Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3130382e302f32322d3232203d3e20323730353935.roa
File:                     3137372e3135322e3130382e302f32322d3232203d3e20323730353935.roa (raw, json)
Hash identifier:          Jt8T93DcZSxanOO0/oxDdKKBH0UdAIndCItusdFw3y8=
Subject key identifier:   4D:5D:3D:77:3A:DB:01:95:64:51:F7:9B:50:CB:5A:7C:49:44:01:FE
Certificate issuer:       /CN=2A3395C823AA389CE6DCA952BCF1B97769252F8F
Certificate serial:       145D526EE84DA7EED47EE3B108957848EA80F4B0
Authority key identifier: 2A:33:95:C8:23:AA:38:9C:E6:DC:A9:52:BC:F1:B9:77:69:25:2F:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A3395C823AA389CE6DCA952BCF1B97769252F8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3130382e302f32322d3232203d3e20323730353935.roa
Signing time:             Sat 04 Jun 2022 12:00:01 +0000
ROA not before:           Sat 04 Jun 2022 11:55:01 +0000
ROA not after:            Sat 03 Jun 2023 12:00:01 +0000
asID:                     270595
IP address blocks:        177.152.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5d:52:6e:e8:4d:a7:ee:d4:7e:e3:b1:08:95:78:48:ea:80:f4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3395C823AA389CE6DCA952BCF1B97769252F8F
        Validity
            Not Before: Jun  4 11:55:01 2022 GMT
            Not After : Jun  3 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:c1:9b:d3:c9:25:79:15:ae:ce:a1:98:fd:
                    7d:b2:29:cb:3d:16:4f:16:eb:06:95:e5:8a:84:f4:
                    42:c7:3c:55:15:40:79:95:97:f1:19:80:33:27:dc:
                    18:1e:db:38:a3:c5:49:27:45:54:9c:d4:b1:22:94:
                    5b:be:4f:40:f3:8d:67:a2:29:99:08:59:e1:f5:a3:
                    f6:07:7a:d3:bc:ce:c6:ef:12:41:c9:3a:68:e7:67:
                    c5:d0:a4:da:37:2a:8c:38:a9:6e:b7:18:ac:6d:1b:
                    b2:f7:5c:02:75:6b:65:dc:09:cc:eb:07:1c:b4:6a:
                    a9:b5:b1:48:3a:17:9a:fa:6b:69:6e:5b:42:0a:f9:
                    31:ba:0b:4f:33:af:ea:c5:4a:fc:a7:fb:e9:df:c9:
                    26:59:20:34:fd:58:76:0c:cb:61:14:9f:e3:bc:29:
                    07:cd:7d:d1:07:dc:f8:8d:3f:20:36:33:90:b1:e7:
                    84:17:51:a9:8e:ea:53:36:31:2e:f5:1e:f2:f1:e1:
                    7b:cc:99:4c:73:d0:88:fa:eb:bd:91:1d:63:7d:c3:
                    f6:0a:dd:c0:ab:3b:82:4e:58:eb:b3:db:19:45:0c:
                    2d:c4:d7:18:b8:c5:84:b0:22:2a:1b:29:ff:ae:32:
                    0d:8c:38:84:1a:d4:a1:e8:66:d3:75:88:34:6f:0d:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5D:3D:77:3A:DB:01:95:64:51:F7:9B:50:CB:5A:7C:49:44:01:FE
            X509v3 Authority Key Identifier:
                keyid:2A:33:95:C8:23:AA:38:9C:E6:DC:A9:52:BC:F1:B9:77:69:25:2F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/2A3395C823AA389CE6DCA952BCF1B97769252F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A3395C823AA389CE6DCA952BCF1B97769252F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3130382e302f32322d3232203d3e20323730353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:1a:b8:43:fb:ca:7b:a9:6b:6b:e7:12:06:f9:95:3b:31:67:
         71:99:08:ae:d5:ae:d0:e1:4a:a5:3c:56:d9:2c:fe:d4:08:7d:
         48:80:40:c6:97:cf:61:29:5b:2a:24:03:be:64:09:73:99:5f:
         69:8a:54:8c:27:bf:fa:ba:a4:6c:05:f2:35:13:a1:f0:ff:f3:
         4e:80:a1:55:33:c3:bd:c7:39:85:c9:ae:9b:10:a1:6a:63:e5:
         f3:c0:a5:99:de:ba:39:08:fd:55:f5:dc:70:32:c2:8b:1a:c2:
         b5:b9:ae:01:b9:35:62:df:da:de:8d:69:f0:d9:ad:a7:c7:2b:
         55:72:43:a5:8b:66:8a:ca:4d:56:3b:e4:5a:48:ee:ad:e7:0a:
         e0:42:30:4b:99:2c:09:06:a6:a5:57:c1:61:25:95:94:98:8b:
         e2:98:cd:af:ea:c3:b6:66:eb:b5:ae:f7:6a:dd:a0:60:4e:75:
         65:91:81:af:31:6a:89:a7:62:eb:16:83:b4:f6:6d:eb:a5:0b:
         09:8a:18:00:3f:78:f7:57:0a:42:e5:c6:a2:23:b6:a2:26:9d:
         4e:2b:52:d4:0c:14:af:c8:b8:2e:e7:de:c8:b1:8d:bb:a1:af:
         30:5b:f1:36:c9:c5:b0:34:6c:8f:d0:a1:a6:03:72:cd:39:63:
         3a:a5:8c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org