Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136372e302f32342d3234203d3e20323632333034.roa
File:                     3137372e38372e3136372e302f32342d3234203d3e20323632333034.roa (raw, json)
Hash identifier:          yEXJlLl3eSZItX+oVDRvOjY8W5W/kYDIDHZbhtaT27I=
Subject key identifier:   70:D8:27:1B:6D:AC:24:56:19:8F:5B:D1:E5:08:C7:BA:41:06:5F:A1
Certificate issuer:       /CN=3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA
Certificate serial:       13A3C45A91E75F4457C7E7851A5203D3EC807E51
Authority key identifier: 3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136372e302f32342d3234203d3e20323632333034.roa
Signing time:             Wed 14 Jun 2023 20:57:18 +0000
ROA not before:           Wed 14 Jun 2023 20:52:18 +0000
ROA not after:            Wed 12 Jun 2024 20:57:18 +0000
asID:                     262304
IP address blocks:        177.87.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a3:c4:5a:91:e7:5f:44:57:c7:e7:85:1a:52:03:d3:ec:80:7e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA
        Validity
            Not Before: Jun 14 20:52:18 2023 GMT
            Not After : Jun 12 20:57:18 2024 GMT
        Subject: CN=70D8271B6DAC2456198F5BD1E508C7BA41065FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:b0:bc:2a:d5:f1:4e:58:11:52:c3:47:29:
                    9a:08:55:62:e6:fe:8d:e6:da:27:dd:e7:ec:8a:64:
                    9c:31:26:2e:ab:5b:f6:3c:d6:68:f8:32:e4:e6:d0:
                    c0:9b:15:ba:ec:6e:e8:94:e0:8b:a6:81:f4:97:c7:
                    32:4b:6b:50:63:6a:b5:17:0f:96:8f:01:c8:5d:bd:
                    49:df:33:7b:59:e7:0e:49:ce:20:91:f3:0a:4f:9f:
                    84:a7:0e:29:32:d3:82:e7:82:e7:e0:3a:d6:a4:88:
                    3c:a4:84:6e:31:15:29:01:80:32:5c:3b:43:08:00:
                    91:97:1c:ee:d8:06:f5:9c:9e:f0:0e:d2:c2:03:a6:
                    6a:c5:77:a9:bf:e2:af:e1:3e:53:92:51:ed:44:95:
                    df:bf:81:5b:34:17:6f:68:8a:6b:05:f7:b0:9c:45:
                    13:51:ef:cc:0b:c5:62:f9:72:e5:bf:f2:af:ce:03:
                    ee:08:65:61:91:81:09:96:b7:cb:64:90:57:fc:7b:
                    34:da:ff:9b:14:be:c7:3f:6d:3d:ad:11:d8:ec:f1:
                    6e:02:76:3a:92:9e:ac:6d:e6:20:99:39:c8:1f:7b:
                    11:18:b6:b7:f6:a5:b9:70:58:cf:b7:bf:b8:a1:b4:
                    55:49:9d:43:02:5f:05:e7:ea:3d:ff:06:2c:33:9f:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D8:27:1B:6D:AC:24:56:19:8F:5B:D1:E5:08:C7:BA:41:06:5F:A1
            X509v3 Authority Key Identifier:
                keyid:3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136372e302f32342d3234203d3e20323632333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:82:c0:d6:75:3c:ad:8e:71:20:1d:15:c4:60:8a:15:77:45:
         35:2a:87:4f:50:c3:34:ed:74:79:cd:c1:5e:be:2b:f2:93:4b:
         7f:68:be:5a:70:6e:ad:5a:a8:02:f3:df:09:8c:31:61:34:22:
         c3:67:44:df:b1:df:5a:c7:00:ce:91:21:f9:7b:6e:43:84:c0:
         bb:37:fe:34:c7:62:87:63:6a:27:43:b9:31:d8:13:ce:36:7f:
         26:a8:92:8d:60:40:ae:7b:3c:62:20:33:cf:15:20:89:34:7c:
         aa:a6:45:ed:7b:87:8e:a4:00:79:39:04:41:2d:72:b2:2f:da:
         d5:f5:a6:e0:1c:ec:0c:af:4e:ac:87:87:68:a2:8b:57:5a:41:
         70:d5:81:2f:75:ad:9e:83:93:25:e8:56:49:79:06:39:4e:f5:
         75:78:71:e8:52:e1:d8:5b:06:05:1e:c3:da:58:81:ca:2e:53:
         e4:0e:de:e3:51:19:4f:29:24:d6:28:6b:86:97:d5:5f:fe:0e:
         d9:5b:24:c9:dd:18:62:f9:a5:66:30:47:85:47:d3:1b:5a:1c:
         b6:93:fc:a4:c8:c4:f8:a2:80:21:fb:c0:61:30:66:44:8a:a6:
         7f:55:87:4b:1d:95:90:82:8e:a2:3c:70:29:3b:4c:af:0c:43:
         6e:68:98:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org