Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136312e302f32342d3234203d3e20323632333034.roa
File:                     3137372e38372e3136312e302f32342d3234203d3e20323632333034.roa (raw, json)
Hash identifier:          fGtamiKT/YPuS3nMWKpFY2R07mrhl5vXXUyo2+XgXVE=
Subject key identifier:   52:C7:DB:6A:DE:D5:A7:9F:95:61:9B:35:BB:8A:7F:49:8D:7E:AC:39
Certificate issuer:       /CN=3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA
Certificate serial:       0CDAA0C47538224F0095FFE9B42B06ABC8301DF7
Authority key identifier: 3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136312e302f32342d3234203d3e20323632333034.roa
Signing time:             Wed 14 Jun 2023 20:54:23 +0000
ROA not before:           Wed 14 Jun 2023 20:49:23 +0000
ROA not after:            Wed 12 Jun 2024 20:54:23 +0000
asID:                     262304
IP address blocks:        177.87.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:da:a0:c4:75:38:22:4f:00:95:ff:e9:b4:2b:06:ab:c8:30:1d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA
        Validity
            Not Before: Jun 14 20:49:23 2023 GMT
            Not After : Jun 12 20:54:23 2024 GMT
        Subject: CN=52C7DB6ADED5A79F95619B35BB8A7F498D7EAC39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:b5:9e:b1:46:e0:97:73:55:04:46:e0:06:
                    12:02:e2:c8:68:d4:10:ea:ac:2e:ca:d6:fe:92:b1:
                    0a:65:06:1c:70:52:db:94:30:fb:ca:e9:24:d8:6e:
                    9e:d3:e9:47:40:53:05:ea:1e:7e:d3:e5:9b:28:a0:
                    90:17:b9:a7:6f:e9:f4:c7:bb:eb:08:17:9c:0d:b9:
                    87:27:71:b9:4f:09:9a:91:6a:87:ef:f0:f7:2a:95:
                    d9:fc:ca:8c:82:2e:e9:92:5e:b7:e9:8e:6b:18:d5:
                    a7:19:e8:2d:bc:84:e8:6a:d6:0c:94:92:fc:2d:90:
                    be:e5:47:8f:cf:be:62:da:66:d3:35:fb:3f:d5:ab:
                    0b:a5:be:ff:b5:7d:84:2b:1d:cb:20:4f:18:5d:16:
                    d8:4f:89:6e:35:d7:d0:25:2a:04:25:76:78:cc:69:
                    18:79:e0:0c:fa:b8:69:4b:d7:aa:f8:f1:5a:3a:a7:
                    00:8f:a8:08:39:56:a5:44:13:82:32:e9:80:f9:0c:
                    03:d2:1f:01:f3:fd:22:41:59:1e:7f:ed:85:b4:10:
                    94:d9:d9:76:1b:f0:34:f9:8d:db:ac:4c:cd:27:fb:
                    b1:68:4b:95:cd:b7:13:49:85:15:f4:4d:49:33:e0:
                    c2:f6:63:c6:c3:34:27:12:e5:48:06:1a:5b:ab:1e:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C7:DB:6A:DE:D5:A7:9F:95:61:9B:35:BB:8A:7F:49:8D:7E:AC:39
            X509v3 Authority Key Identifier:
                keyid:3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136312e302f32342d3234203d3e20323632333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:4e:24:7b:d0:d0:f5:ce:2b:c5:a6:cf:45:e0:fc:b2:58:c1:
         75:b6:60:bd:72:91:59:5d:01:56:4b:92:5c:46:ff:48:5e:53:
         cb:f2:bd:20:5a:0e:40:6c:61:13:cb:98:be:5e:33:92:39:89:
         eb:e3:1c:19:09:28:50:91:fc:f8:36:00:83:69:f3:6e:cb:55:
         56:79:ba:ea:2c:4b:c8:c8:64:e5:21:bc:e8:45:e5:90:04:de:
         94:11:38:e2:c3:b6:fe:f0:3a:4a:d5:32:cf:38:96:f5:c7:1e:
         70:2c:c0:8c:f6:cc:2a:d3:81:3b:bc:4b:6b:1e:93:f2:46:96:
         88:ce:fd:14:42:d2:b3:5b:f3:8c:0d:ba:5f:9e:f6:86:74:be:
         d6:04:a2:3e:0f:52:bd:d8:cd:ca:c6:48:1c:64:f5:a0:62:b9:
         f1:d0:a1:9d:d1:ff:96:62:8b:60:0a:60:2a:bf:c4:db:47:f0:
         57:eb:62:6f:31:1a:ca:bb:50:42:61:f0:bf:b2:66:c5:ea:8b:
         0c:5e:16:4a:7a:b4:65:af:1f:18:e6:f4:23:e9:71:5d:db:aa:
         47:3a:29:b0:be:b4:d7:cb:e9:5b:88:f6:88:98:f7:9f:fc:16:
         8c:6e:a2:60:73:46:59:76:1a:25:83:3c:36:d1:0f:a4:29:c1:
         4f:28:9d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org