Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136362e302f32342d3234203d3e20323632333034.roa
File:                     3137372e38372e3136362e302f32342d3234203d3e20323632333034.roa (raw, json)
Hash identifier:          +S5Nc7inRMmQu+M0fjt3tH+653bjv06OoHfDOGUF/5c=
Subject key identifier:   55:92:24:0E:86:1B:EF:A5:79:44:E4:92:D6:47:57:D3:C5:B4:1C:59
Certificate issuer:       /CN=3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA
Certificate serial:       2575819DE59071ED4E4BE1680FC404D6F09CF890
Authority key identifier: 3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136362e302f32342d3234203d3e20323632333034.roa
Signing time:             Wed 14 Jun 2023 20:57:02 +0000
ROA not before:           Wed 14 Jun 2023 20:52:02 +0000
ROA not after:            Wed 12 Jun 2024 20:57:02 +0000
asID:                     262304
IP address blocks:        177.87.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:75:81:9d:e5:90:71:ed:4e:4b:e1:68:0f:c4:04:d6:f0:9c:f8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA
        Validity
            Not Before: Jun 14 20:52:02 2023 GMT
            Not After : Jun 12 20:57:02 2024 GMT
        Subject: CN=5592240E861BEFA57944E492D64757D3C5B41C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:e8:44:ad:75:85:d6:e1:7c:d9:00:d4:e1:
                    bf:e7:b5:a7:bf:1a:31:74:e5:82:d1:2e:5e:6b:0b:
                    90:54:cf:56:19:1f:93:3f:a9:b6:7f:3c:66:e8:e8:
                    a9:31:da:8d:7c:38:1c:04:e4:c7:71:f7:ce:35:54:
                    95:fa:2b:9c:73:54:5d:d7:e2:51:ce:d3:76:fa:e1:
                    b5:6e:5e:b7:38:16:15:4d:cf:56:c1:65:f5:8b:db:
                    1a:d7:bf:cf:83:fb:cb:54:a0:ed:77:25:dc:8e:e9:
                    f5:71:21:ac:c8:cb:8d:04:f4:1b:67:bd:c5:d6:b0:
                    d3:31:97:53:1a:e8:5e:e2:8e:56:39:76:c5:66:c8:
                    15:b2:e7:a3:ee:75:6b:ca:7f:5f:20:05:1d:76:d1:
                    b1:ca:23:83:c6:9b:aa:ac:02:1f:10:f9:8b:c3:b1:
                    a0:57:9d:c5:54:76:a1:9e:fd:f5:c6:d2:fb:76:a1:
                    be:c6:c3:69:af:0c:c4:e1:78:ae:55:8c:42:db:ec:
                    0e:28:25:97:e6:68:78:6d:c0:93:91:12:d3:b2:85:
                    aa:38:c7:38:db:c5:2e:eb:a3:cd:49:68:b5:16:22:
                    c5:e2:39:1b:c8:31:5d:e7:18:da:d5:14:bb:de:46:
                    4f:8d:2a:57:38:bf:5e:00:dd:22:33:41:2b:a7:57:
                    02:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:92:24:0E:86:1B:EF:A5:79:44:E4:92:D6:47:57:D3:C5:B4:1C:59
            X509v3 Authority Key Identifier:
                keyid:3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136362e302f32342d3234203d3e20323632333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:7a:70:3f:d4:ea:d8:8d:30:66:7f:fa:50:8d:d3:fa:12:b2:
         ac:2b:17:b1:9a:f1:d7:17:70:88:27:be:8e:ff:d8:88:ea:4b:
         b9:b8:89:87:a1:85:18:d9:13:9a:68:e0:c7:f9:9e:f0:2f:14:
         c4:18:68:39:f2:45:c1:c0:b1:3b:b4:c2:42:6b:d3:06:72:dd:
         9c:a9:3f:7b:ca:48:85:1f:7b:43:3a:c0:1a:48:9f:d9:5e:57:
         c2:ce:20:69:b7:b1:7e:63:9e:44:4f:54:d4:b6:f1:34:d0:f3:
         54:23:32:48:4c:b3:e6:0b:c1:d4:e6:64:55:c6:bc:84:fa:84:
         09:99:90:b3:1f:eb:1f:a6:75:a9:f4:5e:29:ea:fa:85:7e:01:
         d7:a9:e4:0f:1d:42:46:10:b7:7a:0d:6c:17:db:04:40:35:d3:
         87:f7:6f:b0:e5:59:cf:b2:5a:42:3f:e9:34:8e:85:96:a8:65:
         0f:b6:2f:8f:19:d6:e1:cc:24:7e:84:0e:88:a7:87:be:02:9e:
         22:b1:ce:67:3f:86:22:f4:20:03:6d:ac:3e:2d:45:69:dc:a9:
         9e:c1:d1:3b:1a:d8:f6:92:08:2d:97:fc:8f:d8:e4:b1:41:98:
         d0:b1:57:b1:0c:41:9b:66:7f:40:2a:23:cd:02:e1:f4:d6:95:
         4b:40:45:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org