Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32382e302f32322d3234203d3e20323632393038.roa
File:                     3137372e33382e32382e302f32322d3234203d3e20323632393038.roa (raw, json)
Hash identifier:          ZgbowKiXzBJsuoaKuj0gKDiU/i/UyYDC4bNBacf6yzY=
Subject key identifier:   44:A8:AC:DE:94:CA:5B:FE:70:26:C5:A9:C9:AC:E6:AF:5D:73:5F:25
Certificate issuer:       /CN=380AE62845C4468F9462327C41A0D22DA68054FD
Certificate serial:       1CC31734F9C3065533F6A498B665930A6631CE90
Authority key identifier: 38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32382e302f32322d3234203d3e20323632393038.roa
Signing time:             Tue 23 Jan 2024 13:01:53 +0000
ROA not before:           Tue 23 Jan 2024 12:56:53 +0000
ROA not after:            Tue 21 Jan 2025 13:01:53 +0000
asID:                     262908
IP address blocks:        177.38.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c3:17:34:f9:c3:06:55:33:f6:a4:98:b6:65:93:0a:66:31:ce:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380AE62845C4468F9462327C41A0D22DA68054FD
        Validity
            Not Before: Jan 23 12:56:53 2024 GMT
            Not After : Jan 21 13:01:53 2025 GMT
        Subject: CN=44A8ACDE94CA5BFE7026C5A9C9ACE6AF5D735F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:3e:2f:e1:7c:a4:c0:0d:8e:31:55:0d:97:
                    d8:f2:78:b1:dc:2b:49:97:b1:58:64:9a:ed:fb:12:
                    32:e8:2e:3c:f0:c2:27:30:cb:e8:3a:49:e0:1a:e9:
                    32:21:04:cf:f2:a5:5a:82:f3:af:8f:5c:a9:c5:b3:
                    dc:55:4f:8c:51:9c:fe:81:47:61:50:5f:c5:8f:82:
                    83:b1:f5:ac:6d:7b:ba:5b:cd:90:28:3e:22:6d:cf:
                    3e:2a:05:f9:59:2f:fd:1e:cb:9b:1b:5b:13:c3:b4:
                    01:e3:31:f8:86:8c:4a:d5:c7:c9:00:99:8a:88:6b:
                    43:98:a0:3d:9f:62:40:d5:c5:56:7a:bd:a3:17:82:
                    02:eb:24:b5:4e:ed:b8:5d:52:48:74:0a:e6:69:9f:
                    07:e9:e4:3c:21:72:41:ea:c1:25:b7:82:8f:88:0c:
                    b0:4e:b9:26:70:bc:d8:b6:02:bd:00:97:49:a6:ee:
                    2f:5b:3c:84:61:1a:aa:bc:30:e4:fe:bf:e3:3d:bb:
                    72:11:3e:57:00:29:ce:3b:c7:73:b9:4a:7d:e4:1d:
                    c5:54:4f:b1:bd:e0:b4:0b:2f:e0:dc:54:98:b4:78:
                    af:86:8d:74:85:99:3e:f1:ac:15:f9:a1:bb:52:1e:
                    11:20:48:59:e8:f4:f3:8b:cb:37:cb:e7:33:54:37:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A8:AC:DE:94:CA:5B:FE:70:26:C5:A9:C9:AC:E6:AF:5D:73:5F:25
            X509v3 Authority Key Identifier:
                keyid:38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/380AE62845C4468F9462327C41A0D22DA68054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32382e302f32322d3234203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:9e:b9:59:5e:ed:a0:ac:a9:35:0e:63:5f:35:f8:74:5c:53:
         c6:f5:eb:fb:df:27:99:3c:99:31:c4:f9:de:9b:97:c4:2b:db:
         6d:af:0b:d5:19:15:da:cd:6e:0a:6e:9d:e1:50:3e:8a:b6:40:
         c2:c0:15:47:5a:58:82:51:9d:8d:59:2e:e0:ac:94:f0:f0:86:
         a5:b9:65:90:9a:e3:31:87:f4:25:b2:ae:79:71:bd:13:42:1d:
         23:23:10:7b:b3:41:2b:40:c1:37:6e:e2:35:cb:7f:41:3d:8b:
         a0:62:af:df:e2:87:13:de:4f:1b:07:9c:ea:ec:52:50:1f:8b:
         9b:53:1a:24:08:6f:a3:86:9f:3b:e3:a3:52:73:28:ac:73:0f:
         37:93:df:54:84:96:08:86:14:c9:26:24:6c:b7:94:c4:b0:c6:
         78:e3:c3:e7:68:2f:87:f1:10:25:3d:54:e1:d3:31:92:33:e9:
         a7:9d:27:14:4f:a6:b1:3d:0b:f1:c8:bc:3a:54:dc:bb:4b:2b:
         41:88:d3:4d:1a:b0:3f:60:e1:b3:a0:a1:ac:3c:b9:50:63:a8:
         83:23:09:a3:a8:51:cb:42:65:6d:76:66:30:f9:f8:ab:30:53:
         2d:eb:d3:60:a5:60:5d:21:7c:30:d2:20:96:69:4c:b8:41:38:
         d1:30:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org