Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137372e35352e3232342e302f32302d3332203d3e203238363536.roa
File:                     3137372e35352e3232342e302f32302d3332203d3e203238363536.roa (raw, json)
Hash identifier:          J8eSkivSM5PK94yuxDw4TWFsOh7yLXFl78T/3rEGpX4=
Subject key identifier:   C1:DB:33:45:84:2E:C7:A1:4E:74:E9:4D:F6:4E:2E:7B:0C:C6:37:97
Certificate issuer:       /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial:       0BD9A45F36B5E48E4D31CD82A0D4D26D34DC3419
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137372e35352e3232342e302f32302d3332203d3e203238363536.roa
Signing time:             Mon 27 Mar 2023 15:15:45 +0000
ROA not before:           Mon 27 Mar 2023 15:10:45 +0000
ROA not after:            Mon 25 Mar 2024 15:15:45 +0000
asID:                     28656
IP address blocks:        177.55.224.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d9:a4:5f:36:b5:e4:8e:4d:31:cd:82:a0:d4:d2:6d:34:dc:34:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
        Validity
            Not Before: Mar 27 15:10:45 2023 GMT
            Not After : Mar 25 15:15:45 2024 GMT
        Subject: CN=C1DB3345842EC7A14E74E94DF64E2E7B0CC63797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:36:1f:55:45:5b:f7:d1:ae:20:25:42:84:75:
                    2e:31:9c:65:b3:1d:4e:03:fe:ca:49:3b:1e:fd:16:
                    e5:16:86:bc:5d:18:72:3c:29:d3:d9:db:e2:97:32:
                    0c:05:a1:4b:51:d0:59:e5:9d:4a:51:7b:4c:a0:3a:
                    e3:24:b6:5b:f9:89:58:65:6c:16:71:0e:28:bd:8f:
                    ef:dc:e8:35:13:c2:37:ba:8d:cd:70:15:be:80:54:
                    4d:43:8a:5e:be:51:2d:f0:51:bd:91:4e:bf:ca:c7:
                    1d:1c:6d:a1:6f:2a:e7:77:c8:22:a2:3c:72:ce:c3:
                    1e:0e:bd:84:81:10:0e:d0:a4:01:96:80:dd:78:8b:
                    62:6c:05:15:d2:79:4b:5f:5c:fc:5b:61:a4:9b:7a:
                    e1:2a:a8:ef:2a:8c:d2:1f:09:3d:20:07:7c:da:c5:
                    b3:39:f7:94:c5:7d:eb:9c:92:0f:19:24:be:d0:83:
                    c1:c4:b2:4a:55:2e:3d:c2:f1:a1:dc:2d:49:ab:11:
                    d9:e2:00:3a:1f:39:f3:cd:b1:eb:05:46:55:88:d9:
                    b3:5c:1d:39:ef:3a:94:3b:2e:9f:19:e7:e6:78:36:
                    94:61:a4:49:28:60:78:53:6b:4e:60:d6:78:49:70:
                    26:31:56:0d:50:ca:2f:6f:55:24:40:d5:b8:5f:91:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DB:33:45:84:2E:C7:A1:4E:74:E9:4D:F6:4E:2E:7B:0C:C6:37:97
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137372e35352e3232342e302f32302d3332203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:e7:55:08:8b:1b:7c:59:c3:24:72:bc:e4:36:41:b8:f6:02:
         ea:8a:cd:8e:5b:7c:f6:d1:c4:bf:87:78:91:09:c6:5e:5a:33:
         80:f4:5c:5c:87:2e:eb:4f:2c:fb:3b:f9:4f:8b:34:51:99:6f:
         2b:18:48:4e:e9:3a:05:75:7e:00:0d:fc:10:55:4e:c0:51:04:
         c7:62:3c:d1:5d:c1:1d:da:4b:cc:f9:0b:30:2e:37:47:5e:7a:
         b9:e0:51:ad:e0:e8:f7:f0:34:2a:03:9c:c9:eb:47:e9:16:1c:
         5c:e8:4f:ff:10:c7:b7:23:de:97:53:b3:31:80:b1:84:65:c3:
         14:e6:f8:71:20:56:55:70:bc:41:74:e1:bd:b0:9c:cb:a2:75:
         20:7e:6b:6d:60:1c:f3:f4:39:86:81:d2:8a:9e:64:d5:3a:24:
         ee:31:5e:44:66:01:ec:8f:d7:30:68:61:25:7d:61:a8:7d:db:
         66:81:6f:4c:9b:4b:38:17:09:b9:3d:3e:95:62:42:d5:c3:ff:
         a4:0a:1e:70:e0:f2:98:2d:06:3c:0a:28:b7:36:d3:14:bd:6b:
         e9:df:22:cb:04:f3:5f:e0:4e:93:f9:51:f2:27:40:a5:23:e5:
         34:ab:34:e7:b2:d2:20:e6:99:70:d0:b4:22:75:18:fb:4e:f0:
         3d:3c:ba:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org