Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/1/3137372e38362e39362e302f32312d3332203d3e20323632353036.roa
File:                     3137372e38362e39362e302f32312d3332203d3e20323632353036.roa (raw, json)
Hash identifier:          fBQL7xSrsDUMvQ9mNKec2NCwf/UeRtcTSvBrqxoP3Co=
Subject key identifier:   FF:19:43:4F:B2:BD:1B:DE:82:BE:57:29:97:B4:B9:CD:60:EB:A5:BB
Certificate issuer:       /CN=2CBB75030A47D2F3C18B047E0F096CF787337032
Certificate serial:       5CC7437FA804270FC839AF9412996446DC971382
Authority key identifier: 2C:BB:75:03:0A:47:D2:F3:C1:8B:04:7E:0F:09:6C:F7:87:33:70:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CBB75030A47D2F3C18B047E0F096CF787337032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/1/3137372e38362e39362e302f32312d3332203d3e20323632353036.roa
Signing time:             Thu 11 Apr 2024 13:39:56 +0000
ROA not before:           Thu 11 Apr 2024 13:34:56 +0000
ROA not after:            Thu 10 Apr 2025 13:39:56 +0000
asID:                     262506
IP address blocks:        177.86.96.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c7:43:7f:a8:04:27:0f:c8:39:af:94:12:99:64:46:dc:97:13:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CBB75030A47D2F3C18B047E0F096CF787337032
        Validity
            Not Before: Apr 11 13:34:56 2024 GMT
            Not After : Apr 10 13:39:56 2025 GMT
        Subject: CN=FF19434FB2BD1BDE82BE572997B4B9CD60EBA5BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:52:9f:df:d5:7f:31:1e:98:22:c1:bb:a2:13:
                    a8:f0:0e:6e:2a:9e:ab:b0:ed:e2:49:39:2a:4a:f5:
                    5a:4b:cf:61:03:ca:98:d3:8e:76:f0:a8:08:bd:1c:
                    e1:32:bb:67:70:f9:c5:d5:8b:50:e5:f8:9f:16:65:
                    96:15:aa:15:9b:91:13:84:d3:c7:98:85:49:7e:d9:
                    8d:05:61:5f:2a:3d:47:18:0a:1d:66:29:e0:57:b1:
                    f4:1d:92:61:31:d4:fb:e4:d8:14:ac:82:f9:65:db:
                    a9:40:79:b6:a2:a7:7c:cf:41:f2:bf:d6:22:f2:a3:
                    b3:9c:1f:bf:0e:1f:2d:12:60:15:0f:f4:0c:a4:f2:
                    f9:07:7f:a9:8a:0c:63:2e:6f:3b:18:7e:09:43:e5:
                    6c:b8:a9:08:a5:9d:47:c5:18:03:e4:b6:e7:b5:9a:
                    fe:43:ae:46:eb:de:4f:fc:8c:e5:a2:e1:39:fc:67:
                    e6:95:4b:a2:bf:bf:74:b8:08:5c:f8:ef:82:0f:d2:
                    12:de:1e:5c:a9:79:8b:37:0a:6b:2e:71:06:1c:5a:
                    82:95:f1:c5:5a:27:3b:37:84:6b:4b:81:4e:2b:89:
                    6b:9a:4e:70:42:d6:1c:32:10:a0:a2:21:99:16:1b:
                    2a:18:2b:1c:49:76:c0:f8:ab:8e:d7:dc:98:e2:ac:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:19:43:4F:B2:BD:1B:DE:82:BE:57:29:97:B4:B9:CD:60:EB:A5:BB
            X509v3 Authority Key Identifier:
                keyid:2C:BB:75:03:0A:47:D2:F3:C1:8B:04:7E:0F:09:6C:F7:87:33:70:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/1/2CBB75030A47D2F3C18B047E0F096CF787337032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CBB75030A47D2F3C18B047E0F096CF787337032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/1/3137372e38362e39362e302f32312d3332203d3e20323632353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:e1:c0:77:c0:06:6b:5e:55:ec:84:bc:6e:13:36:7b:61:5f:
         d1:e2:59:26:df:42:a7:75:61:d5:2d:cd:00:f7:aa:b0:93:80:
         78:c1:f2:3c:c4:05:c6:2b:26:3d:d7:7b:51:3f:a8:f5:71:b5:
         67:47:bc:9e:82:17:df:94:04:18:10:8f:42:f7:32:cc:cf:4c:
         d6:19:b3:b2:ed:78:0e:19:00:ec:03:42:a7:64:6a:16:35:77:
         b9:13:fb:f5:7c:bf:46:11:3f:54:66:49:87:43:b5:b0:4f:79:
         f0:0a:08:38:bc:db:0e:d1:97:fc:df:7b:e9:55:ac:e1:d1:4f:
         43:b2:3f:f4:96:1d:8b:32:3b:98:2d:9b:b4:fd:f5:f4:a9:6e:
         89:86:fd:64:24:3f:87:f2:53:cb:0a:53:99:5b:8b:de:aa:a3:
         b8:cc:5a:2c:b3:38:26:8d:52:f7:c9:7d:fc:92:bf:05:88:18:
         85:a3:03:e0:59:ba:67:f2:a4:bf:3c:3e:9e:f7:d6:69:f2:d3:
         64:b4:4a:12:b0:e5:4d:0d:47:30:f2:58:c1:1a:f5:12:eb:48:
         2e:9b:98:9a:b5:a9:64:a3:47:c7:d6:06:25:8d:43:7d:08:ca:
         93:ec:1d:cc:e5:91:d7:d9:6f:11:33:74:78:cb:17:a7:f5:d8:
         6f:91:07:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org