Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/2/3137372e38352e38302e302f32312d3332203d3e20323636313630.roa
File:                     3137372e38352e38302e302f32312d3332203d3e20323636313630.roa (raw, json)
Hash identifier:          TbRK2EIz7OjTD8XYxwZincQ4CmyRubynUpkRGs75XZM=
Subject key identifier:   BC:21:6A:FA:08:FF:4D:B0:D5:28:B6:97:1E:82:17:98:6D:D2:41:B5
Certificate issuer:       /CN=3BC1D0631EF41F733F5331C74060B0BEC82595D6
Certificate serial:       C53FF7F804E7B1E79C255F90628D6508A32A61
Authority key identifier: 3B:C1:D0:63:1E:F4:1F:73:3F:53:31:C7:40:60:B0:BE:C8:25:95:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC1D0631EF41F733F5331C74060B0BEC82595D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/2/3137372e38352e38302e302f32312d3332203d3e20323636313630.roa
Signing time:             Thu 04 Apr 2024 15:52:29 +0000
ROA not before:           Thu 04 Apr 2024 15:47:29 +0000
ROA not after:            Thu 03 Apr 2025 15:52:29 +0000
asID:                     266160
IP address blocks:        177.85.80.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c5:3f:f7:f8:04:e7:b1:e7:9c:25:5f:90:62:8d:65:08:a3:2a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC1D0631EF41F733F5331C74060B0BEC82595D6
        Validity
            Not Before: Apr  4 15:47:29 2024 GMT
            Not After : Apr  3 15:52:29 2025 GMT
        Subject: CN=BC216AFA08FF4DB0D528B6971E8217986DD241B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:60:63:3a:1c:ab:19:26:4b:13:a3:d0:01:
                    ba:9d:3a:59:a5:ee:5c:e7:07:f8:b8:04:35:af:8e:
                    da:95:6e:58:93:1e:22:22:0f:a1:dd:23:07:43:03:
                    7b:07:2f:f0:7f:df:10:e4:f7:94:51:54:3e:ca:19:
                    4f:38:b3:01:5c:17:c9:a8:1e:c9:b9:ca:e7:0f:61:
                    6e:c2:6c:dc:a7:4a:d3:0b:24:e9:ff:d1:3e:8d:50:
                    3a:63:5e:3a:fa:38:ae:ec:45:51:49:ca:fd:1a:a0:
                    1e:47:bc:12:f1:a8:d5:eb:ef:0c:9f:24:de:9b:d6:
                    87:09:0a:0e:cb:cc:fc:46:47:f8:92:ed:63:4e:82:
                    22:1e:28:5a:db:e6:1d:bd:65:65:5f:1d:0d:dc:53:
                    8c:93:b4:f6:57:85:8b:68:69:64:07:47:cb:cb:7d:
                    6f:2f:01:0b:ca:9b:f8:96:25:70:21:40:d9:d8:85:
                    02:45:55:00:3c:b5:db:8b:4e:07:65:65:b3:72:90:
                    82:ae:2c:14:3f:c5:b2:be:8e:84:c8:bf:5b:9b:83:
                    d7:ff:9d:54:ff:93:ff:f1:79:27:69:64:f7:8e:6f:
                    05:14:0c:ba:ad:49:f6:9f:a2:4c:d9:ce:5f:c9:0c:
                    04:83:51:1b:16:e0:f0:bd:b1:3a:ee:e8:73:da:65:
                    4c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:21:6A:FA:08:FF:4D:B0:D5:28:B6:97:1E:82:17:98:6D:D2:41:B5
            X509v3 Authority Key Identifier:
                keyid:3B:C1:D0:63:1E:F4:1F:73:3F:53:31:C7:40:60:B0:BE:C8:25:95:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/2/3BC1D0631EF41F733F5331C74060B0BEC82595D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC1D0631EF41F733F5331C74060B0BEC82595D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/2/3137372e38352e38302e302f32312d3332203d3e20323636313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:0f:4a:65:86:ef:b0:8a:2d:e2:f0:1c:a1:16:fb:31:b5:76:
         f2:24:05:fe:28:4b:78:1a:4e:e3:9f:1e:e8:9f:aa:66:d8:18:
         62:77:88:e4:48:dc:f8:24:e7:99:5d:ca:f0:8f:02:47:56:12:
         f9:99:f5:2c:17:fb:e6:cc:6d:89:b1:29:b5:85:24:1b:26:75:
         8a:cc:70:5d:d2:97:ad:8b:fa:7c:2f:54:48:14:87:0f:59:92:
         1f:37:48:d3:18:67:5c:e4:15:b5:57:f5:3c:86:fa:10:9c:ae:
         9b:15:98:3c:7d:9d:45:ec:bf:f6:25:79:86:06:e0:c8:1d:44:
         82:03:d3:c5:55:58:82:f2:6e:da:c2:16:e6:8b:e7:7a:71:d2:
         27:39:8e:56:9b:6b:a3:93:25:76:67:07:02:bb:33:70:5c:81:
         96:ed:b9:e2:f0:da:e0:8c:d6:7e:1a:99:92:8b:ba:b2:03:ed:
         78:78:b8:d6:2a:1c:29:d2:7f:5e:c0:d9:39:b1:f3:cb:81:7c:
         81:00:92:84:49:f3:c1:54:80:6e:6d:89:81:f8:13:24:38:e3:
         3d:0f:32:3e:fa:3e:1f:81:45:9e:76:e7:0d:e2:8f:df:f0:ba:
         f0:e4:ea:aa:fb:7a:6e:69:73:75:0a:1d:e0:22:1c:6e:81:59:
         4c:c1:25:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org