Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3137372e3133362e3132382e302f31392d3233203d3e203238363635.roa
File:                     3137372e3133362e3132382e302f31392d3233203d3e203238363635.roa (raw, json)
Hash identifier:          FvbIwvUKnFh7+N2RYPeHUHEM2FQRR8BeGCs9C9/nhz4=
Subject key identifier:   C3:82:F8:43:7B:5E:B8:5D:AE:0D:07:A7:75:A8:0D:F5:52:E9:20:9A
Certificate issuer:       /CN=2B04BBF97246BDE2FB53B000FBFDE50502C74549
Certificate serial:       0D3D84166A55A3E6D528D9D484C13DC239FD7453
Authority key identifier: 2B:04:BB:F9:72:46:BD:E2:FB:53:B0:00:FB:FD:E5:05:02:C7:45:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B04BBF97246BDE2FB53B000FBFDE50502C74549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3137372e3133362e3132382e302f31392d3233203d3e203238363635.roa
Signing time:             Fri 10 Dec 2021 20:02:29 +0000
ROA not before:           Fri 10 Dec 2021 19:57:29 +0000
ROA not after:            Fri 09 Dec 2022 20:02:29 +0000
asID:                     28665
IP address blocks:        177.136.128.0/19 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3d:84:16:6a:55:a3:e6:d5:28:d9:d4:84:c1:3d:c2:39:fd:74:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B04BBF97246BDE2FB53B000FBFDE50502C74549
        Validity
            Not Before: Dec 10 19:57:29 2021 GMT
            Not After : Dec  9 20:02:29 2022 GMT
        Subject: CN=3082010A0282010100A00B3D31B60A9E61E773CE8A8508CE1DAA5559F7433BFF806F915E61A2A2378955F4656F9757475F1E6DB93152D9C018D0846D85BD06EA322422CEDD8A873296057EAE36CCCAF2960F5C0BE9C70B4383FF4021DBBBDC7BB9289A092AE6A6A66EF9A597D403B0DF7ADA3D22A90B1553B9126DFC47447885C412457EC95F89862D13387B536F62F61DEF6A43C0C68D743585F3828C65A115B30D6401B524E5B12F2D80BBBACB1C1BEFCB650C24A8388C1E61C2668F56E561A88F8EB89DF77BADC4EBDF32D89E38BEA14A4F80D7B654BE53CB158CD3718B45077E75F64C963B6AD71AD465BA857894D47DECDEB79A1B595E774BB76F34C7C21EA42B132012F2C0750203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:3d:31:b6:0a:9e:61:e7:73:ce:8a:85:08:
                    ce:1d:aa:55:59:f7:43:3b:ff:80:6f:91:5e:61:a2:
                    a2:37:89:55:f4:65:6f:97:57:47:5f:1e:6d:b9:31:
                    52:d9:c0:18:d0:84:6d:85:bd:06:ea:32:24:22:ce:
                    dd:8a:87:32:96:05:7e:ae:36:cc:ca:f2:96:0f:5c:
                    0b:e9:c7:0b:43:83:ff:40:21:db:bb:dc:7b:b9:28:
                    9a:09:2a:e6:a6:a6:6e:f9:a5:97:d4:03:b0:df:7a:
                    da:3d:22:a9:0b:15:53:b9:12:6d:fc:47:44:78:85:
                    c4:12:45:7e:c9:5f:89:86:2d:13:38:7b:53:6f:62:
                    f6:1d:ef:6a:43:c0:c6:8d:74:35:85:f3:82:8c:65:
                    a1:15:b3:0d:64:01:b5:24:e5:b1:2f:2d:80:bb:ba:
                    cb:1c:1b:ef:cb:65:0c:24:a8:38:8c:1e:61:c2:66:
                    8f:56:e5:61:a8:8f:8e:b8:9d:f7:7b:ad:c4:eb:df:
                    32:d8:9e:38:be:a1:4a:4f:80:d7:b6:54:be:53:cb:
                    15:8c:d3:71:8b:45:07:7e:75:f6:4c:96:3b:6a:d7:
                    1a:d4:65:ba:85:78:94:d4:7d:ec:de:b7:9a:1b:59:
                    5e:77:4b:b7:6f:34:c7:c2:1e:a4:2b:13:20:12:f2:
                    c0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:82:F8:43:7B:5E:B8:5D:AE:0D:07:A7:75:A8:0D:F5:52:E9:20:9A
            X509v3 Authority Key Identifier:
                keyid:2B:04:BB:F9:72:46:BD:E2:FB:53:B0:00:FB:FD:E5:05:02:C7:45:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/2B04BBF97246BDE2FB53B000FBFDE50502C74549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B04BBF97246BDE2FB53B000FBFDE50502C74549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/3137372e3133362e3132382e302f31392d3233203d3e203238363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:ca:13:3e:aa:1c:7d:19:70:97:b6:47:6f:1c:e7:c3:41:05:
         2f:8d:7e:30:57:e4:ab:47:6a:34:62:8f:fd:cc:49:4c:d8:b9:
         08:ec:bc:e6:1b:b0:1e:ee:e7:e7:ec:c1:a2:20:dc:16:f4:56:
         aa:de:0e:1b:b7:35:e1:93:9f:4c:87:ef:53:0e:75:a2:b2:4d:
         e5:0e:e1:98:41:70:6a:ad:9f:f0:14:00:7c:e4:69:9e:29:72:
         97:ee:21:11:44:3d:85:80:b4:fb:d7:80:7a:fe:92:52:ef:83:
         07:fb:d9:55:f8:56:86:5f:20:d3:f3:0c:63:00:78:ef:3b:cf:
         22:cc:22:7b:0c:33:8e:e4:7e:d3:c0:8e:5b:3a:e2:e9:cb:4f:
         5f:41:6c:02:97:79:13:4f:1d:e3:63:6f:b1:30:17:58:8e:9f:
         e1:3d:ea:8e:91:3a:42:e6:40:72:a9:f4:ef:a3:fa:ec:47:6d:
         01:d1:06:75:a4:b7:d8:3e:16:69:0f:26:e6:1d:c5:d6:49:3b:
         72:df:66:a5:c4:d9:e5:be:91:c4:c3:7c:46:04:19:cf:9b:a6:
         d6:6d:65:5e:33:ad:e4:49:23:7d:e9:e6:9e:45:45:b7:63:22:
         8a:8f:9e:e0:df:20:74:dd:78:f1:6b:d3:6d:87:3d:bd:37:80:
         76:7e:e6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org