Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33322e302f32312d3231203d3e20323632383432.roa
File:                     3137372e31302e33322e302f32312d3231203d3e20323632383432.roa (raw, json)
Hash identifier:          XdrJFTk9UuJcIVma0Ev76sMXjD0/XT6T6wvaRyWOBfM=
Subject key identifier:   3B:AC:F5:E5:90:B8:97:E1:55:53:F8:31:F9:D0:2E:C5:3C:31:79:6A
Certificate issuer:       /CN=F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB
Certificate serial:       20E749AF9BFE84D7DDA0744BF8195ECF68E6E4FC
Authority key identifier: F3:C5:03:AB:BC:39:04:47:BF:8B:9D:62:27:C8:52:8A:8D:2A:3A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33322e302f32312d3231203d3e20323632383432.roa
Signing time:             Wed 06 Jul 2022 15:53:44 +0000
ROA not before:           Wed 06 Jul 2022 15:48:44 +0000
ROA not after:            Wed 05 Jul 2023 15:53:44 +0000
asID:                     262842
IP address blocks:        177.10.32.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e7:49:af:9b:fe:84:d7:dd:a0:74:4b:f8:19:5e:cf:68:e6:e4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB
        Validity
            Not Before: Jul  6 15:48:44 2022 GMT
            Not After : Jul  5 15:53:44 2023 GMT
        Subject: CN=3BACF5E590B897E15553F831F9D02EC53C31796A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:9b:a1:15:e4:b6:80:8b:a1:b2:e0:6b:b5:
                    e4:c4:13:a3:98:f0:9d:ac:b2:d9:ad:c2:1a:2f:2a:
                    80:6f:46:b2:31:7f:1b:c1:00:e3:d6:42:6e:5b:92:
                    5c:5a:e1:80:28:60:01:0d:70:c2:c4:63:53:f3:5c:
                    0d:7b:c0:6f:83:89:b6:39:17:08:f8:6d:7f:4b:c1:
                    69:e1:42:1b:04:6e:ba:7a:48:6a:2a:2c:88:da:89:
                    59:fa:43:9d:c6:e8:4e:0a:e2:14:fb:1f:d3:0e:df:
                    98:bc:25:31:f4:e6:4b:06:80:ec:f2:ed:c0:4e:5f:
                    92:a9:88:df:4c:7e:8e:15:94:de:99:48:22:c4:69:
                    41:d8:aa:5d:41:ba:7f:57:4b:d3:ef:f6:c3:76:6f:
                    84:a7:7f:bd:82:0d:71:f7:ae:da:df:0b:f5:ae:db:
                    71:e7:54:a1:55:38:d0:3f:7e:9b:45:03:da:fc:79:
                    e1:0f:8c:2f:c4:2e:b9:db:ba:01:2b:8d:2e:ef:7a:
                    f0:3c:84:3d:d4:7d:ed:68:43:a4:f7:4e:77:57:3c:
                    e3:dd:bd:c8:34:18:4a:ed:86:34:8e:48:3d:35:4d:
                    90:cb:b5:84:ec:a4:24:a1:a4:6e:9f:87:53:18:8b:
                    2c:27:59:8c:ae:64:2a:5f:12:0b:ac:82:35:47:20:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AC:F5:E5:90:B8:97:E1:55:53:F8:31:F9:D0:2E:C5:3C:31:79:6A
            X509v3 Authority Key Identifier:
                keyid:F3:C5:03:AB:BC:39:04:47:BF:8B:9D:62:27:C8:52:8A:8D:2A:3A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3C503ABBC390447BF8B9D6227C8528A8D2A3ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33322e302f32312d3231203d3e20323632383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:e1:39:89:98:8e:6f:8f:52:fa:85:79:30:07:8f:3c:71:14:
         36:a6:68:5c:62:7f:dd:89:c9:b5:0b:6e:3f:8a:d0:fc:ae:14:
         8e:2e:31:e2:1d:1a:a7:83:f2:5c:01:28:99:ec:12:14:90:9c:
         6b:65:30:57:19:03:88:c8:a8:4c:bb:c1:e3:18:44:4d:5a:c7:
         d3:93:dc:6f:11:bc:bb:ef:82:d5:98:de:ec:9e:9d:01:92:a3:
         c8:ab:06:32:82:c2:09:90:18:b0:02:5b:1e:79:48:ae:d3:04:
         54:5d:d6:6f:ed:70:70:53:b4:f8:7b:5d:aa:e1:37:d7:bb:78:
         f6:bb:b6:14:19:a6:62:ce:0d:ca:c9:3a:96:75:78:80:e1:cc:
         66:d4:8b:d1:20:f0:f8:39:01:e7:46:68:3b:ed:ce:2c:13:62:
         a4:47:fe:90:dd:f1:d6:77:72:24:b3:b1:60:b8:2e:13:ba:8e:
         ea:ec:0a:84:24:3c:0f:f3:a3:4b:a8:83:55:24:d9:73:ac:c4:
         e3:dc:96:b7:2f:e7:fb:72:0c:0f:b6:9e:10:ab:f1:ab:6f:25:
         a1:dd:ce:09:ca:df:ec:f0:87:79:90:63:c9:ff:ca:4d:cc:39:
         ff:d3:df:37:55:20:a9:a8:7b:73:4b:87:ee:33:27:3b:f1:b8:
         26:2f:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org