Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e39332e3234382e302f32312d3231203d3e203532393935.roa
File:                     3137372e39332e3234382e302f32312d3231203d3e203532393935.roa (raw, json)
Hash identifier:          ZPQcgPnD3IWOjyW8G+MGZMIPM6skigvNCLV5xcSVajg=
Subject key identifier:   E0:4F:9F:AA:DD:CA:A4:22:FB:5C:1E:7E:92:ED:7D:12:2E:2B:41:F8
Certificate issuer:       /CN=D85200B38B49C68D1D0BF6CACDC2C7F14E042C44
Certificate serial:       0E39D582E0C06BEE1F573BD9A14C034E379CFFB9
Authority key identifier: D8:52:00:B3:8B:49:C6:8D:1D:0B:F6:CA:CD:C2:C7:F1:4E:04:2C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85200B38B49C68D1D0BF6CACDC2C7F14E042C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e39332e3234382e302f32312d3231203d3e203532393935.roa
Signing time:             Wed 14 Jun 2023 19:00:00 +0000
ROA not before:           Wed 14 Jun 2023 18:55:00 +0000
ROA not after:            Wed 12 Jun 2024 19:00:00 +0000
asID:                     52995
IP address blocks:        177.93.248.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:39:d5:82:e0:c0:6b:ee:1f:57:3b:d9:a1:4c:03:4e:37:9c:ff:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85200B38B49C68D1D0BF6CACDC2C7F14E042C44
        Validity
            Not Before: Jun 14 18:55:00 2023 GMT
            Not After : Jun 12 19:00:00 2024 GMT
        Subject: CN=E04F9FAADDCAA422FB5C1E7E92ED7D122E2B41F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:14:c5:30:88:5e:f0:58:cd:ce:36:c1:db:4c:
                    2d:24:a7:06:19:69:d2:02:68:01:fb:1e:68:58:6c:
                    37:b9:19:e0:6f:00:c2:2b:6b:28:83:23:ea:c7:4b:
                    b9:c3:9e:8a:4b:46:ad:d4:43:98:32:36:2b:5a:3d:
                    52:e1:30:c5:6d:6e:81:c3:4f:9e:04:46:b7:27:0f:
                    54:d4:ac:db:c9:ef:4f:a7:89:00:b3:02:ac:7d:2c:
                    06:7f:80:65:6a:51:42:96:71:df:9a:66:24:e1:01:
                    7e:33:b4:64:b6:ea:e7:7c:68:72:f4:38:3c:4b:1b:
                    6a:06:dd:30:15:ab:2c:d2:f0:fb:97:90:d8:52:f6:
                    2b:d0:06:0e:26:be:ff:6a:c0:b6:25:fd:03:c7:15:
                    06:2c:e0:ee:24:f1:f1:ba:0c:d8:d5:67:b7:cd:3e:
                    0b:39:d5:69:81:78:02:47:4f:25:8a:e3:99:44:99:
                    f2:9f:d0:0d:0c:29:84:95:33:bd:c3:04:31:d3:a2:
                    c9:0b:84:33:09:1f:0a:9f:fc:71:62:95:67:1a:fb:
                    cc:08:06:ca:8d:9a:89:1b:60:e2:cf:b0:db:b0:9a:
                    80:a8:1a:d4:60:4a:4a:69:67:eb:a6:2e:7d:52:53:
                    69:46:a2:53:ec:fd:b4:4d:10:95:d7:d8:94:8d:7b:
                    03:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4F:9F:AA:DD:CA:A4:22:FB:5C:1E:7E:92:ED:7D:12:2E:2B:41:F8
            X509v3 Authority Key Identifier:
                keyid:D8:52:00:B3:8B:49:C6:8D:1D:0B:F6:CA:CD:C2:C7:F1:4E:04:2C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/D85200B38B49C68D1D0BF6CACDC2C7F14E042C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85200B38B49C68D1D0BF6CACDC2C7F14E042C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/3137372e39332e3234382e302f32312d3231203d3e203532393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:d8:8a:66:63:76:98:2f:42:70:5f:33:f4:74:a5:20:c9:bc:
         1a:60:6a:bb:33:ad:85:09:21:84:81:6b:35:70:a9:30:4f:c3:
         09:5c:73:14:e4:a3:84:b5:9b:a8:16:66:53:90:1a:ee:cf:fa:
         ad:b6:9f:d0:ba:9c:ed:b3:c0:18:a8:b7:20:eb:81:f1:70:e0:
         7c:1a:7b:91:9e:59:2b:a1:3b:c5:6e:0d:e1:79:14:4b:99:43:
         c7:de:aa:c1:64:4b:69:b8:26:83:b6:e5:32:a6:96:8c:34:37:
         d6:d9:54:26:9b:53:b3:8e:8f:ad:ad:29:b7:26:72:8b:72:a6:
         6d:e4:62:14:9e:9d:6a:25:bb:d2:1f:b4:09:f8:14:1c:e5:df:
         ea:f1:eb:5d:c3:e0:15:e2:db:2e:0f:a9:8a:3f:62:fb:38:fb:
         55:bc:44:99:fc:f1:a4:fd:fc:3f:00:c6:e0:43:7a:8d:44:b8:
         49:39:ce:50:d1:d2:9d:84:9e:07:3d:a5:6c:a4:cf:1e:65:0b:
         84:9f:f2:c9:fb:66:bd:1a:48:34:9f:77:44:1d:11:ad:4c:ee:
         84:52:c3:9a:ef:c7:db:77:67:a6:27:8c:d8:a9:21:72:8c:40:
         bb:57:0d:f2:15:0c:11:16:f8:8d:72:73:06:2b:fe:fa:59:17:
         db:67:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org