Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32312d3332203d3e203532363031.roa
File:                     3137372e3132342e37322e302f32312d3332203d3e203532363031.roa (raw, json)
Hash identifier:          rtw+jqoNJRO386f39jTZv8AxP8B95kAZfvnbtLJbeq0=
Subject key identifier:   F2:E6:74:20:F6:79:D1:59:8A:06:92:8C:72:F6:6D:CA:31:88:81:AF
Certificate issuer:       /CN=393C05C5D41432E0C49D28B3830034F3BD93985A
Certificate serial:       71E8A1932470FEC33369841B2815ACBA622BC5E4
Authority key identifier: 39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32312d3332203d3e203532363031.roa
Signing time:             Mon 04 Dec 2023 02:36:43 +0000
ROA not before:           Mon 04 Dec 2023 02:31:43 +0000
ROA not after:            Mon 02 Dec 2024 02:36:43 +0000
asID:                     52601
IP address blocks:        177.124.72.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e8:a1:93:24:70:fe:c3:33:69:84:1b:28:15:ac:ba:62:2b:c5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=393C05C5D41432E0C49D28B3830034F3BD93985A
        Validity
            Not Before: Dec  4 02:31:43 2023 GMT
            Not After : Dec  2 02:36:43 2024 GMT
        Subject: CN=F2E67420F679D1598A06928C72F66DCA318881AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:df:81:9c:32:c2:5e:14:fb:35:d6:a2:79:
                    1b:0b:98:02:01:f2:da:cb:9b:cd:be:dd:25:4c:55:
                    9e:d6:84:34:42:4b:57:bf:e4:55:eb:37:6d:9b:10:
                    3c:5e:62:3a:4f:55:9a:cf:f7:05:fe:26:cc:ee:a8:
                    44:86:f7:40:68:97:df:09:e2:5e:b5:83:18:31:0a:
                    b9:6b:f8:9f:cd:e0:84:9b:b4:e3:5f:15:5e:67:83:
                    ca:b3:b9:0f:7e:e5:fb:2d:69:e9:ca:b5:e4:66:cd:
                    04:22:a8:aa:b5:c7:b0:79:a2:cc:2b:17:9a:1d:bb:
                    5c:e6:ad:42:d7:a4:dc:71:4a:b4:72:3d:e9:c0:0a:
                    35:76:e2:3c:a2:71:3f:47:21:b1:6d:79:c9:d1:a1:
                    94:6e:c9:bf:41:8c:df:a2:2f:69:cd:d0:01:fc:96:
                    f0:85:7d:54:b2:ab:79:b4:cc:ca:8e:56:47:c4:c4:
                    ac:c9:21:bb:a2:8b:d6:91:bf:e6:3a:13:97:92:53:
                    cd:96:a1:74:eb:a3:47:53:bc:14:f8:ec:86:15:9a:
                    de:1a:22:77:73:50:b3:2a:d5:8d:d6:91:49:72:fc:
                    c1:9f:f3:19:b2:43:79:99:28:b7:7d:62:c1:0c:16:
                    3b:17:d8:c7:83:a4:5b:5a:99:a5:b2:b9:f9:d2:5e:
                    87:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E6:74:20:F6:79:D1:59:8A:06:92:8C:72:F6:6D:CA:31:88:81:AF
            X509v3 Authority Key Identifier:
                keyid:39:3C:05:C5:D4:14:32:E0:C4:9D:28:B3:83:00:34:F3:BD:93:98:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/393C05C5D41432E0C49D28B3830034F3BD93985A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/393C05C5D41432E0C49D28B3830034F3BD93985A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137372e3132342e37322e302f32312d3332203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:16:49:08:c8:fc:fc:75:ae:4d:56:ac:65:e0:e1:44:79:60:
         76:2d:69:5d:3e:45:34:b7:13:de:0d:5a:78:29:c1:84:57:73:
         c0:8f:68:fc:09:a6:46:bf:c5:b4:0e:5e:55:30:63:f9:80:d1:
         9f:a2:ce:d9:49:2c:78:d2:0b:f7:84:7f:62:68:ba:02:d6:3c:
         ce:4e:dc:30:b6:f8:5e:2b:1a:49:de:66:d9:da:2b:21:2e:3c:
         bb:fe:89:2e:ee:61:5c:92:55:d8:3d:ab:be:96:59:36:6b:4a:
         a5:53:d8:69:f4:10:fa:eb:58:e5:bb:5e:15:61:f3:44:83:38:
         ac:33:23:ce:62:d2:51:63:a2:4f:cb:f6:e8:0a:4c:7b:e9:79:
         cc:2a:df:0f:98:a3:f3:2e:e6:ec:33:17:36:d4:fe:73:37:be:
         11:9a:8e:20:af:ae:71:9e:2e:ef:76:51:f4:64:d2:b6:28:c4:
         3f:92:2e:ed:b3:2e:fa:23:4a:59:a0:36:79:f5:6c:f6:f9:12:
         20:42:b2:08:dd:eb:fe:a9:6a:3c:e4:51:cc:53:40:71:37:8d:
         40:fd:ba:7c:5c:04:cc:e2:ec:3f:11:66:2c:fe:a7:88:c9:89:
         7a:ba:aa:e3:1b:dd:a6:d1:74:74:ab:cf:ea:56:a1:1f:0e:3d:
         1a:dd:17:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:06 2024 by rpki-client on console-ams.rpki-client.org