Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131362e302f32332d3233203d3e203532393137.roa
File:                     3137372e31302e3131362e302f32332d3233203d3e203532393137.roa (raw, json)
Hash identifier:          +j/2IWL+p3tBbGjlP4ly5USAQxmWBkZCq832mGWswx4=
Subject key identifier:   97:94:03:30:88:96:24:A8:6A:50:DD:E8:C9:4B:CD:BA:D7:75:8A:9B
Certificate issuer:       /CN=D038DE19E8309C7FF68CBBE4DE7976DE4FAE6A84
Certificate serial:       3CDD7D95A88EC27BBB8A1C955D88AFE6EC040DA9
Authority key identifier: D0:38:DE:19:E8:30:9C:7F:F6:8C:BB:E4:DE:79:76:DE:4F:AE:6A:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D038DE19E8309C7FF68CBBE4DE7976DE4FAE6A84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131362e302f32332d3233203d3e203532393137.roa
Signing time:             Wed 23 Mar 2022 12:51:49 +0000
ROA not before:           Wed 23 Mar 2022 12:46:49 +0000
ROA not after:            Wed 22 Mar 2023 12:51:49 +0000
asID:                     52917
IP address blocks:        177.10.116.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:dd:7d:95:a8:8e:c2:7b:bb:8a:1c:95:5d:88:af:e6:ec:04:0d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D038DE19E8309C7FF68CBBE4DE7976DE4FAE6A84
        Validity
            Not Before: Mar 23 12:46:49 2022 GMT
            Not After : Mar 22 12:51:49 2023 GMT
        Subject: CN=97940330889624A86A50DDE8C94BCDBAD7758A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3e:be:59:96:54:33:d2:00:82:fa:c6:67:da:
                    b7:99:b9:d5:bf:97:08:7c:45:d1:ab:ba:70:7e:8a:
                    c7:5a:95:16:49:c6:29:89:1f:49:f8:b4:ab:56:c5:
                    0f:c8:a4:0b:85:a1:19:d8:ea:6a:72:0c:4b:08:76:
                    61:05:d6:77:14:d9:3a:fd:21:87:e1:fa:53:b1:f4:
                    d9:dc:73:80:b3:74:b8:a3:3b:c7:da:ab:84:d5:b1:
                    94:83:2c:73:9b:f3:1c:1d:02:bd:8d:d1:f5:21:11:
                    3d:81:3c:c1:fb:2e:03:f5:14:94:ca:d5:8b:79:69:
                    b6:09:01:83:32:be:94:80:a2:09:f2:c7:92:90:22:
                    1e:4d:10:35:0d:89:94:8f:94:fc:9b:4a:2b:9d:b4:
                    a4:1d:e3:09:cc:1c:6d:19:89:d8:2f:20:ee:e7:00:
                    21:ca:35:43:78:19:9c:01:4f:4c:04:d1:58:cd:74:
                    d7:63:4f:a1:8e:99:a2:60:75:7a:07:b1:25:8d:19:
                    de:c7:2e:9c:d0:93:dd:48:dc:80:d5:1e:94:32:e0:
                    0d:d6:9c:95:77:32:90:51:7c:01:56:3f:5e:1b:63:
                    ef:40:7a:f6:32:5c:62:8b:0e:bb:e1:67:a3:d7:d4:
                    6c:19:50:cc:78:d5:70:3d:6b:0a:d9:3d:0a:b1:8e:
                    7a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:94:03:30:88:96:24:A8:6A:50:DD:E8:C9:4B:CD:BA:D7:75:8A:9B
            X509v3 Authority Key Identifier:
                keyid:D0:38:DE:19:E8:30:9C:7F:F6:8C:BB:E4:DE:79:76:DE:4F:AE:6A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/D038DE19E8309C7FF68CBBE4DE7976DE4FAE6A84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D038DE19E8309C7FF68CBBE4DE7976DE4FAE6A84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e31302e3131362e302f32332d3233203d3e203532393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:79:b5:ab:e3:61:a2:78:1c:5d:f3:bf:b4:e4:f8:b1:39:1a:
         dd:22:95:5a:e6:d2:71:de:ce:d2:03:c4:c2:3e:85:33:4c:d4:
         f3:a6:dd:0f:c0:72:38:6d:51:97:04:a5:19:30:54:b6:a1:53:
         5f:f5:35:a5:0b:da:52:e6:5e:fb:a8:4b:41:7f:10:34:a5:60:
         95:bd:42:79:48:b3:35:67:25:9f:5c:63:c9:f2:95:f4:77:4e:
         f2:df:fb:81:8a:7f:63:ae:34:8d:24:cf:80:c1:f3:89:7d:57:
         e9:54:95:b4:2a:a9:7c:21:fe:a0:40:2b:8f:1d:61:42:d0:58:
         76:b3:f9:bd:54:d0:31:d6:34:0d:f2:ba:c0:64:44:04:64:ed:
         cc:73:c1:1c:1f:7b:99:2e:02:ba:b5:ab:21:2b:8d:d1:bc:52:
         db:a2:a0:7b:ee:6d:e2:f5:c1:2d:b5:46:8e:03:47:6c:a5:7e:
         b9:dc:08:b8:03:6b:a3:44:8b:f7:9f:c9:ea:2a:06:2b:cf:4c:
         cb:3d:e9:91:c7:4b:7b:bf:02:10:b1:93:9e:fe:68:5b:ce:0e:
         bc:f5:48:98:c5:a2:d7:46:c5:c9:48:58:47:4c:94:fb:0a:9c:
         cb:65:f7:4a:62:54:db:06:ce:84:f8:07:25:77:88:6c:fe:d3:
         60:28:c1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org