Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e35322e35362e302f32322d3234203d3e20323632393038.roa
File:                     3137372e35322e35362e302f32322d3234203d3e20323632393038.roa (raw, json)
Hash identifier:          xWuFoVkZU33l9H0JCBtKtsmcKul0NKCBOJDdJ3JpWTo=
Subject key identifier:   3F:A0:85:BA:71:E5:7A:E5:D7:EF:4E:C8:D8:63:45:33:40:DD:36:D1
Certificate issuer:       /CN=380AE62845C4468F9462327C41A0D22DA68054FD
Certificate serial:       1221D5896E0C6AF58E0BF60BF73F0E1F503DF320
Authority key identifier: 38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e35322e35362e302f32322d3234203d3e20323632393038.roa
Signing time:             Tue 23 Jan 2024 13:02:25 +0000
ROA not before:           Tue 23 Jan 2024 12:57:25 +0000
ROA not after:            Tue 21 Jan 2025 13:02:25 +0000
asID:                     262908
IP address blocks:        177.52.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:21:d5:89:6e:0c:6a:f5:8e:0b:f6:0b:f7:3f:0e:1f:50:3d:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380AE62845C4468F9462327C41A0D22DA68054FD
        Validity
            Not Before: Jan 23 12:57:25 2024 GMT
            Not After : Jan 21 13:02:25 2025 GMT
        Subject: CN=3FA085BA71E57AE5D7EF4EC8D863453340DD36D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:c6:e6:21:9f:a3:b3:10:17:2c:48:86:ef:
                    61:70:66:71:60:69:06:71:e3:61:da:f4:a0:8e:9c:
                    94:db:5b:96:e5:3b:10:15:29:a4:5c:1a:1e:a3:01:
                    4c:7a:85:cc:c8:b8:75:3b:91:97:58:49:32:42:fc:
                    e9:3d:31:4e:71:3f:3e:88:75:47:2c:65:14:ce:6a:
                    2a:b4:e7:84:b2:92:fb:1e:34:f4:78:1a:3a:6a:8f:
                    e6:84:25:8a:df:71:99:74:7c:b4:bc:3a:12:b3:6c:
                    2a:cc:30:7b:f9:ec:f1:c1:40:85:d4:22:97:68:6d:
                    68:1b:f0:7f:09:f3:ba:22:58:69:21:b6:a4:66:e4:
                    ed:80:0b:ca:e6:3a:3a:b9:54:fc:57:77:ad:eb:e0:
                    dc:07:e5:4b:23:ac:22:60:88:02:f8:64:ad:f8:23:
                    1f:8a:ef:1f:ae:16:98:73:10:f9:ef:f3:ac:7b:a4:
                    c4:b5:66:92:60:db:22:2d:40:b2:86:e5:c0:4a:17:
                    25:20:4c:7c:43:f0:51:ff:fb:5c:ba:36:38:16:cd:
                    87:ba:81:75:3b:43:a8:96:ab:d9:40:be:4c:ad:ec:
                    02:4e:3c:6b:91:a5:73:16:05:76:ca:1d:72:7d:4b:
                    21:22:b3:27:bb:ac:67:cd:b9:98:11:18:b9:f1:10:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A0:85:BA:71:E5:7A:E5:D7:EF:4E:C8:D8:63:45:33:40:DD:36:D1
            X509v3 Authority Key Identifier:
                keyid:38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/380AE62845C4468F9462327C41A0D22DA68054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e35322e35362e302f32322d3234203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:24:d4:cd:c5:db:c3:d6:23:cc:8e:13:80:51:9a:8e:1e:ab:
         77:8f:67:db:a5:c5:2f:06:34:84:ea:6c:79:bc:d6:76:c2:8c:
         aa:bc:80:03:2f:98:91:30:06:eb:69:5d:82:1e:56:1c:af:b6:
         25:b6:88:59:dd:51:af:15:af:50:78:a0:08:5e:7a:a8:14:93:
         f4:17:66:30:29:45:46:d6:60:14:bc:87:a7:d5:93:da:dc:00:
         cb:8e:39:85:a9:d2:c5:3f:b2:e7:f6:e4:db:5a:f7:0d:b6:6f:
         b8:9b:93:d2:0f:ba:c1:08:f5:1d:2a:02:86:07:6d:82:21:7a:
         2f:11:e8:5a:df:67:e1:9e:ba:ae:39:85:7f:93:22:ed:b7:ac:
         5e:7d:f8:81:86:0e:8d:bc:81:8f:31:70:fe:49:51:9c:61:d8:
         87:a6:35:38:aa:97:24:b3:68:69:cd:d5:51:60:10:b7:41:e0:
         16:d0:fa:0f:4e:4b:3d:b2:93:e3:aa:5d:06:e3:36:9b:f6:72:
         de:7a:a6:a4:fc:c3:84:3d:44:93:71:8b:46:da:a2:d6:db:db:
         45:34:87:a5:73:fe:72:28:e3:8a:ca:1f:d9:69:8f:fb:c5:f2:
         e6:61:59:fc:1d:2a:49:57:2d:df:83:85:a4:79:c9:55:dc:dd:
         d5:82:9c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org