Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e35352e3139322e302f32302d3230203d3e203238323130.roa
File:                     3137372e35352e3139322e302f32302d3230203d3e203238323130.roa (raw, json)
Hash identifier:          8CqZAf/qURo5CM0MadaXNr6BThL8QiSWdJmr2Lhiauw=
Subject key identifier:   F1:C1:E3:1E:22:37:55:C6:B0:5C:C8:74:A3:60:36:1A:22:F8:64:53
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       11EDB3A610F2AF25AE43842D9F9888D34272469C
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e35352e3139322e302f32302d3230203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:23 +0000
ROA not before:           Wed 28 Feb 2024 13:58:23 +0000
ROA not after:            Wed 26 Feb 2025 14:03:23 +0000
asID:                     28210
IP address blocks:        177.55.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ed:b3:a6:10:f2:af:25:ae:43:84:2d:9f:98:88:d3:42:72:46:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:23 2024 GMT
            Not After : Feb 26 14:03:23 2025 GMT
        Subject: CN=F1C1E31E223755C6B05CC874A360361A22F86453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:c0:0a:22:e7:5e:94:fd:7f:23:79:5b:9d:
                    3b:a2:8b:25:34:a9:44:a9:4a:80:0e:c2:4a:75:29:
                    7b:32:9e:3a:f1:a4:c9:fe:4b:0b:90:25:70:7f:78:
                    08:fe:26:11:47:17:7c:71:74:1a:36:6e:00:bf:92:
                    04:e3:9c:fa:ec:36:0e:56:6e:3f:4c:e7:89:a7:47:
                    3d:99:b6:80:31:32:f2:27:b0:9c:f6:b6:ac:0b:ce:
                    af:f3:a6:8f:04:3f:67:c0:59:74:53:cf:29:71:8f:
                    9d:9b:88:27:23:a4:af:ce:54:25:24:3b:26:bd:e7:
                    14:91:87:e0:96:13:9f:85:8e:74:82:c8:dc:54:fa:
                    b4:c7:a8:6f:f0:af:21:2d:08:ca:5e:eb:9a:1e:83:
                    30:6c:68:66:a8:90:32:8f:11:d2:89:a5:68:58:07:
                    e0:03:1c:0f:29:a1:97:9d:05:6a:85:96:60:a7:db:
                    69:d6:6b:2c:11:de:f6:10:9b:bc:f1:c3:f3:7e:fd:
                    64:b1:a8:d9:f0:7e:bf:cd:9f:b6:b1:60:0b:68:28:
                    72:2b:c9:e0:ad:4c:7f:f3:e6:86:dd:f6:0f:9c:c7:
                    eb:0b:fa:6c:79:4f:f6:fd:a7:14:43:42:68:a6:b6:
                    0e:e7:5f:12:cd:0f:60:1b:96:7b:7d:3e:85:14:76:
                    68:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C1:E3:1E:22:37:55:C6:B0:5C:C8:74:A3:60:36:1A:22:F8:64:53
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e35352e3139322e302f32302d3230203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:2f:72:7e:19:05:11:5b:c2:76:e4:08:56:d5:d9:3d:47:46:
         9f:73:d4:ff:a9:ea:40:84:40:5a:43:85:80:0b:b1:0a:2b:6d:
         f0:d4:c5:0e:31:f9:6f:50:19:02:41:34:ef:b2:4e:91:49:57:
         f0:d8:ed:bf:6b:1f:e9:49:46:da:e4:fa:97:ce:58:9e:43:4a:
         42:c2:8a:d6:a1:3f:fa:40:c8:d2:2a:43:01:15:70:5d:e5:b5:
         61:cd:bc:92:ed:79:af:11:36:a7:1e:4a:6b:ab:43:3c:aa:1a:
         26:40:34:d0:ca:70:6d:06:53:92:60:63:4a:32:32:d9:60:14:
         3c:d4:4e:07:83:5f:98:d2:51:fc:9a:ec:ed:e4:20:eb:c4:02:
         41:dd:99:59:1e:8d:fe:09:99:d5:e6:d6:5c:96:f8:26:be:39:
         af:37:5f:6c:67:4e:91:f7:1d:b5:92:95:fe:0f:fd:09:63:35:
         68:0f:c7:33:db:af:c2:5f:3a:4f:d7:4b:35:4f:0c:8c:50:81:
         c0:f5:c5:0e:ec:3c:b6:7a:23:34:e9:69:80:cf:a1:16:3e:98:
         57:ce:82:a8:2b:2d:58:b5:bb:b8:11:86:67:ec:fb:43:cd:3e:
         cc:26:ad:e4:c2:a6:6a:88:90:23:66:86:88:f3:fa:0a:84:3f:
         6b:bc:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org