Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e3133372e33362e302f32342d3234203d3e203238323130.roa
File:                     3137372e3133372e33362e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          VATZbJ6lYRLE9pJk9NKcy86iOnS6AM5HtFzyi9uCxMY=
Subject key identifier:   5E:0E:B8:72:35:82:12:46:75:1F:71:D7:EC:42:AD:8F:F7:0C:25:6A
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       0454ADA71008800AEE6054E6C4E187142B577F82
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e3133372e33362e302f32342d3234203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:25 +0000
ROA not before:           Wed 28 Feb 2024 13:58:25 +0000
ROA not after:            Wed 26 Feb 2025 14:03:25 +0000
asID:                     28210
IP address blocks:        177.137.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:54:ad:a7:10:08:80:0a:ee:60:54:e6:c4:e1:87:14:2b:57:7f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:25 2024 GMT
            Not After : Feb 26 14:03:25 2025 GMT
        Subject: CN=5E0EB87235821246751F71D7EC42AD8FF70C256A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:d9:d2:a6:8c:12:e9:4b:b5:98:1c:65:b6:
                    5a:ce:79:b6:4f:d0:ae:92:e8:85:9c:0e:6f:b4:78:
                    2f:32:7b:e9:9f:bd:f3:18:fc:60:58:66:b9:9b:19:
                    54:74:a3:0a:bb:c4:8d:43:67:32:f1:7c:c0:f8:b7:
                    35:1c:b6:c4:02:6b:41:83:53:a5:f3:4d:e1:21:4f:
                    3f:f7:e0:4c:25:e0:57:2a:43:e0:59:8b:6d:60:eb:
                    6e:1d:fa:f4:4d:7a:28:c7:27:aa:73:4a:f4:60:39:
                    98:5c:5b:d0:9b:c4:e7:2f:1f:93:f8:cf:1f:25:50:
                    72:2e:ef:52:2a:d1:d9:00:2c:d1:e4:14:23:78:0e:
                    d1:5b:f9:27:ee:1f:17:03:ad:60:90:fa:16:0b:e7:
                    53:33:06:8f:a4:62:63:81:47:16:50:a0:78:a8:00:
                    70:d8:a2:ca:ff:ae:57:79:1a:23:a1:36:df:7e:b5:
                    58:88:83:9f:78:46:07:09:8b:6e:47:7d:6e:73:a5:
                    c2:32:f6:5d:22:b0:00:ce:7c:11:43:66:be:a5:ee:
                    6f:a5:72:8d:c6:92:47:c3:23:27:b9:bd:36:5e:80:
                    42:e8:04:cd:a8:c0:0b:fa:27:9e:d4:dc:f3:b6:1a:
                    96:e1:ed:8d:d4:92:1f:ce:8a:8c:4c:07:ce:7d:66:
                    42:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0E:B8:72:35:82:12:46:75:1F:71:D7:EC:42:AD:8F:F7:0C:25:6A
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e3133372e33362e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:9c:a9:47:b2:c0:75:94:0f:a0:64:95:17:ba:62:4c:5c:4f:
         ff:de:1f:48:3f:11:4a:ab:41:53:10:b9:fa:aa:69:f7:c3:88:
         e0:c0:cf:5a:86:66:06:20:e2:43:d9:a9:e7:a3:cb:61:73:2b:
         a8:d1:99:0a:d4:0c:8b:4d:c6:26:df:9f:5b:11:ef:46:2e:ed:
         89:86:9e:c2:b3:00:cc:71:cb:f9:11:28:a2:f6:b8:48:33:a5:
         4a:1c:bc:75:a6:6e:f7:c7:ec:7d:e9:76:00:6b:8c:82:ec:be:
         58:30:b4:66:c9:13:e3:21:64:c5:f1:d6:9b:a7:df:96:2f:33:
         59:2b:38:08:39:b9:46:63:6c:ff:91:de:9c:e1:90:55:16:3a:
         d0:95:63:8c:8d:33:1f:fc:13:cd:d2:f6:fa:62:4e:56:43:25:
         a6:fa:de:b8:b8:34:bf:83:2c:88:bc:de:7f:ab:1c:37:7b:86:
         16:5c:8f:33:f6:51:b5:26:21:89:46:1f:87:d7:67:ed:f8:d7:
         19:b7:d8:fd:3b:7f:0d:31:3d:05:be:2e:d1:77:12:4c:83:42:
         a6:04:b0:2d:65:c2:64:c8:ca:d9:fc:96:68:86:ec:6f:66:64:
         32:41:9e:4f:4d:01:a1:66:35:40:72:b7:6a:b3:00:74:f3:c8:
         1a:14:fc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org