Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e33302e302f32332d3233203d3e20323730353934.roa
File:                     3137372e33372e33302e302f32332d3233203d3e20323730353934.roa (raw, json)
Hash identifier:          QthYvSGWw3ZYfhiUSgIiWa+Kzi9HCKR+Y7OV2aIG/mg=
Subject key identifier:   D1:9F:54:AD:39:BA:F0:54:50:33:AA:E1:2A:AB:5C:6B:83:1D:99:1B
Certificate issuer:       /CN=FBCE40180F6E820F31920824D82B285CF0E32992
Certificate serial:       529F1F04B43A14537BF23F24846D3CF05C849C21
Authority key identifier: FB:CE:40:18:0F:6E:82:0F:31:92:08:24:D8:2B:28:5C:F0:E3:29:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBCE40180F6E820F31920824D82B285CF0E32992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e33302e302f32332d3233203d3e20323730353934.roa
Signing time:             Wed 17 May 2023 14:29:21 +0000
ROA not before:           Wed 17 May 2023 14:24:21 +0000
ROA not after:            Wed 15 May 2024 14:29:21 +0000
asID:                     270594
IP address blocks:        177.37.30.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9f:1f:04:b4:3a:14:53:7b:f2:3f:24:84:6d:3c:f0:5c:84:9c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBCE40180F6E820F31920824D82B285CF0E32992
        Validity
            Not Before: May 17 14:24:21 2023 GMT
            Not After : May 15 14:29:21 2024 GMT
        Subject: CN=D19F54AD39BAF0545033AAE12AAB5C6B831D991B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:0d:3a:01:84:f2:18:09:8f:9f:18:9b:6f:
                    ec:45:eb:e8:5e:70:ca:1f:da:80:ce:3c:3e:8c:54:
                    3b:b6:74:4c:39:2a:b5:7d:72:64:37:e8:b2:d2:70:
                    8b:6e:bb:5d:c3:a7:0f:b1:c7:58:c7:e2:27:5c:a6:
                    86:c3:c7:74:3e:c6:2e:b9:f3:f1:82:ec:31:e4:0a:
                    40:16:0d:5e:1a:2f:0d:6f:d0:93:41:af:3e:d3:96:
                    f4:66:ac:5c:cf:90:14:f8:6f:11:42:09:c3:5c:be:
                    65:6f:67:d8:9c:d6:bb:a8:1b:be:4f:63:4d:c7:eb:
                    b7:8c:51:b7:b1:87:c1:41:df:62:97:29:b7:17:4b:
                    b3:4c:3c:b7:2d:19:c7:32:50:32:fb:3e:3b:ba:17:
                    ea:41:92:75:1f:ca:bd:0e:1e:39:2b:04:03:b6:69:
                    ae:55:7a:9d:f6:b6:42:59:1a:f5:65:ac:4d:8c:f3:
                    47:86:11:6c:a3:5d:48:0e:90:a8:8e:4d:de:46:ca:
                    7d:ff:8d:53:1d:c4:8d:72:f5:eb:58:c7:75:0f:ab:
                    a7:79:e8:78:a0:5a:f5:6d:53:d4:27:5f:93:d2:47:
                    3d:13:fc:99:b5:15:28:9b:ab:fc:f9:58:68:f6:8f:
                    7d:90:d8:48:df:67:85:80:6c:a0:a5:98:f9:13:c5:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9F:54:AD:39:BA:F0:54:50:33:AA:E1:2A:AB:5C:6B:83:1D:99:1B
            X509v3 Authority Key Identifier:
                keyid:FB:CE:40:18:0F:6E:82:0F:31:92:08:24:D8:2B:28:5C:F0:E3:29:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/FBCE40180F6E820F31920824D82B285CF0E32992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBCE40180F6E820F31920824D82B285CF0E32992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e33302e302f32332d3233203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:f4:94:4e:57:f0:a4:71:ae:fd:f5:91:90:8b:a3:0e:c6:94:
         0d:4c:5f:a1:e2:68:ca:7c:2e:20:08:9b:e8:3c:b7:c5:f4:2f:
         52:5b:da:33:65:cd:df:db:5d:08:ff:4e:46:45:7d:34:d4:48:
         94:fd:10:0b:8b:4a:98:45:df:d9:5c:32:91:fe:fa:de:77:a9:
         d4:14:4c:28:66:a2:0a:45:ee:02:67:c6:87:f4:30:5f:f2:3a:
         36:ad:f3:7a:5a:92:3e:95:be:2d:4e:e1:a2:4b:8a:6f:8b:40:
         29:2a:37:43:15:ec:fc:43:15:81:2e:e6:14:f1:08:ee:8a:5b:
         a8:02:a5:b1:e7:c4:d5:76:cb:da:24:c5:41:9a:de:65:db:58:
         e6:9f:a8:9e:7b:31:09:07:f4:21:2d:78:0d:e9:bb:0d:46:83:
         b1:d1:6c:38:2c:cb:06:63:4a:37:84:4a:56:18:d0:a8:52:fe:
         08:28:5f:01:33:6c:fa:25:bc:d3:1b:7a:36:72:c4:66:8f:50:
         66:97:71:81:00:60:e2:8b:cd:c1:af:cf:10:22:4c:28:e5:b5:
         28:5e:1e:b0:d5:be:39:fb:87:e8:13:51:7a:57:71:02:91:4b:
         be:99:8c:d4:55:65:09:28:0b:12:99:bd:02:04:a6:9d:4d:91:
         a0:0d:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org