Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/1/3137372e32322e33322e302f32302d3234203d3e203532393831.roa
File:                     3137372e32322e33322e302f32302d3234203d3e203532393831.roa (raw, json)
Hash identifier:          e0S3vQ6Hu51u6GMzBii8XiE3gCCAwBMSN/4Enc/1DD4=
Subject key identifier:   12:D6:A8:89:02:59:26:19:22:D2:66:CA:CC:13:EB:44:F3:B2:0E:67
Certificate issuer:       /CN=7B5186D8E21CE9278C3288A467DBDF33622342CD
Certificate serial:       3E79A463EAD3BE2DF732A981DB90B4EBDE49CAB9
Authority key identifier: 7B:51:86:D8:E2:1C:E9:27:8C:32:88:A4:67:DB:DF:33:62:23:42:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5186D8E21CE9278C3288A467DBDF33622342CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/1/3137372e32322e33322e302f32302d3234203d3e203532393831.roa
Signing time:             Sat 11 May 2024 21:36:45 +0000
ROA not before:           Sat 11 May 2024 21:31:45 +0000
ROA not after:            Sat 10 May 2025 21:36:45 +0000
asID:                     52981
IP address blocks:        177.22.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:79:a4:63:ea:d3:be:2d:f7:32:a9:81:db:90:b4:eb:de:49:ca:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5186D8E21CE9278C3288A467DBDF33622342CD
        Validity
            Not Before: May 11 21:31:45 2024 GMT
            Not After : May 10 21:36:45 2025 GMT
        Subject: CN=12D6A8890259261922D266CACC13EB44F3B20E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:97:d5:a5:30:f0:4e:11:a1:13:51:f2:eb:
                    39:b9:a9:83:7a:a6:7d:af:73:ac:b4:89:de:61:6c:
                    b0:f0:09:eb:4c:b5:e5:a1:2f:e9:08:b1:a3:98:87:
                    3e:0d:14:58:d2:ff:72:9e:91:b7:88:c4:0a:26:cc:
                    2a:03:8f:cd:5d:b1:45:e1:71:35:3b:30:08:89:99:
                    a9:3c:9f:b3:1a:16:c2:87:cb:46:ad:85:53:4a:ba:
                    a7:f5:e3:4d:8a:c8:90:f1:95:34:8c:a0:bf:fd:d8:
                    f1:1e:ad:91:d0:af:85:8e:d4:a5:54:a8:1e:67:af:
                    ec:39:cc:55:0c:ec:f8:c1:f3:cf:27:f7:14:a4:fb:
                    a9:3f:f2:fd:60:90:95:91:d4:49:13:8c:21:63:70:
                    49:f7:4e:e6:1a:74:13:ed:c5:ef:7f:e1:53:8e:f5:
                    8a:a4:b2:5c:3d:91:3c:a4:b4:2f:e0:07:b3:d4:96:
                    0a:9b:51:62:24:0a:8d:d6:9a:59:a3:dc:06:b6:27:
                    eb:49:18:ca:81:69:a3:0e:d8:c1:bd:16:ec:59:9c:
                    e3:a5:46:5e:10:a2:2d:8b:76:b0:ac:93:d9:95:be:
                    d4:2b:ef:11:d0:91:a6:56:c8:78:96:bc:74:a9:53:
                    11:3d:15:64:3f:0e:78:30:86:f8:9c:d5:d3:24:77:
                    6f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D6:A8:89:02:59:26:19:22:D2:66:CA:CC:13:EB:44:F3:B2:0E:67
            X509v3 Authority Key Identifier:
                keyid:7B:51:86:D8:E2:1C:E9:27:8C:32:88:A4:67:DB:DF:33:62:23:42:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/1/7B5186D8E21CE9278C3288A467DBDF33622342CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5186D8E21CE9278C3288A467DBDF33622342CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/1/3137372e32322e33322e302f32302d3234203d3e203532393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:3f:00:8e:0c:68:c4:7c:b1:7a:8f:3a:a1:ad:59:20:c0:34:
         ea:9b:55:cf:c3:af:a1:b2:d0:3f:51:48:4a:bb:9c:19:8f:89:
         af:47:e1:18:7b:db:40:68:4d:a9:f8:91:c8:31:d0:f0:5a:30:
         74:73:83:dd:1a:27:08:da:e1:fd:38:ac:1b:24:e5:91:af:9f:
         06:6f:e1:d5:6f:87:ce:d4:de:17:95:0c:17:5a:83:bb:26:e3:
         1e:09:82:04:9a:ae:11:a3:f7:2b:70:5b:57:8b:0c:47:d2:c6:
         00:77:cb:e3:93:5c:22:f1:f9:ed:85:8e:fb:18:c4:21:1a:e5:
         b1:13:e5:c5:e1:5e:59:4a:5c:41:b4:21:a8:b8:6b:d9:71:4b:
         b1:35:ea:82:18:04:98:85:34:69:6b:9f:ff:a3:73:29:21:62:
         3a:bc:3e:ba:1c:09:09:2a:99:b0:5d:0e:a2:ef:a0:7f:fc:24:
         e4:92:9d:34:8b:84:3b:b0:15:0d:2f:bf:16:1d:a0:a2:91:2e:
         12:b7:92:01:7c:f7:36:4a:fe:c6:81:7f:dd:52:b2:55:ae:fd:
         e9:63:29:b8:45:d2:fe:92:86:bd:32:fd:77:ff:04:76:0d:ec:
         3c:f5:a4:88:0e:65:e1:92:9b:82:1f:7d:ca:53:28:9e:2c:6e:
         61:a2:ad:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org