Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135372e302f32342d3234203d3e203532373732.roa
File:                     3137372e33392e3135372e302f32342d3234203d3e203532373732.roa (raw, json)
Hash identifier:          kx4bAULJZVUSWo9T8Eal2d/kv+LiAHDHbJisT0yDGbw=
Subject key identifier:   AD:69:93:1F:54:0E:FF:D3:15:BB:88:81:94:A9:D8:79:79:E1:C6:71
Certificate issuer:       /CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
Certificate serial:       443A64F9ADD59070303724B7BAAEBD260AC5B76C
Authority key identifier: 2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135372e302f32342d3234203d3e203532373732.roa
Signing time:             Wed 03 Apr 2024 21:54:19 +0000
ROA not before:           Wed 03 Apr 2024 21:49:19 +0000
ROA not after:            Wed 02 Apr 2025 21:54:19 +0000
asID:                     52772
IP address blocks:        177.39.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3a:64:f9:ad:d5:90:70:30:37:24:b7:ba:ae:bd:26:0a:c5:b7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
        Validity
            Not Before: Apr  3 21:49:19 2024 GMT
            Not After : Apr  2 21:54:19 2025 GMT
        Subject: CN=AD69931F540EFFD315BB888194A9D87979E1C671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a4:63:a9:a3:21:59:95:ed:0e:c3:98:16:6d:
                    f7:21:0b:d8:ac:0b:4f:18:74:95:5b:fb:3a:03:99:
                    c5:e0:4e:8e:f0:c5:9a:68:91:31:88:df:53:d3:8f:
                    77:68:4b:da:ce:59:16:07:34:58:d7:0d:a2:82:4f:
                    f3:ec:14:d9:81:0f:05:7d:a1:d8:61:d7:cb:36:b1:
                    bb:03:01:a6:ac:20:6d:48:7c:25:d5:3f:66:b3:ce:
                    d1:9e:32:6d:45:7b:61:c2:bb:be:66:ef:25:47:34:
                    ed:a6:2d:9f:a4:ae:e6:59:c9:71:74:24:6d:31:a2:
                    70:5d:80:93:8f:26:c8:f4:c4:0a:df:00:eb:97:bb:
                    a2:b0:c7:d3:63:89:d9:02:e1:dd:d1:28:73:99:61:
                    4e:a4:4d:11:54:a9:03:a4:1e:d2:20:b3:28:68:3b:
                    5b:28:c2:84:8c:1c:76:83:c5:05:2b:de:d8:4e:d9:
                    bd:e0:29:c6:f6:e4:cb:a1:74:d3:97:08:86:ed:c9:
                    4d:3e:13:c6:50:fa:fc:08:38:11:db:e8:2d:4d:09:
                    14:7c:ff:c2:0a:22:33:91:bb:64:b3:55:56:23:7b:
                    e0:03:ad:03:5a:b4:91:3c:d9:0c:60:f9:91:22:e8:
                    27:c6:5f:fc:c5:26:4d:b6:5e:26:cc:0b:f0:e6:80:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:69:93:1F:54:0E:FF:D3:15:BB:88:81:94:A9:D8:79:79:E1:C6:71
            X509v3 Authority Key Identifier:
                keyid:2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135372e302f32342d3234203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:97:17:2b:94:97:e3:2f:16:4e:e5:38:7a:24:aa:80:40:fd:
         f4:ce:aa:6f:bd:28:e4:2e:05:44:57:24:9f:2d:3c:35:97:c3:
         ff:7a:c8:9a:0a:9c:64:5f:c7:24:21:7e:02:4e:fb:00:8b:e1:
         7a:2e:0c:1a:e7:61:8e:19:fe:9c:8d:13:62:2d:1f:f7:26:e5:
         50:08:0e:6e:6b:92:3a:c3:85:30:7a:22:4f:57:43:17:1c:a5:
         98:e3:4c:86:23:7f:31:28:ca:06:72:7a:f0:42:29:d1:d4:d7:
         c6:fb:b6:7b:31:50:28:4d:13:b3:9c:e2:86:79:8f:e1:f1:06:
         f5:fa:98:aa:b7:d8:94:55:e0:e0:26:64:cd:0b:66:84:11:c0:
         b5:31:1b:78:94:1d:75:47:12:8b:80:e4:98:4b:7f:fe:7a:d0:
         b3:f3:51:c0:0a:9c:d9:2c:6b:49:73:8e:42:40:2f:8b:6b:54:
         91:a3:9e:a8:e4:33:23:3c:e6:29:65:cd:47:63:ef:31:64:5e:
         16:86:5d:a5:91:02:78:2b:e8:42:3a:b9:70:04:4f:7f:95:f3:
         20:42:11:5e:b9:56:25:80:79:b3:f7:51:fe:48:10:fe:82:ad:
         5a:17:5c:df:6a:01:23:19:f4:7e:54:03:cb:10:43:35:12:78:
         7c:17:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 01:59:44 2024 by rpki-client on console-ams.rpki-client.org