Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa
File:                     3137372e33392e3135362e302f32332d3233203d3e203532373732.roa (raw, json)
Hash identifier:          QRPyf28tAmPNqeZFeJS8rFjchCzuTCPZQjabp4sOh1o=
Subject key identifier:   ED:6A:DF:05:41:DE:C0:1A:B8:90:BD:2F:5B:F7:8E:05:11:AF:7A:88
Certificate issuer:       /CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
Certificate serial:       0D9194BD0A6346AE768814F18D1957F67ABD7823
Authority key identifier: 2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa
Signing time:             Wed 03 Apr 2024 21:54:19 +0000
ROA not before:           Wed 03 Apr 2024 21:49:19 +0000
ROA not after:            Wed 02 Apr 2025 21:54:19 +0000
asID:                     52772
IP address blocks:        177.39.156.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:91:94:bd:0a:63:46:ae:76:88:14:f1:8d:19:57:f6:7a:bd:78:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
        Validity
            Not Before: Apr  3 21:49:19 2024 GMT
            Not After : Apr  2 21:54:19 2025 GMT
        Subject: CN=ED6ADF0541DEC01AB890BD2F5BF78E0511AF7A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:cb:ed:93:99:80:a7:60:3e:fd:76:af:0b:
                    2b:72:55:4b:21:42:4d:57:bf:be:b2:d9:9d:4f:45:
                    34:08:93:eb:29:6a:64:a7:bc:45:15:b2:04:b8:bc:
                    d7:f2:05:68:6e:8b:cd:25:87:35:6e:e5:5f:82:3d:
                    7c:21:95:1a:c5:a4:8d:8c:6b:8d:c7:72:bb:9e:af:
                    0f:c4:c0:b1:08:2d:c0:8e:f7:8e:ef:62:31:c7:6d:
                    9c:38:a0:61:a6:9a:53:89:7f:87:4d:f3:0a:65:87:
                    2a:a9:b5:74:7b:0f:71:8d:5f:df:a0:6e:b8:6c:ac:
                    9c:92:21:67:0a:c7:05:10:ed:ae:24:0a:40:40:f3:
                    bc:eb:61:4a:d4:e4:e0:0e:c6:b3:78:ff:f5:cc:e3:
                    8d:46:11:68:64:53:bb:d3:1d:88:44:d8:9f:b8:cb:
                    d0:97:56:b4:0f:cd:c4:a5:bd:fd:a6:d6:34:cc:fa:
                    21:07:1a:f1:fe:4f:bc:ca:2a:63:b6:10:d4:b9:50:
                    c9:06:67:f5:b8:33:75:5c:03:e1:9c:48:d7:cd:09:
                    39:97:fd:e9:a8:ff:56:c2:f3:f2:b6:93:a8:d5:a2:
                    10:7b:6b:00:d1:01:c7:18:f5:e5:d8:d9:42:8b:e4:
                    d1:3b:c4:c2:10:c4:de:aa:be:60:8b:f0:bf:b4:b1:
                    81:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6A:DF:05:41:DE:C0:1A:B8:90:BD:2F:5B:F7:8E:05:11:AF:7A:88
            X509v3 Authority Key Identifier:
                keyid:2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:58:47:d7:c6:be:62:5e:db:ee:e4:91:2c:d5:6c:1e:50:0d:
         ab:91:15:e0:1e:57:c0:10:ef:0e:d9:69:ef:78:fe:90:9e:d2:
         a4:b8:29:33:af:19:71:5f:89:45:1e:23:ae:cb:d7:92:50:78:
         10:c6:6d:9d:af:ac:0f:7c:27:9d:c1:28:06:a6:c1:57:58:46:
         3f:22:a9:70:53:01:11:11:f4:0c:c9:60:98:ab:6d:d7:35:7d:
         a2:0a:c5:24:c1:73:2f:f0:0f:54:53:ac:f8:2e:10:39:75:50:
         f1:4e:94:92:6e:56:ba:50:e0:59:72:7e:7c:b2:5a:41:db:48:
         b6:16:09:2f:34:c0:89:1c:37:06:44:53:96:2a:c2:2b:ea:ca:
         db:7f:bd:f9:45:98:4c:e0:91:00:c8:0c:31:ad:5a:df:cc:ab:
         b8:39:4c:4d:89:fc:3e:4f:e7:49:6a:69:bc:c1:7b:a7:17:88:
         c3:4e:e2:8f:4a:90:87:1c:58:93:97:d9:1f:cb:50:72:2b:86:
         e2:eb:0a:16:6e:cb:86:12:b4:15:d3:70:28:ae:5a:3c:0d:15:
         e3:39:56:9b:cb:2c:fe:e5:5c:99:33:35:08:73:80:08:33:23:
         78:84:49:7a:43:fa:d2:64:b5:90:11:f2:17:d4:60:4e:9b:ad:
         c0:56:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 01:59:44 2024 by rpki-client on console-ams.rpki-client.org