Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137372e3133372e36342e302f32302d3234203d3e203238363639.roa
File:                     3137372e3133372e36342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          Oy+CISh1gUq2XMk4f+V5ptRHN95ipMB4hO/+VyLIPLQ=
Subject key identifier:   B7:57:52:1C:14:8B:A9:4C:F9:4C:E3:E8:1F:EA:FF:FB:60:4E:6B:14
Certificate issuer:       /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial:       0B7A4726137D431F13F9876C55E995B075059FA8
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137372e3133372e36342e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 May 2024 19:44:38 +0000
ROA not before:           Fri 03 May 2024 19:39:38 +0000
ROA not after:            Fri 02 May 2025 19:44:38 +0000
asID:                     28669
IP address blocks:        177.137.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7a:47:26:13:7d:43:1f:13:f9:87:6c:55:e9:95:b0:75:05:9f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
        Validity
            Not Before: May  3 19:39:38 2024 GMT
            Not After : May  2 19:44:38 2025 GMT
        Subject: CN=B757521C148BA94CF94CE3E81FEAFFFB604E6B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:67:c9:de:70:ad:0f:2e:90:44:c9:24:90:
                    45:48:81:57:60:c0:1d:0e:35:8a:e8:46:c3:20:90:
                    42:36:b1:50:f1:ef:2a:5d:e4:ab:5e:0b:01:ef:b6:
                    81:11:7c:de:53:1d:49:f8:16:56:ef:83:53:7b:4f:
                    c7:b9:7a:78:16:b3:cb:7b:53:ea:3d:e8:51:04:3d:
                    5a:99:66:38:1d:e7:a7:e1:9a:cc:b6:d6:aa:b0:95:
                    85:49:24:27:d9:9a:89:f8:0d:7f:13:f8:50:57:75:
                    13:3a:b6:b3:c6:9d:e0:db:b3:20:71:37:a1:01:d1:
                    e4:3c:f4:d0:cd:d6:e2:a9:07:56:d9:df:2e:75:78:
                    7d:0e:f0:54:c5:4a:e3:d9:23:a4:2c:f2:8b:df:00:
                    b2:83:b2:64:a7:9b:3d:98:71:62:88:26:ee:75:55:
                    ee:fa:9e:82:10:ae:fb:12:5d:eb:8d:9a:7a:d5:43:
                    1e:52:f1:66:c6:c9:17:68:e3:6e:ea:23:0c:89:41:
                    09:b9:01:e0:a5:46:61:9e:70:96:b1:72:a0:44:23:
                    94:e9:cb:5c:96:7f:71:18:f5:c1:38:98:64:30:c3:
                    b2:6b:b8:d5:dc:55:b7:6c:bf:ac:7a:ff:f1:35:85:
                    d4:9b:b1:90:38:87:4a:8a:0a:91:ac:e0:76:79:db:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:57:52:1C:14:8B:A9:4C:F9:4C:E3:E8:1F:EA:FF:FB:60:4E:6B:14
            X509v3 Authority Key Identifier:
                keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137372e3133372e36342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:48:38:f6:5b:89:e1:c1:07:14:ed:63:22:e3:5f:9f:b2:58:
         43:60:d6:40:a1:03:d4:79:22:4d:32:10:65:a8:ab:50:d6:16:
         92:e7:ec:ad:0d:0a:4b:20:c3:00:6a:22:8e:88:e9:57:38:7b:
         12:6e:b6:21:c9:1d:d6:2b:22:1c:82:b1:06:51:53:46:95:50:
         20:87:b3:6f:66:91:e5:3f:76:c4:8d:13:7e:71:e3:ba:a6:d9:
         af:fd:f4:51:9b:65:66:38:89:4f:6a:42:f9:89:11:8a:2d:b8:
         7e:1e:bc:c9:48:fd:d4:c7:93:8d:6f:84:06:b1:23:89:be:06:
         6d:a5:34:ad:84:5f:ff:4c:2e:42:98:8b:b2:cf:2f:89:87:a5:
         af:bb:16:86:ff:aa:37:e5:c6:9a:aa:16:12:02:ab:6b:5a:7c:
         73:f7:6a:84:0c:20:76:c9:ad:8f:0f:02:e5:ce:1e:c2:5b:d7:
         86:ed:51:5d:0b:d2:30:03:20:f8:56:ad:fe:f2:02:c7:f7:94:
         81:37:0b:c5:e0:89:ab:12:97:f3:6a:97:df:31:2e:0d:f9:2f:
         38:b0:63:51:0c:d1:f5:e0:9f:9c:6a:c2:a8:f5:5c:e8:04:db:
         d7:58:e9:1b:03:63:41:ce:ee:de:63:17:10:11:fe:c6:a1:67:
         a9:7d:05:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org