Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e35362e302f32342d3234203d3e20323638303138.roa
File:                     3137372e33392e35362e302f32342d3234203d3e20323638303138.roa (raw, json)
Hash identifier:          2rW/O3Y/jEgyuacOy0jzP727Zu0NohN5+4ourmHFwxw=
Subject key identifier:   30:B9:75:7F:01:48:70:1B:18:90:D9:72:C3:54:C0:E1:34:E7:DD:ED
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       3C047C82E17888B16F7405D938BA51A6ABD22113
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e35362e302f32342d3234203d3e20323638303138.roa
Signing time:             Tue 04 Oct 2022 12:03:03 +0000
ROA not before:           Tue 04 Oct 2022 11:58:03 +0000
ROA not after:            Tue 03 Oct 2023 12:03:03 +0000
asID:                     268018
IP address blocks:        177.39.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:04:7c:82:e1:78:88:b1:6f:74:05:d9:38:ba:51:a6:ab:d2:21:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  4 11:58:03 2022 GMT
            Not After : Oct  3 12:03:03 2023 GMT
        Subject: CN=30B9757F0148701B1890D972C354C0E134E7DDED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:74:97:a3:5f:a3:d6:f2:32:f4:66:4a:90:
                    0d:e3:d2:1f:8d:d5:a3:80:47:cb:b2:ef:c8:fa:90:
                    5e:c2:b6:ec:8b:55:35:cc:4d:76:7c:50:c0:7d:f8:
                    7d:ef:0a:76:bc:b6:ab:69:89:37:26:72:e0:ee:42:
                    14:0c:38:9d:4e:ab:94:b1:5a:f5:04:a8:08:bb:10:
                    71:38:57:45:21:fd:7c:d6:b0:ac:d0:35:3f:16:43:
                    cf:93:ff:1c:d2:7a:2b:43:9d:f0:4e:c4:7f:52:22:
                    1b:c4:e5:d4:6a:74:96:49:39:c7:2f:24:89:67:49:
                    a7:88:96:a6:70:86:b9:7b:87:8e:6d:4f:2e:88:99:
                    8d:e9:5e:30:1f:04:54:6f:e5:66:07:64:6a:2e:38:
                    38:7e:e4:a0:92:90:bf:d6:48:52:24:4e:d8:0a:a9:
                    fe:92:04:00:af:d7:c2:b1:92:39:b7:c2:f7:a3:bd:
                    3e:81:9f:58:e7:60:55:76:bd:a8:05:05:9a:f5:e8:
                    77:09:b3:69:40:e0:b0:76:4e:d1:a8:65:d3:22:56:
                    2b:08:84:4b:9f:eb:fc:45:b2:13:ab:16:ca:7b:1a:
                    6f:63:7e:ec:69:39:75:69:eb:f6:1d:f1:39:dc:dc:
                    3e:72:d8:2c:8d:78:af:2a:0b:8a:90:61:08:a3:63:
                    3a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B9:75:7F:01:48:70:1B:18:90:D9:72:C3:54:C0:E1:34:E7:DD:ED
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e33392e35362e302f32342d3234203d3e20323638303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:3c:6e:71:31:ea:16:47:df:ef:61:92:fc:80:43:ea:af:02:
         8a:39:34:f3:32:dc:00:9d:92:b2:5d:a4:52:81:a8:9c:f4:e6:
         81:f0:10:ba:56:5a:5b:33:2e:4a:50:c2:76:89:de:c4:6e:c4:
         33:66:bc:a2:59:b5:d5:c7:41:1e:e8:1f:a3:98:77:38:ac:f3:
         be:55:21:36:79:cf:04:14:df:09:1a:8d:1f:4b:9b:a2:82:96:
         f8:49:fa:6f:1c:f7:df:9f:61:42:a1:a5:1f:f4:42:75:10:03:
         5e:b2:e4:b4:ae:46:26:03:7d:a2:68:b3:99:66:70:fa:7a:e3:
         25:7f:c7:2c:53:21:40:26:3d:48:bf:7f:08:a2:30:27:9b:1d:
         ba:9a:9a:94:7d:71:1a:0c:24:3d:b3:13:f1:01:b7:be:bb:c9:
         d4:6c:6b:ad:f0:ec:be:ad:98:ce:29:ef:9c:b8:58:9b:f1:d3:
         96:2b:07:e2:ab:43:9d:aa:38:7f:cd:ff:09:77:2a:5d:05:da:
         65:c1:da:b8:22:16:ce:4d:7f:ae:04:83:85:e9:c8:16:b7:73:
         a4:38:b2:0e:fc:d4:b5:12:b8:7d:48:7c:9a:c2:b7:9d:f3:68:
         06:e2:b6:42:74:52:03:8f:13:63:b8:b6:b2:22:ea:20:96:cd:
         2e:b0:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org