Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3139322e302f31382d3332203d3e203238363135.roa
File:                     3137372e3133312e3139322e302f31382d3332203d3e203238363135.roa (raw, json)
Hash identifier:          QTZ/D1Q9zPKzB+wWcKIbzggKWvgJeVQssyge4ue5ZDs=
Subject key identifier:   60:AE:85:E0:09:4C:99:10:9A:D5:6C:C3:A9:C0:33:9F:85:04:BF:3E
Certificate issuer:       /CN=3F2F047713EE5C35F02ED01388508451431B1C44
Certificate serial:       769107AAB189D16049EE41E0BA3A5EEF6E9A5FE5
Authority key identifier: 3F:2F:04:77:13:EE:5C:35:F0:2E:D0:13:88:50:84:51:43:1B:1C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F2F047713EE5C35F02ED01388508451431B1C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3139322e302f31382d3332203d3e203238363135.roa
Signing time:             Tue 02 Apr 2024 13:13:13 +0000
ROA not before:           Tue 02 Apr 2024 13:08:13 +0000
ROA not after:            Tue 01 Apr 2025 13:13:13 +0000
asID:                     28615
IP address blocks:        177.131.192.0/18 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:91:07:aa:b1:89:d1:60:49:ee:41:e0:ba:3a:5e:ef:6e:9a:5f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F2F047713EE5C35F02ED01388508451431B1C44
        Validity
            Not Before: Apr  2 13:08:13 2024 GMT
            Not After : Apr  1 13:13:13 2025 GMT
        Subject: CN=60AE85E0094C99109AD56CC3A9C0339F8504BF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:68:f0:68:1d:ee:7a:b3:94:bf:d3:9b:34:
                    da:29:31:5d:fc:0b:d8:f0:4b:e8:c5:f6:ac:d7:9d:
                    96:75:9e:52:9a:f1:68:1c:a6:ba:6e:ae:e2:46:71:
                    94:98:f7:d2:3a:21:ae:f0:08:67:e1:74:e4:a4:08:
                    3f:3c:78:73:9b:41:b6:4f:38:e7:bd:8e:7a:0b:8a:
                    38:b9:99:20:6b:1e:d4:85:fe:32:32:db:6c:e9:56:
                    fe:7c:20:e6:2a:f1:de:6c:b8:cf:7e:8b:10:fd:d9:
                    6d:85:b8:2e:bb:ad:72:3a:2d:35:08:03:e7:a2:fb:
                    b7:c7:dd:dc:d6:7c:f2:ae:75:83:12:11:2f:32:55:
                    29:dd:01:16:0f:fa:5d:d3:c1:1e:1d:9c:91:e7:c5:
                    0d:7f:6b:d6:f2:00:4d:61:35:79:6d:63:48:c6:8b:
                    1f:a4:0c:23:5f:b6:ae:75:21:f7:a9:f8:06:05:17:
                    a7:55:37:00:4a:36:6f:25:ad:4f:9f:26:86:f0:50:
                    cd:2d:2d:34:e4:99:e1:de:9b:6b:24:7b:5b:d0:8c:
                    0b:81:f5:f9:b7:0a:4c:dd:9d:c3:ff:4b:25:25:41:
                    cd:40:c1:2c:cd:e5:c2:a4:45:08:b3:39:52:07:fa:
                    6f:a2:d6:36:8e:fa:c0:c7:cc:8d:a6:14:60:35:97:
                    15:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AE:85:E0:09:4C:99:10:9A:D5:6C:C3:A9:C0:33:9F:85:04:BF:3E
            X509v3 Authority Key Identifier:
                keyid:3F:2F:04:77:13:EE:5C:35:F0:2E:D0:13:88:50:84:51:43:1B:1C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3F2F047713EE5C35F02ED01388508451431B1C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F2F047713EE5C35F02ED01388508451431B1C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3139322e302f31382d3332203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         86:8f:9f:76:2e:1d:98:e4:bb:71:64:80:92:97:87:96:d9:32:
         23:a5:51:3e:82:94:74:5f:e9:96:b1:8a:2a:ac:41:e7:ed:03:
         8a:b9:28:df:fa:2e:bf:e7:74:fb:61:0c:ae:39:ca:d7:b5:77:
         13:31:2b:8c:0d:e5:3b:00:f2:b5:51:4a:4d:95:a4:5b:a0:65:
         0f:78:b9:94:24:61:76:10:5b:6f:5a:22:4d:ac:e0:96:91:9f:
         6f:b6:df:7f:f3:37:51:c1:89:fb:69:12:b0:ff:04:cc:17:16:
         9d:28:01:47:89:4a:50:af:5e:9a:92:18:9f:74:78:e7:44:c1:
         aa:a3:78:a2:c9:ac:4b:7c:e8:56:3e:9b:0b:f2:c6:17:75:92:
         ef:f6:70:b0:9d:b8:3a:0b:29:22:c9:14:0b:33:b6:25:89:23:
         2b:5b:0a:9d:23:ef:c6:ed:a0:b0:e3:71:11:f8:67:79:09:42:
         ff:e1:07:f8:fa:25:6b:6d:80:99:cd:9e:52:f3:34:07:81:fa:
         77:e2:32:77:43:55:85:17:01:b5:8a:95:36:5d:dc:1a:65:b8:
         00:4b:48:d9:33:1a:3b:ea:6a:f5:6b:a0:65:ab:14:74:56:77:
         a2:b1:a6:71:0e:d8:2c:f5:3d:8c:a0:69:86:92:a3:60:18:56:
         f3:d9:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org