Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa
File:                     3137372e33392e3135362e302f32322d3232203d3e203532373732.roa (raw, json)
Hash identifier:          U8/ezz8k90c5txOePqJs+38c4+a9OEDvzM5YiW9vqBc=
Subject key identifier:   2F:B1:B2:AB:F1:F6:4A:28:55:31:D4:3C:F2:63:91:8D:7C:C3:E6:70
Certificate issuer:       /CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
Certificate serial:       29B2F45A221E3D0FF2158F6F61DF53F65858D126
Authority key identifier: 2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa
Signing time:             Wed 03 Apr 2024 21:54:19 +0000
ROA not before:           Wed 03 Apr 2024 21:49:19 +0000
ROA not after:            Wed 02 Apr 2025 21:54:19 +0000
asID:                     52772
IP address blocks:        177.39.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b2:f4:5a:22:1e:3d:0f:f2:15:8f:6f:61:df:53:f6:58:58:d1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
        Validity
            Not Before: Apr  3 21:49:19 2024 GMT
            Not After : Apr  2 21:54:19 2025 GMT
        Subject: CN=2FB1B2ABF1F64A285531D43CF263918D7CC3E670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:da:16:a1:c8:4b:8f:fa:95:12:de:ae:14:
                    b8:1e:89:7c:e7:42:23:7f:85:a9:20:f2:c4:1e:b1:
                    42:a8:03:23:79:3b:46:99:f9:66:fc:49:5b:00:bc:
                    9c:f0:81:92:8c:27:c2:bc:78:b6:81:e5:cb:a8:c6:
                    fd:8f:20:9b:ab:31:2e:2e:56:f2:01:c7:f7:cc:c7:
                    b8:b4:c7:35:1d:c8:e0:ec:2c:d7:9a:7c:c9:9a:61:
                    a6:9f:7c:b7:92:5f:b9:29:00:e3:88:31:aa:5d:c7:
                    9c:e8:15:19:5e:f4:02:2c:44:c0:6a:63:b2:b3:a7:
                    b4:06:ae:27:27:ad:18:7b:9a:54:ce:e6:37:d8:98:
                    88:46:c3:f2:85:21:4f:b7:82:c0:14:ad:60:15:8d:
                    b4:6d:63:69:1c:7c:27:31:a4:e4:00:d2:92:c1:2b:
                    89:46:e9:be:d1:0b:da:e2:99:cd:a2:d3:05:0e:37:
                    bc:77:13:24:30:66:77:98:86:ee:2b:fb:20:6a:e9:
                    e5:13:97:2d:a8:7b:90:b6:18:f3:f5:32:60:ec:91:
                    1a:64:b7:13:a3:ef:fb:f8:05:65:c7:6f:2a:d3:57:
                    2c:50:09:c5:a5:1e:4e:a7:cd:21:39:07:65:e7:67:
                    15:7e:c8:90:2e:ab:65:a8:3e:18:ea:de:7a:b4:bd:
                    04:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B1:B2:AB:F1:F6:4A:28:55:31:D4:3C:F2:63:91:8D:7C:C3:E6:70
            X509v3 Authority Key Identifier:
                keyid:2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:16:af:5d:f9:30:ec:d5:a1:d6:02:79:a5:46:27:b5:6d:9d:
         12:a0:dd:46:53:bb:ef:91:41:b5:00:ba:e1:59:d6:d6:d3:b6:
         60:4b:9e:82:84:08:7f:c4:1c:0c:e1:53:0d:0e:72:24:39:55:
         38:19:de:88:ba:e2:c3:92:c7:0c:26:87:23:2f:0a:ac:c5:bf:
         0e:b4:c1:a3:70:6f:48:10:ed:1b:05:2e:26:78:b7:02:d0:65:
         2b:92:7c:d5:5f:7d:b0:fd:e1:fc:23:92:6d:08:f6:22:4e:f2:
         03:7c:f4:26:6c:41:67:5f:51:b9:80:42:09:12:a4:03:46:f4:
         9a:6d:be:07:4c:39:71:69:4e:ed:93:1c:40:8d:29:7c:55:0e:
         d2:0a:ac:36:c3:fc:46:4b:ee:f6:75:85:ce:c6:8d:b7:02:a7:
         78:49:01:d4:2e:95:55:3f:61:6a:3f:07:34:61:a4:0b:46:9c:
         7c:7f:67:63:3b:bd:3d:b6:65:46:ac:26:22:6f:a4:8b:f2:69:
         75:cc:e5:a1:d0:44:01:7f:0d:0b:2f:fc:dd:de:39:e3:dd:ef:
         61:da:5c:4a:dc:00:5f:e4:e8:1c:6a:20:46:c0:0d:e9:09:e2:
         d0:eb:1f:fc:02:63:49:5b:64:3b:ba:d1:a5:d6:5d:3e:b4:91:
         8e:70:15:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 01:37:21 2024 by rpki-client on console-fra.rpki-client.org