Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa
File:                     3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          3XdXBCBQY/BEMZ3vtV7fj6F6SPw+FD+khvi+m4NTWvU=
Subject key identifier:   DB:3D:DC:52:A1:61:10:4C:97:42:9A:31:29:62:5C:BD:9F:6A:B3:CE
Certificate issuer:       /CN=63D2D46E742FC22F105852BE96AF5CD79AC0736B
Certificate serial:       36FF7A7EDA5F1BDEA4B462F0224641CB538D5886
Authority key identifier: 63:D2:D4:6E:74:2F:C2:2F:10:58:52:BE:96:AF:5C:D7:9A:C0:73:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa
Signing time:             Fri 17 Nov 2023 12:13:23 +0000
ROA not before:           Fri 17 Nov 2023 12:08:23 +0000
ROA not after:            Fri 15 Nov 2024 12:13:23 +0000
asID:                     28299
IP address blocks:        177.185.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ff:7a:7e:da:5f:1b:de:a4:b4:62:f0:22:46:41:cb:53:8d:58:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D2D46E742FC22F105852BE96AF5CD79AC0736B
        Validity
            Not Before: Nov 17 12:08:23 2023 GMT
            Not After : Nov 15 12:13:23 2024 GMT
        Subject: CN=DB3DDC52A161104C97429A3129625CBD9F6AB3CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:b5:63:ad:ad:1b:87:6a:f7:0d:90:51:4e:
                    0e:9a:a7:db:17:d1:d1:0c:97:ec:e6:4a:d3:c4:84:
                    19:8d:81:22:c2:fe:f6:c2:90:92:c6:69:0c:85:67:
                    b5:ea:2b:27:3a:f0:c2:65:d7:5f:d1:b4:39:d6:de:
                    7e:51:6e:a4:ea:27:65:d8:ee:a6:91:52:0b:53:77:
                    fb:d5:f8:a0:96:d0:72:bd:a5:0c:d5:89:6f:76:36:
                    4a:07:78:86:75:d3:25:e7:bc:7e:b3:1a:1f:3e:76:
                    15:99:13:7d:53:8c:66:34:a1:07:a4:d8:41:39:1f:
                    4b:09:bb:2e:dc:3d:23:c0:2f:47:ac:48:3a:8a:a2:
                    4a:fe:b7:04:69:b4:4a:dc:69:a1:74:73:56:e0:ca:
                    fc:6a:7f:ba:7b:bd:a0:89:7e:2d:90:51:28:37:4e:
                    c6:65:c4:d9:fb:4d:fd:21:c0:5d:a2:30:c2:29:78:
                    31:1d:5a:27:8f:c9:88:a2:4f:05:59:90:4a:db:6b:
                    a6:ce:af:3b:63:f0:91:d0:6e:09:d0:44:74:06:0e:
                    b3:fa:e9:41:5d:e3:4c:5f:3b:e3:16:97:89:e3:a7:
                    4c:3c:30:32:ae:67:c3:b5:1f:93:6b:25:4a:25:ee:
                    2a:a5:6c:e7:db:1f:1f:e0:7d:e2:35:7d:c6:8e:f7:
                    70:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3D:DC:52:A1:61:10:4C:97:42:9A:31:29:62:5C:BD:9F:6A:B3:CE
            X509v3 Authority Key Identifier:
                keyid:63:D2:D4:6E:74:2F:C2:2F:10:58:52:BE:96:AF:5C:D7:9A:C0:73:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63D2D46E742FC22F105852BE96AF5CD79AC0736B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:a5:c7:a1:1b:57:a3:ca:73:cf:f3:8c:d8:a8:d7:28:3f:af:
         6b:91:b4:6a:6a:0c:ff:7b:9a:94:14:b7:d7:6a:24:35:9c:b7:
         0e:d4:f7:2a:db:0d:a7:0e:b7:84:e0:7c:38:09:c6:5c:d5:33:
         90:3e:a5:03:a4:b1:d5:4e:d4:5a:f9:ad:8a:73:e8:9f:8d:7c:
         9d:90:c7:23:c3:05:42:69:25:c4:c1:50:02:47:0b:4f:c0:47:
         25:1b:2a:51:60:eb:2a:3b:38:8a:97:de:75:40:d0:3e:a4:25:
         c9:09:eb:84:a2:23:f4:94:27:c7:93:59:c3:18:76:b5:b7:53:
         02:c9:ba:b6:86:08:f9:c3:c6:d5:cf:7c:6e:a6:29:6b:53:59:
         4d:c5:91:28:29:15:6e:a2:fd:a8:bb:04:1e:a8:91:92:c0:ac:
         9b:99:0e:22:95:80:d7:e4:86:52:b1:17:ae:f7:90:6b:9c:9d:
         c4:d6:36:dc:a2:25:6d:73:1c:0c:4d:1a:80:00:bf:e1:d5:23:
         57:aa:b0:c8:c1:d7:81:f6:38:8d:00:04:83:ff:77:6d:04:09:
         3c:f0:5c:82:a0:b2:ca:56:39:29:f8:91:09:ca:92:b7:93:50:
         da:4a:a3:97:7b:4b:53:7b:2a:f9:b6:4c:c6:fe:23:fe:73:a6:
         35:8e:a3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org