Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32342e302f32322d3234203d3e20323632393038.roa
File:                     3137372e33382e32342e302f32322d3234203d3e20323632393038.roa (raw, json)
Hash identifier:          ZegK38G2cAL4gcvyiJqC+PDCosYaiSANGVnd4EZYikA=
Subject key identifier:   D2:BF:1C:70:41:74:2D:39:B5:14:90:47:3C:7B:6F:ED:BF:93:1F:2E
Certificate issuer:       /CN=380AE62845C4468F9462327C41A0D22DA68054FD
Certificate serial:       5526A622B682C8E37FB227C5E2D078C329D89FC2
Authority key identifier: 38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32342e302f32322d3234203d3e20323632393038.roa
Signing time:             Tue 23 Jan 2024 13:01:17 +0000
ROA not before:           Tue 23 Jan 2024 12:56:17 +0000
ROA not after:            Tue 21 Jan 2025 13:01:17 +0000
asID:                     262908
IP address blocks:        177.38.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:26:a6:22:b6:82:c8:e3:7f:b2:27:c5:e2:d0:78:c3:29:d8:9f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380AE62845C4468F9462327C41A0D22DA68054FD
        Validity
            Not Before: Jan 23 12:56:17 2024 GMT
            Not After : Jan 21 13:01:17 2025 GMT
        Subject: CN=D2BF1C7041742D39B51490473C7B6FEDBF931F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:20:bf:4a:44:df:77:31:48:5d:82:15:46:
                    2a:01:34:d1:25:b4:18:ce:dd:d8:79:22:c4:73:8e:
                    b1:67:71:97:7e:ce:84:12:c0:7f:26:ba:55:3d:61:
                    39:06:b0:3c:e1:d6:ba:47:76:d2:bc:aa:0a:d3:2a:
                    e5:72:21:d4:60:5c:bd:a6:79:a8:9e:b7:2e:cf:47:
                    20:60:a3:d5:30:82:66:2a:40:db:80:98:d4:b1:50:
                    ff:5b:62:45:9f:86:9b:b6:fa:3e:51:73:c3:2d:3b:
                    cc:78:b8:5c:57:00:af:42:95:0e:b3:63:e2:84:30:
                    4c:eb:c9:b5:e1:3e:9a:2c:6d:75:08:da:13:55:95:
                    73:aa:57:fb:38:a2:91:8d:87:20:62:cc:db:65:51:
                    94:9e:5b:72:5a:a6:25:71:39:71:c9:71:42:67:f7:
                    b4:c7:5d:63:f3:25:35:a9:d5:d9:fd:22:71:80:ed:
                    56:c7:f1:8c:fb:bd:99:96:30:f6:b3:9c:8d:87:ab:
                    ac:eb:4e:c4:fc:42:62:8c:e8:df:22:39:bc:9b:eb:
                    d8:1e:ff:45:67:a3:2f:35:3e:e2:a6:ec:9f:8e:a9:
                    ed:bb:7c:63:dc:35:49:e3:a5:87:1c:07:a7:28:f9:
                    47:bc:00:1a:92:7d:fd:19:d3:33:d8:76:31:6b:94:
                    cd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BF:1C:70:41:74:2D:39:B5:14:90:47:3C:7B:6F:ED:BF:93:1F:2E
            X509v3 Authority Key Identifier:
                keyid:38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/380AE62845C4468F9462327C41A0D22DA68054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32342e302f32322d3234203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:a8:77:76:ee:76:3a:6e:49:e3:56:c3:77:b5:6f:f2:06:16:
         af:f5:78:1c:52:86:88:61:68:81:ba:ad:a5:ab:7d:d0:6e:4f:
         f4:2e:d0:ec:fe:2f:5f:46:b2:66:e2:28:0d:1e:c3:c5:2b:f5:
         b4:76:66:34:f5:d5:83:9c:45:4e:ad:11:ee:85:7d:ec:1b:8c:
         aa:57:6d:ea:88:91:3a:68:d8:d8:ac:c2:e1:ad:f6:7b:80:9c:
         88:1b:0d:a5:40:1d:b3:59:08:90:f5:04:69:12:5c:22:c8:3f:
         37:e9:2a:e8:8a:db:8e:50:ea:f5:c1:69:0d:e6:1e:ca:9c:02:
         1c:29:ca:21:54:a5:22:f6:b6:9b:7d:e0:79:ed:82:0f:ea:57:
         61:34:95:bc:f0:97:b3:20:c0:f3:81:b5:06:73:03:26:60:3e:
         b7:92:6c:63:73:92:ec:21:d6:41:b8:7b:3b:dd:c6:83:65:ee:
         25:2c:c0:df:6f:ab:1b:cd:35:cc:8a:72:42:83:48:37:e9:e1:
         d8:b1:23:fd:97:ed:07:f8:41:c5:18:46:ac:e5:ad:88:7a:ff:
         f3:f5:14:64:e7:a5:58:ed:e1:fe:0b:4b:a1:48:0a:36:3b:51:
         ba:a6:09:c9:1f:da:02:33:54:62:08:35:66:42:be:3f:71:30:
         45:2b:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org