Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135382e302f32342d3234203d3e203532373732.roa
File:                     3137372e33392e3135382e302f32342d3234203d3e203532373732.roa (raw, json)
Hash identifier:          pIvD5v29FaJBTxLpA1G0Wjae8iha5vUhZe1BvQKOG6Q=
Subject key identifier:   40:F1:82:53:8E:B2:88:B8:7F:95:DB:C6:7D:F7:07:DE:DD:E1:49:F3
Certificate issuer:       /CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
Certificate serial:       5CF953CEB70D714296423CE6B9039FD959B7597B
Authority key identifier: 2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135382e302f32342d3234203d3e203532373732.roa
Signing time:             Wed 03 Apr 2024 21:54:19 +0000
ROA not before:           Wed 03 Apr 2024 21:49:19 +0000
ROA not after:            Wed 02 Apr 2025 21:54:19 +0000
asID:                     52772
IP address blocks:        177.39.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f9:53:ce:b7:0d:71:42:96:42:3c:e6:b9:03:9f:d9:59:b7:59:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
        Validity
            Not Before: Apr  3 21:49:19 2024 GMT
            Not After : Apr  2 21:54:19 2025 GMT
        Subject: CN=40F182538EB288B87F95DBC67DF707DEDDE149F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2a:42:ac:41:6d:e2:bd:1a:ea:2a:b7:ab:43:
                    e4:01:45:19:2c:85:d6:31:a3:d9:c0:ea:7b:be:63:
                    78:51:da:96:7c:00:b0:ef:a6:62:64:c8:da:09:dc:
                    85:85:23:a0:63:74:5f:96:49:3c:53:dc:76:62:e9:
                    76:69:86:cd:3a:66:f6:a9:19:a0:14:01:fd:44:fb:
                    7f:16:7f:27:56:04:3e:f7:d9:17:82:94:5b:58:fa:
                    74:40:7e:bc:63:e3:6f:16:b3:5a:7d:90:c9:71:0d:
                    a7:8e:f2:86:c7:85:1c:0e:27:55:6b:aa:a0:81:8e:
                    59:05:3e:a1:9a:68:ce:a7:21:6e:16:b0:f8:39:46:
                    a4:1a:70:9b:10:91:4c:b9:7c:a9:e2:8c:6f:86:81:
                    94:f0:fa:38:27:f8:ab:da:81:ab:b8:26:6d:62:32:
                    0c:d7:71:9b:67:ca:23:69:9e:2d:06:02:cb:b6:c8:
                    53:d0:11:8c:80:a4:09:f2:0e:42:80:9b:5a:bd:21:
                    d4:4e:6b:1f:f7:cc:bf:6b:f9:c0:df:7d:80:29:39:
                    26:a4:24:47:ba:c1:ce:55:c9:ad:82:51:d0:89:80:
                    4b:2a:09:44:51:bd:1b:5b:1f:82:d4:7e:b1:18:35:
                    50:97:4a:66:da:87:a4:b6:df:3e:eb:b5:40:37:2d:
                    cb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F1:82:53:8E:B2:88:B8:7F:95:DB:C6:7D:F7:07:DE:DD:E1:49:F3
            X509v3 Authority Key Identifier:
                keyid:2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/3137372e33392e3135382e302f32342d3234203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:3e:a9:40:8e:8f:dd:6e:fc:2c:d6:dc:e9:c6:6b:04:3b:32:
         e9:a4:3f:5d:c0:ed:46:37:74:09:c5:e4:4f:14:b4:83:28:f5:
         2d:23:80:09:66:46:18:87:b8:cb:63:c4:de:8a:a4:87:b3:fd:
         76:8c:ef:13:3d:f9:84:b4:57:d9:ab:fd:4e:af:6a:61:83:66:
         85:1b:47:ea:29:1b:04:1f:88:96:cf:f3:4d:c1:cd:1d:82:a2:
         f6:e9:c3:c2:e8:ad:01:6c:0a:a6:70:aa:ca:2f:0f:e0:2a:0e:
         56:da:c3:f3:63:6f:93:40:4a:4d:ad:10:d9:24:1e:25:9b:a5:
         f3:fa:00:b5:c7:90:a7:b8:f5:9a:04:f9:61:65:fe:e9:79:75:
         65:e5:01:bc:3e:f9:72:47:24:2e:ff:78:1d:5a:83:5d:fb:30:
         d1:07:6c:43:d5:1a:32:a7:09:dd:3b:3c:ab:30:f5:79:0f:97:
         60:38:a0:71:a3:79:22:ca:4d:b5:d3:b4:c3:b9:73:56:86:c0:
         4c:37:d5:8a:92:47:23:db:80:29:a1:a0:fe:8a:f7:dd:0e:59:
         32:59:19:39:b3:a6:90:41:de:ac:22:1f:58:d3:ac:da:00:f6:
         d1:cc:81:d2:d5:c1:24:4c:52:92:40:10:fe:85:3f:e8:d9:30:
         db:75:a2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 01:37:21 2024 by rpki-client on console-fra.rpki-client.org