12:62:1f:
         34:eb:ce:a7:dc:c5:bb:87:ed:ef:1c:6a:23:7b:ca:84:6e:b0:
         63:20:0c:2b:bd:2e:31:74:fc:22:43:cd:ef:04:6a:b7:39:37:
         5e:6a:60:13:d3:1e:11:c2:69:36:cd:cb:3c:95:70:39:42:b0:
         e6:b0:31:6e:10:22:88:ab:ea:35:f4:23:8d:06:1d:fa:bc:2e:
         73:5a:20:32:93:7d:9c:32:be:f2:61:60:cb:74:20:ba:08:f6:
         1c:90:06:fe:c1:77:b9:dd:64:d8:8e:d5:ea:d6:7e:7a:5b:07:
         74:6f:fb:ca:35:04:45:41:8d:4e:df:ae:01:a1:58:23:4f:1f:
         dc:05:2c:2e:53:31:ae:33:2a:af:47:b9:e8:71:a3:e9:ce:8d:
         93:6c:31:f5:d9:f3:cb:fa:50:72:0f:36:91:3c:e4:6e:7a:7f:
         a6:cc:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org