Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e34372e3232342e302f32302d3230203d3e203532393935.roa
File:                     3137372e34372e3232342e302f32302d3230203d3e203532393935.roa (raw, json)
Hash identifier:          wUX+Ug0pIjefPRB/uOPqmyaI+Ixi6EmnDgsgA8lwzJQ=
Subject key identifier:   99:18:33:44:5B:F7:09:27:B7:14:41:48:B1:75:7C:39:14:5A:52:43
Certificate issuer:       /CN=D85200B38B49C68D1D0BF6CACDC2C7F14E042C44
Certificate serial:       2F16F7E564C01D5AD88BBDF0D6A30CB90C51AE37
Authority key identifier: D8:52:00:B3:8B:49:C6:8D:1D:0B:F6:CA:CD:C2:C7:F1:4E:04:2C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85200B38B49C68D1D0BF6CACDC2C7F14E042C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e34372e3232342e302f32302d3230203d3e203532393935.roa
Signing time:             Wed 14 Jun 2023 19:00:00 +0000
ROA not before:           Wed 14 Jun 2023 18:55:00 +0000
ROA not after:            Wed 12 Jun 2024 19:00:00 +0000
asID:                     52995
IP address blocks:        177.47.224.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:16:f7:e5:64:c0:1d:5a:d8:8b:bd:f0:d6:a3:0c:b9:0c:51:ae:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85200B38B49C68D1D0BF6CACDC2C7F14E042C44
        Validity
            Not Before: Jun 14 18:55:00 2023 GMT
            Not After : Jun 12 19:00:00 2024 GMT
        Subject: CN=991833445BF70927B7144148B1757C39145A5243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:81:c1:31:e0:a9:b3:51:56:ab:2f:ca:70:
                    8b:b7:f7:e8:6c:1e:6f:72:40:bc:1e:8e:5d:ad:6b:
                    9f:50:a7:86:17:46:6f:35:dc:e6:8c:ec:92:29:d8:
                    e5:94:63:ca:0f:7b:ef:0b:61:60:de:88:fd:ba:4a:
                    96:ba:62:05:c3:64:ed:74:14:14:2e:00:7c:fb:0e:
                    91:4c:8c:ad:5a:31:47:3a:4b:7b:72:61:90:1a:7b:
                    94:21:04:bb:98:83:c0:62:da:af:83:4e:5c:2b:67:
                    bb:9d:57:19:7e:61:84:50:a9:91:e0:50:c4:85:68:
                    3c:cd:5a:a1:5e:bc:31:20:85:61:e9:c8:a1:72:f5:
                    ca:8d:a3:c3:87:1d:80:cf:fe:58:6b:f7:c6:1f:62:
                    68:48:12:cb:a7:44:b8:a1:22:35:d1:b4:a7:c5:5a:
                    c4:ab:d2:03:0f:0d:09:10:75:64:b6:32:b8:29:a0:
                    23:16:5f:9d:c4:12:3a:af:7b:d8:bd:4c:b8:26:d8:
                    c2:15:9d:a9:fc:0b:af:1f:9e:f5:7e:89:73:78:e3:
                    f3:c8:0d:01:46:fc:b9:68:17:8c:f0:01:40:2e:14:
                    dd:22:19:33:f0:a3:3e:bf:82:39:36:94:79:91:85:
                    98:d7:e9:f3:94:71:b0:90:09:7d:5c:44:c5:ff:12:
                    72:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:18:33:44:5B:F7:09:27:B7:14:41:48:B1:75:7C:39:14:5A:52:43
            X509v3 Authority Key Identifier:
                keyid:D8:52:00:B3:8B:49:C6:8D:1D:0B:F6:CA:CD:C2:C7:F1:4E:04:2C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/D85200B38B49C68D1D0BF6CACDC2C7F14E042C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85200B38B49C68D1D0BF6CACDC2C7F14E042C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e34372e3232342e302f32302d3230203d3e203532393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:f8:48:27:3d:a1:53:7e:26:84:55:1a:ab:22:63:79:c4:32:
         d4:98:ef:7c:2a:0a:a9:1d:7b:a0:3e:65:44:f8:ec:30:f0:42:
         de:72:5a:6b:c3:a7:c6:73:cf:a0:f9:52:72:01:d1:8e:ad:b0:
         2d:85:ad:fc:b6:2e:04:13:2c:ef:f7:4d:a6:64:a7:76:0d:7a:
         e7:3e:5e:a5:3d:78:ca:af:f7:70:8f:52:c6:84:c7:9d:3c:8d:
         9c:97:9c:4b:bb:f1:5e:8f:6d:da:57:64:bf:ee:19:b4:78:4f:
         a5:63:24:ac:50:24:f5:99:1d:a8:88:b7:3d:65:e7:ed:cb:b5:
         88:f4:e3:27:10:24:53:7e:f7:47:27:72:ee:7f:31:9d:ca:13:
         10:7a:1d:6e:72:c9:cb:b0:9f:21:9d:48:87:4e:bf:a5:74:36:
         20:ba:c8:4a:90:46:69:95:66:c5:d6:98:c1:48:c2:0c:cc:02:
         95:0b:4c:48:6d:36:13:46:66:41:f8:e6:89:5f:54:f6:03:d9:
         2f:42:8e:20:60:d2:17:c8:96:a2:86:50:81:bf:d7:30:7b:35:
         cc:0d:e7:3d:16:8d:27:e5:6e:1e:63:f7:c0:52:fa:0c:d8:4c:
         b1:2a:ca:3f:d6:96:4c:c5:de:bd:d0:74:e6:12:39:8a:64:fd:
         e6:bc:07:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:27 2024 by rpki-client on console-ams.rpki-client.org