Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137372e3130372e38302e302f32302d3234203d3e203238363639.roa
File:                     3137372e3130372e38302e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          zjlFWnLxRCAhqANhV9Ac5RzolfCfxtNdpS9vjX1AfXA=
Subject key identifier:   DC:E8:C7:44:AA:8A:4D:16:15:30:19:FB:1D:C5:3A:FD:3D:88:63:8B
Certificate issuer:       /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial:       0D9FE1139898BA10846C89B9058482C71EA0AFF7
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137372e3130372e38302e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 May 2024 19:44:40 +0000
ROA not before:           Fri 03 May 2024 19:39:40 +0000
ROA not after:            Fri 02 May 2025 19:44:40 +0000
asID:                     28669
IP address blocks:        177.107.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9f:e1:13:98:98:ba:10:84:6c:89:b9:05:84:82:c7:1e:a0:af:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
        Validity
            Not Before: May  3 19:39:40 2024 GMT
            Not After : May  2 19:44:40 2025 GMT
        Subject: CN=DCE8C744AA8A4D16153019FB1DC53AFD3D88638B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:50:f1:fd:74:e4:aa:7a:af:92:1b:45:aa:
                    87:41:21:d0:8c:fb:11:1e:61:bb:04:c7:4d:8b:a5:
                    91:23:50:10:f8:ea:93:e7:c9:48:5e:9c:13:be:a9:
                    5f:c4:f1:24:e7:af:3d:2d:41:52:ad:d0:09:f3:e5:
                    e8:af:47:a7:eb:b4:3b:b1:d0:2e:8d:f0:51:0f:74:
                    1e:45:cd:4d:23:28:6c:bd:6d:ec:a5:3a:01:0e:e2:
                    0c:73:f9:0c:19:de:b2:10:a5:8b:56:2c:94:5a:f0:
                    12:20:88:0f:ea:3d:2b:55:58:6d:3b:41:0c:d5:5c:
                    3e:fa:b2:b0:54:cc:4f:5d:5e:6b:17:cf:59:b9:c9:
                    b7:31:18:58:27:e0:42:e1:02:dc:50:61:50:c5:54:
                    94:d0:99:e3:18:89:01:99:7d:a6:fd:46:72:8d:72:
                    49:5b:e9:d4:84:30:37:93:b0:5b:32:9a:48:12:57:
                    d9:91:cc:fa:f0:77:f0:fc:84:5b:a0:2b:2d:a4:e4:
                    a1:8e:c1:2c:2c:60:32:ca:50:93:92:03:ea:ea:54:
                    8f:16:f6:52:e0:fc:af:4b:f6:79:e1:42:ba:de:04:
                    d9:95:5d:ff:4e:83:ac:b5:d8:cc:7f:88:15:00:6a:
                    3a:e3:b0:24:a7:a8:1d:33:33:91:f4:44:7c:8f:12:
                    8a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E8:C7:44:AA:8A:4D:16:15:30:19:FB:1D:C5:3A:FD:3D:88:63:8B
            X509v3 Authority Key Identifier:
                keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137372e3130372e38302e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:99:6b:f9:06:0d:0c:62:46:70:58:19:9d:e5:ed:67:40:83:
         5b:6c:ba:04:7e:94:ac:36:88:2b:45:3f:e9:c7:31:85:b2:a2:
         b7:0a:a2:07:8b:2d:7c:27:70:0a:0e:41:ac:d7:21:b7:94:c5:
         d1:e8:40:44:f0:8e:d5:e2:fb:de:f5:c5:a1:e7:f3:63:bb:3f:
         e8:dd:04:ee:89:9f:fb:64:50:65:7d:f6:d6:1a:8e:9f:7b:44:
         32:c3:33:b0:c3:d4:9a:cf:96:64:c0:89:21:d6:b6:1a:43:88:
         66:b1:26:62:ea:b8:36:96:11:24:e0:0d:c3:5c:d7:6f:dc:c5:
         73:cf:c8:e0:ce:e2:4b:3b:0f:e4:6c:50:a5:74:6c:7f:61:8b:
         8e:6f:8b:e7:7e:58:04:20:c8:dd:6f:ff:9b:76:95:57:33:eb:
         59:01:f9:f0:b4:3a:fc:17:5b:16:db:cd:3e:93:35:45:aa:36:
         b2:cb:1f:f8:42:a9:95:65:ca:23:14:0f:2a:f3:37:1e:83:a0:
         44:6f:9e:13:cf:f3:d9:35:5b:dc:eb:3d:8f:ea:74:45:b6:16:
         f3:60:72:65:5e:d6:f7:16:f3:8b:d1:71:e3:ed:4c:c1:03:67:
         86:b1:70:42:5e:53:46:c7:96:22:f6:b9:eb:7d:41:36:8d:c0:
         0f:5d:25:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org