Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131322e302f32302d3230203d3e20323632383038.roa
File:                     3137372e33372e3131322e302f32302d3230203d3e20323632383038.roa (raw, json)
Hash identifier:          AcC22xPcrIqodkHrLFwW9iURwpUnTY8+quoVAobUv9o=
Subject key identifier:   07:75:E5:5F:B0:6E:30:1F:89:8B:D0:65:E6:34:C6:0D:C9:4A:C7:13
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       21A00CDA6D08D43E4FE79656D14B8A44D1B7B76F
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131322e302f32302d3230203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:30 +0000
ROA not before:           Tue 10 Oct 2023 13:52:30 +0000
ROA not after:            Tue 08 Oct 2024 13:57:30 +0000
asID:                     262808
IP address blocks:        177.37.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a0:0c:da:6d:08:d4:3e:4f:e7:96:56:d1:4b:8a:44:d1:b7:b7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:30 2023 GMT
            Not After : Oct  8 13:57:30 2024 GMT
        Subject: CN=0775E55FB06E301F898BD065E634C60DC94AC713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:3e:3c:d7:5f:3a:46:b8:95:93:21:f6:fd:
                    e9:79:62:2a:dc:b3:3a:f3:a9:af:a7:72:67:d3:f9:
                    f1:9f:e4:b8:12:2e:57:b9:d8:c3:3b:5d:42:23:8c:
                    a6:fe:a3:d0:2d:44:ac:63:b8:83:8b:6a:f1:3e:e0:
                    92:b8:4c:b6:69:99:c2:f4:d0:83:d8:c9:79:b9:97:
                    e7:ee:bb:0f:30:df:c8:8e:e0:4d:a4:e7:59:45:2f:
                    a6:9e:3c:76:92:8b:ff:09:c9:de:67:d7:96:77:91:
                    d4:71:c6:cf:1b:c6:f0:15:c7:b2:ee:64:60:a3:11:
                    67:5e:ac:e7:cf:38:d1:7e:1b:ca:82:9c:da:21:41:
                    35:c0:0d:d4:59:27:3a:a4:c9:a8:51:6b:00:ff:67:
                    cd:78:f6:76:24:2e:80:b2:21:56:39:d4:22:8f:0e:
                    03:40:02:18:7a:38:80:79:4f:38:b6:90:2a:b1:36:
                    c3:df:86:8e:b9:11:41:49:e6:7c:74:06:19:d7:4d:
                    e5:b6:75:2c:a1:2b:10:fc:5f:3d:ff:f7:71:b7:ef:
                    4e:eb:ab:6d:72:08:12:6d:de:91:ae:ea:5c:80:22:
                    0e:e8:41:b3:db:ea:5a:67:79:8a:e9:92:35:23:33:
                    55:5e:af:07:7b:28:a7:50:0c:b6:9a:65:60:b9:74:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:75:E5:5F:B0:6E:30:1F:89:8B:D0:65:E6:34:C6:0D:C9:4A:C7:13
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3137372e33372e3131322e302f32302d3230203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:37:b4:42:59:60:b4:65:cc:92:77:fd:41:cd:04:ba:90:9d:
         1e:9b:7c:bb:e2:be:1f:f9:38:7d:2e:31:4d:57:d9:35:4e:ad:
         30:5b:79:b4:57:44:54:bf:e0:33:47:68:1b:ff:13:a1:17:35:
         d8:54:a5:e4:6a:20:ce:2c:8e:4d:49:77:44:e4:8f:2a:6a:85:
         46:31:57:b4:9e:41:c8:14:d7:f8:fe:a0:d8:40:4f:75:99:c8:
         f2:8b:b8:eb:3c:b2:91:d9:fe:17:65:50:4f:17:74:43:8c:b1:
         8a:59:71:07:72:62:ba:a4:5b:78:b6:4c:bd:8b:c5:dc:f7:97:
         a5:86:e0:19:0c:3d:36:d8:3a:52:8d:c3:0c:48:9c:a8:61:59:
         fa:82:02:e1:fc:fd:2d:3c:bb:32:b5:ec:be:a9:d4:d7:bc:79:
         40:2c:e3:02:10:5f:67:e8:be:3e:bb:af:d1:9a:39:de:a1:b6:
         fe:95:63:dc:77:af:4a:56:31:ca:84:68:cd:73:89:7e:b2:8d:
         3d:17:52:55:94:e9:c9:78:cb:b4:ae:78:41:6f:a0:ac:33:99:
         e3:4d:64:95:58:09:4b:a4:0a:1e:21:c3:92:f7:00:8a:27:4e:
         fe:04:44:b9:df:e5:3c:65:7a:bb:04:67:4b:e3:a2:ea:b1:37:
         21:c9:39:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org