Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135382e302f32332d3233203d3e203532373732.roa
File:                     3137372e33392e3135382e302f32332d3233203d3e203532373732.roa (raw, json)
Hash identifier:          T+yR38HTKaTeTn6AGCh/fe0RgtIw3XrGmJvl4crVQfs=
Subject key identifier:   09:A8:D3:26:CF:2C:A9:EE:6C:B8:63:93:67:1E:FD:20:A2:F5:E9:34
Certificate issuer:       /CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
Certificate serial:       775F82B4705C3F2F5515D166CCD64345FBFDCE78
Authority key identifier: 2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135382e302f32332d3233203d3e203532373732.roa
Signing time:             Wed 03 Apr 2024 21:54:19 +0000
ROA not before:           Wed 03 Apr 2024 21:49:19 +0000
ROA not after:            Wed 02 Apr 2025 21:54:19 +0000
asID:                     52772
IP address blocks:        177.39.158.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5f:82:b4:70:5c:3f:2f:55:15:d1:66:cc:d6:43:45:fb:fd:ce:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
        Validity
            Not Before: Apr  3 21:49:19 2024 GMT
            Not After : Apr  2 21:54:19 2025 GMT
        Subject: CN=09A8D326CF2CA9EE6CB86393671EFD20A2F5E934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c6:6d:4a:aa:4d:d2:8c:ab:a9:f6:92:0b:03:
                    4d:23:6d:2c:d6:7c:99:e7:d6:c2:ff:e6:aa:f6:82:
                    6e:8b:d5:91:49:c3:2e:2c:c2:63:8e:2c:85:a4:c9:
                    9a:75:76:16:2e:df:ce:9a:60:c2:5b:32:42:31:af:
                    8b:8e:2b:6d:07:d3:d8:01:d7:71:6a:46:b6:e1:68:
                    9b:bf:53:ae:9e:38:eb:32:b7:e8:cb:d5:aa:d9:be:
                    d0:14:b4:20:4a:7b:27:c1:fa:02:8f:6d:3d:fe:66:
                    9f:74:ae:41:1d:44:b6:37:8c:94:7c:90:d3:d5:f4:
                    8e:b7:06:d1:fc:8b:57:be:f7:12:4b:f9:91:f9:e0:
                    de:f6:ce:bc:6c:57:e7:76:5b:b4:be:88:3c:04:0a:
                    d1:b0:45:60:a9:e2:1f:fe:5e:b4:7b:44:73:7a:37:
                    75:d8:e1:58:db:6c:38:08:e1:62:51:49:cd:be:82:
                    9a:9e:2c:e2:e9:ca:e7:5a:e3:af:5b:17:3f:5e:89:
                    4f:56:e8:0f:14:80:84:4c:b9:76:92:3b:22:10:25:
                    66:cf:7d:92:b6:21:e6:d1:de:2d:0f:b0:16:4f:fb:
                    32:4c:9e:24:7f:aa:6a:ac:d9:63:5d:e2:13:f4:ad:
                    23:db:e4:8f:3b:13:7e:51:4d:0c:fb:c5:ce:b5:7e:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A8:D3:26:CF:2C:A9:EE:6C:B8:63:93:67:1E:FD:20:A2:F5:E9:34
            X509v3 Authority Key Identifier:
                keyid:2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135382e302f32332d3233203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:59:1e:03:b9:43:5c:96:db:a3:2c:52:c2:32:1f:29:2c:1a:
         04:c2:eb:11:60:a9:88:25:af:89:98:57:1d:bf:48:89:f1:50:
         65:8f:08:ad:65:a1:12:ce:a3:3e:69:4d:8b:43:c3:bd:f4:84:
         51:e2:a1:a9:8d:be:8d:85:0a:a4:05:0d:88:c1:d0:b2:5b:6e:
         f9:c8:bd:ce:be:df:09:96:4c:f4:32:2b:24:33:17:7a:ec:39:
         e5:62:a1:f0:88:e0:45:0f:44:d7:27:f7:3a:2b:fa:31:ba:22:
         9d:ff:d9:b7:27:0c:b7:5d:95:c7:55:a8:59:d7:82:04:65:cd:
         32:fe:c9:12:43:20:0f:f1:03:3e:a2:08:56:e3:0b:0f:e2:da:
         fc:73:b3:c8:18:f5:51:0b:34:90:37:45:f5:83:86:47:34:a0:
         d9:d9:7a:73:5a:bd:c1:54:70:02:fb:fb:1a:41:7f:67:66:2f:
         14:39:72:9b:06:37:75:33:1b:34:2f:4b:fc:08:82:d6:62:24:
         9b:a5:65:d4:3c:66:a8:0b:ba:07:44:00:3f:ee:49:0e:e3:9f:
         63:c1:ec:6e:26:89:ad:0d:83:15:42:db:51:c5:75:a9:49:c8:
         16:71:60:43:f8:40:11:a7:df:73:b0:d8:93:d6:eb:29:9b:f3:
         11:00:c5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 01:59:44 2024 by rpki-client on console-ams.rpki-client.org