Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136342e302f32342d3234203d3e20323632333034.roa
File:                     3137372e38372e3136342e302f32342d3234203d3e20323632333034.roa (raw, json)
Hash identifier:          2NVVfq7tiiflgtCq8DY+B9tIJRhI3yFUqqMsGNADpTE=
Subject key identifier:   18:1C:BB:66:8A:CF:24:70:3F:38:27:30:3E:EC:DD:4C:E9:A0:9F:55
Certificate issuer:       /CN=3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA
Certificate serial:       2898DC0C82FF4A75BB6380FABD46207EBCE38678
Authority key identifier: 3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136342e302f32342d3234203d3e20323632333034.roa
Signing time:             Wed 14 Jun 2023 20:56:33 +0000
ROA not before:           Wed 14 Jun 2023 20:51:33 +0000
ROA not after:            Wed 12 Jun 2024 20:56:33 +0000
asID:                     262304
IP address blocks:        177.87.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:98:dc:0c:82:ff:4a:75:bb:63:80:fa:bd:46:20:7e:bc:e3:86:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA
        Validity
            Not Before: Jun 14 20:51:33 2023 GMT
            Not After : Jun 12 20:56:33 2024 GMT
        Subject: CN=181CBB668ACF24703F3827303EECDD4CE9A09F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:b3:d1:58:df:c1:73:2c:d9:0a:89:8a:27:
                    4b:02:3a:b7:a5:e1:4f:8d:47:0f:da:40:a3:22:d9:
                    08:6e:4e:f7:85:52:2a:84:d8:7b:18:b5:b4:d2:23:
                    40:04:d0:19:62:c5:2b:07:ac:a0:a0:a0:97:66:be:
                    b5:fd:96:fc:ac:83:5a:64:c3:58:45:b8:ed:77:34:
                    8f:ba:ef:4c:79:dd:c9:f0:5c:22:04:13:b0:4b:65:
                    03:53:b9:4a:9f:d0:29:fa:37:e4:bd:0d:ad:9d:8e:
                    cd:f3:11:d1:8d:7f:e0:e5:bf:01:63:aa:0a:15:f6:
                    0a:63:6c:6a:6f:37:46:f7:d6:9c:2a:e5:8e:97:c0:
                    d5:ed:ee:26:f4:72:32:de:39:3f:9e:c4:7d:7b:c6:
                    f4:cb:90:7a:9a:38:85:63:fd:b4:20:02:29:99:5b:
                    7c:be:9b:08:8c:66:77:36:28:45:97:7f:11:d4:92:
                    03:90:1a:6d:c2:fe:4d:f4:6c:79:b6:0a:38:e0:30:
                    cf:50:45:f4:c2:74:75:c2:4a:95:8b:62:03:12:c4:
                    9e:73:fa:71:f5:9c:f6:36:5f:18:c5:54:a0:02:f7:
                    fc:e3:7b:a2:48:0c:cb:38:14:17:5b:b0:4a:91:ea:
                    c6:32:11:22:5d:ce:67:7b:eb:93:d8:b3:23:33:88:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1C:BB:66:8A:CF:24:70:3F:38:27:30:3E:EC:DD:4C:E9:A0:9F:55
            X509v3 Authority Key Identifier:
                keyid:3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136342e302f32342d3234203d3e20323632333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:b9:e0:3e:12:a5:0d:ed:cd:75:b1:23:9d:e4:a0:ed:82:29:
         8b:cf:5d:29:82:08:0b:cd:3a:c9:e0:8d:81:d7:ce:55:fa:f1:
         84:d0:db:1c:5f:a3:80:87:d0:e3:43:47:d5:50:ec:76:59:33:
         b4:a8:4d:91:0d:a6:3e:1a:49:a7:91:17:c6:40:21:ad:f4:c3:
         61:8b:84:91:e9:29:4e:58:a5:13:02:ad:0e:6f:32:76:43:91:
         4a:76:29:28:4b:8e:a1:16:e5:46:52:a2:d0:c2:c8:bf:98:e4:
         fd:e7:0b:c9:3e:c7:fa:b3:9e:09:ce:d8:e8:0e:e4:1a:71:d4:
         d1:ae:30:40:d1:76:d7:4b:72:f7:78:d1:dd:33:1c:36:73:bb:
         03:92:fa:08:8d:9d:28:8a:e7:48:5c:20:c3:fb:6a:1d:ff:34:
         17:d2:96:1c:cc:39:71:f9:3e:1d:5e:00:e8:7e:95:11:85:53:
         85:e1:cd:82:87:f1:d2:04:48:98:f6:4a:2b:3f:7d:d0:c1:bb:
         3e:67:59:38:01:48:bc:7d:e6:ac:9b:7d:6d:28:42:fe:29:11:
         ba:20:f8:b8:7e:18:d8:f7:0e:52:6e:27:aa:1c:49:cf:45:2d:
         f9:a0:fc:e4:2a:86:68:59:4e:95:c8:b2:a1:76:ff:d8:cb:84:
         53:63:c5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org