Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32342d3234203d3e203532393437.roa
File:                     3137372e33382e3133362e302f32342d3234203d3e203532393437.roa (raw, json)
Hash identifier:          2P/uWBqjJqpvb8D611LpC1yrbbyqXsVuXcbS0FBUBNI=
Subject key identifier:   38:C2:2E:F7:97:E5:3A:52:1B:01:71:A2:EE:62:7B:88:ED:26:7D:D8
Certificate issuer:       /CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
Certificate serial:       7AC67D8DE966A4042601EF2B6495CB8B19E0D33D
Authority key identifier: 49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32342d3234203d3e203532393437.roa
Signing time:             Mon 23 May 2022 12:45:25 +0000
ROA not before:           Mon 23 May 2022 12:40:25 +0000
ROA not after:            Mon 22 May 2023 12:45:25 +0000
asID:                     52947
IP address blocks:        177.38.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c6:7d:8d:e9:66:a4:04:26:01:ef:2b:64:95:cb:8b:19:e0:d3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
        Validity
            Not Before: May 23 12:40:25 2022 GMT
            Not After : May 22 12:45:25 2023 GMT
        Subject: CN=38C22EF797E53A521B0171A2EE627B88ED267DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:2f:66:e3:99:42:85:12:f0:f9:ab:e7:d5:
                    24:da:b7:15:3e:05:6f:4a:a4:38:2e:f7:a2:b6:da:
                    54:d2:22:80:80:0a:6c:02:64:5d:f9:12:06:06:65:
                    6e:81:ff:ac:ce:43:9b:0e:b3:d1:67:30:e2:9d:9b:
                    9d:46:29:10:b5:82:2c:72:18:e3:7b:a1:30:7b:04:
                    53:9c:3a:2e:c2:83:2c:94:82:73:0a:a2:c7:5a:72:
                    9f:53:92:a5:64:d4:d6:7b:3d:36:db:83:3a:47:bf:
                    2c:b8:ae:c5:d0:c5:25:d5:b4:28:d7:f5:4d:c8:eb:
                    22:2d:a1:72:8f:e5:db:75:3e:3b:a5:b8:ec:e2:1e:
                    a5:76:d3:87:52:59:99:e9:ed:52:8d:80:90:57:3b:
                    84:af:39:5f:bd:d9:26:43:11:35:92:b2:e5:60:89:
                    83:9b:c0:5d:92:ea:15:b6:c6:28:b0:4a:64:1e:9d:
                    df:99:16:19:10:a1:cc:9e:f6:d5:34:8b:55:6e:98:
                    61:ff:74:4b:1c:8b:f3:f4:ff:cf:19:5a:e5:35:50:
                    50:34:36:e6:6a:4c:b0:7b:0b:bb:79:8a:51:77:11:
                    f7:43:23:c2:8d:3f:07:37:0d:a3:0a:4b:f1:9d:03:
                    95:35:ac:40:7c:c6:e0:24:bd:79:00:d6:43:2a:f1:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C2:2E:F7:97:E5:3A:52:1B:01:71:A2:EE:62:7B:88:ED:26:7D:D8
            X509v3 Authority Key Identifier:
                keyid:49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32342d3234203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:59:20:9c:0f:f6:dc:c7:9a:0b:f3:a5:0c:52:8f:5f:26:63:
         83:01:18:ac:4b:31:69:05:52:e4:00:f6:4c:48:bf:16:77:cb:
         32:a4:c2:be:77:1e:0c:5e:ba:6f:2e:d3:4c:45:99:d7:53:43:
         23:2f:bd:9e:dd:74:61:ed:df:6c:ce:96:9f:6c:ea:95:f5:5b:
         45:ca:33:e3:5f:f3:66:59:3b:d6:0d:2c:c1:e7:75:5b:79:3f:
         fe:f6:4d:4d:6f:49:64:a2:38:bd:e4:c3:17:70:8e:9b:2e:c4:
         ea:a3:db:15:d3:9e:5a:b5:a2:53:53:07:9e:31:cd:99:ab:4a:
         3a:91:d3:19:eb:79:7e:68:a2:37:a0:e6:2a:cc:a0:53:3e:a9:
         ec:73:46:4c:05:71:58:55:f2:84:5c:d9:72:54:ae:57:3d:8e:
         d8:97:e5:02:f2:5c:20:e9:5d:bf:a0:b2:88:7c:fe:c2:5a:7d:
         ae:00:b2:1a:42:99:19:a5:e9:1b:1f:16:3b:dd:f9:2a:a5:08:
         6e:6b:b8:02:ff:eb:84:77:b2:0b:69:e1:6d:67:6c:a5:8d:d9:
         ad:f3:b8:17:bf:0a:a0:be:9e:cf:2d:9f:06:e5:92:fc:c1:4f:
         8a:b7:1a:73:f9:a8:23:b1:8d:6b:86:b2:8d:c5:f4:15:db:b6:
         0c:c5:52:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org