Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137372e36362e36342e302f32312d3231203d3e203238323230.roa
File:                     3137372e36362e36342e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          WdnrdAVsaB6aIRqKZe5+hQVeUzvscIPTpg9y2SAlQyM=
Subject key identifier:   AC:AE:60:A1:43:78:0A:FC:EE:68:B8:9E:CF:D8:83:06:19:16:CC:7F
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       3A2F9FBDCC92896B373AC6E3F14BBA52E552803D
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137372e36362e36342e302f32312d3231203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:56:37 +0000
ROA not before:           Thu 06 Oct 2022 17:51:37 +0000
ROA not after:            Thu 05 Oct 2023 17:56:37 +0000
asID:                     28220
IP address blocks:        177.66.64.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2f:9f:bd:cc:92:89:6b:37:3a:c6:e3:f1:4b:ba:52:e5:52:80:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:51:37 2022 GMT
            Not After : Oct  5 17:56:37 2023 GMT
        Subject: CN=ACAE60A143780AFCEE68B89ECFD883061916CC7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:96:75:d6:94:6a:70:0d:4c:27:ba:8a:a6:
                    69:88:7d:a2:25:f1:e4:69:35:bd:9a:b4:0e:e1:d3:
                    3b:0b:8f:5d:2d:a8:40:49:6b:27:53:27:1a:57:6a:
                    75:bf:e0:59:c4:1f:4c:79:0a:6e:d7:08:4f:5b:cd:
                    a1:72:7a:6a:7e:63:ac:48:6f:89:ac:89:14:a3:90:
                    63:e7:f4:68:6e:27:f8:55:80:f7:db:90:e4:ee:da:
                    42:81:2e:2f:c8:80:fb:ca:72:2f:a2:0e:44:c0:09:
                    de:22:00:be:37:b4:3f:10:80:d2:0b:30:62:d5:49:
                    4b:18:94:55:09:71:85:a9:e5:8b:91:9b:5f:3d:a1:
                    74:a3:0c:99:cf:7b:f4:49:b3:19:8c:a1:ab:75:c7:
                    89:cf:da:08:f7:29:16:be:8e:e2:9e:3f:5b:9d:a7:
                    85:4e:85:9c:90:b0:ae:37:44:bf:eb:7a:49:e7:e9:
                    f4:90:fe:8d:51:ac:a5:a0:80:20:4a:21:85:03:85:
                    1f:d8:2f:c5:fc:3f:7f:8d:e9:46:8c:91:ba:66:82:
                    74:44:ac:30:c6:fc:f8:fd:5b:68:f1:db:76:c1:8e:
                    ea:90:13:4f:93:e2:7c:1a:78:1a:7b:40:03:be:b5:
                    35:d2:be:9d:a5:49:f2:ed:30:d4:6a:47:ac:fc:c9:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AE:60:A1:43:78:0A:FC:EE:68:B8:9E:CF:D8:83:06:19:16:CC:7F
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137372e36362e36342e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:4d:a6:79:49:48:69:6b:0d:25:c4:53:65:aa:8b:bd:05:e0:
         da:a2:2f:4d:e5:23:8d:8c:33:8c:fe:f3:d3:bd:f0:1d:f5:18:
         e7:5e:c3:fe:33:79:74:95:d3:8f:e6:84:b5:ce:1e:d3:0b:2f:
         51:67:a7:d1:87:b0:06:34:d2:29:c4:10:bf:5a:df:04:3e:04:
         db:72:ad:1a:54:ec:32:ae:eb:6d:47:86:92:a5:d9:f6:77:29:
         16:6f:92:bc:98:ef:bf:78:25:89:f7:c7:7c:a7:e7:86:e1:ee:
         8a:41:72:d1:f8:8c:9e:3c:11:ac:e2:8f:be:26:09:ea:b7:34:
         57:76:30:ac:bd:d0:27:f6:d5:46:b3:7a:ac:ca:0f:97:31:6e:
         2b:69:fc:fa:3e:5f:a6:a6:18:d2:a9:1e:75:26:f3:90:34:3a:
         f5:09:f5:b1:57:b8:aa:a4:68:9d:87:66:78:ce:aa:0f:24:74:
         59:91:78:15:36:02:27:c6:eb:a3:43:27:94:48:2c:1b:5c:b3:
         8a:79:88:6f:3b:87:aa:56:68:0a:f1:45:3d:69:6e:2c:cd:7e:
         b4:34:bb:dd:b7:4f:25:8f:00:32:29:02:21:6f:2f:f2:c1:5c:
         cd:29:28:ae:89:27:e1:c1:d2:bb:39:8a:ce:bc:da:69:dd:2b:
         55:86:8c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org