Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e3136302e302f31392d3139203d3e203238353733.roa
File:                     3137372e33322e3136302e302f31392d3139203d3e203238353733.roa (raw, json)
Hash identifier:          YArhBMre43U3mY51nMFGmzB/aw704JC7Iu52lS7t1kI=
Subject key identifier:   66:EF:89:97:E3:DA:49:E2:8D:44:EA:C5:04:92:30:1F:9D:97:53:CD
Certificate issuer:       /CN=2910A07ED49C655EB579592A3880C336E6AB83C0
Certificate serial:       05688003C1CE2A17FEC489CA973419D16CD46482
Authority key identifier: 29:10:A0:7E:D4:9C:65:5E:B5:79:59:2A:38:80:C3:36:E6:AB:83:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2910A07ED49C655EB579592A3880C336E6AB83C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e3136302e302f31392d3139203d3e203238353733.roa
Signing time:             Wed 18 May 2022 18:58:40 +0000
ROA not before:           Wed 18 May 2022 18:53:40 +0000
ROA not after:            Wed 17 May 2023 18:58:40 +0000
asID:                     28573
IP address blocks:        177.32.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:68:80:03:c1:ce:2a:17:fe:c4:89:ca:97:34:19:d1:6c:d4:64:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2910A07ED49C655EB579592A3880C336E6AB83C0
        Validity
            Not Before: May 18 18:53:40 2022 GMT
            Not After : May 17 18:58:40 2023 GMT
        Subject: CN=3082010A0282010100ACB4B7B2FE2DD3844C6FDD84652B44E7B0E9B486DAFDD8E80325CA2B341224E57CDB714B6A61C3848D44BE26C74BA273571FE2BC701196D69682782DB6B2E4C9E1C20BB5D090CED24387B26005D54A3E29EB34795DDF3378852B94AB14BDA11DAAF4403FC486452A8F197AFCAD61DB3B14A1C38D0D2F6A15291291A00D63DD859CA6B570D8493491F17D82504C87852824D6A8764794B03609500B1856F8F0EDA8140B0E7D62E6D7A92672FE3FD34823BC9799272E99D9BC22ABF8DA187B89B7CD332F1C3583DCA877F1FCC0CA8155D09DA8477F3DEBADBAA41E59B6546F8AFC3AB951D6F432BDF5080445A9D6D1D0E2E58C361AB12C9EF7F9589B9746C5FA730203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:b7:b2:fe:2d:d3:84:4c:6f:dd:84:65:2b:
                    44:e7:b0:e9:b4:86:da:fd:d8:e8:03:25:ca:2b:34:
                    12:24:e5:7c:db:71:4b:6a:61:c3:84:8d:44:be:26:
                    c7:4b:a2:73:57:1f:e2:bc:70:11:96:d6:96:82:78:
                    2d:b6:b2:e4:c9:e1:c2:0b:b5:d0:90:ce:d2:43:87:
                    b2:60:05:d5:4a:3e:29:eb:34:79:5d:df:33:78:85:
                    2b:94:ab:14:bd:a1:1d:aa:f4:40:3f:c4:86:45:2a:
                    8f:19:7a:fc:ad:61:db:3b:14:a1:c3:8d:0d:2f:6a:
                    15:29:12:91:a0:0d:63:dd:85:9c:a6:b5:70:d8:49:
                    34:91:f1:7d:82:50:4c:87:85:28:24:d6:a8:76:47:
                    94:b0:36:09:50:0b:18:56:f8:f0:ed:a8:14:0b:0e:
                    7d:62:e6:d7:a9:26:72:fe:3f:d3:48:23:bc:97:99:
                    27:2e:99:d9:bc:22:ab:f8:da:18:7b:89:b7:cd:33:
                    2f:1c:35:83:dc:a8:77:f1:fc:c0:ca:81:55:d0:9d:
                    a8:47:7f:3d:eb:ad:ba:a4:1e:59:b6:54:6f:8a:fc:
                    3a:b9:51:d6:f4:32:bd:f5:08:04:45:a9:d6:d1:d0:
                    e2:e5:8c:36:1a:b1:2c:9e:f7:f9:58:9b:97:46:c5:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EF:89:97:E3:DA:49:E2:8D:44:EA:C5:04:92:30:1F:9D:97:53:CD
            X509v3 Authority Key Identifier:
                keyid:29:10:A0:7E:D4:9C:65:5E:B5:79:59:2A:38:80:C3:36:E6:AB:83:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/2910A07ED49C655EB579592A3880C336E6AB83C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2910A07ED49C655EB579592A3880C336E6AB83C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e3136302e302f31392d3139203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.32.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         34:71:91:34:70:2c:25:a0:36:bb:03:c8:fe:e5:8d:a1:3a:e4:
         7e:8c:f1:13:d9:01:bd:d0:a0:e4:89:df:fd:3e:6d:2f:97:e1:
         3c:b3:31:10:5a:fe:78:df:a9:7d:4f:47:c2:e7:55:db:88:ca:
         4a:a2:b6:79:37:13:37:23:f2:f3:fc:db:e5:9c:f2:5e:ee:5f:
         98:97:1a:7d:b0:a7:2e:fb:6a:4c:1f:33:00:40:37:a9:0f:12:
         4e:47:e3:31:7c:ff:dc:13:8a:69:93:c6:35:bd:3c:ce:8c:d3:
         c8:34:d3:b3:01:b5:7f:01:cd:e0:2f:6b:47:f3:5e:91:36:52:
         25:bb:ee:fb:16:7c:90:5f:0a:0e:61:6f:57:05:65:f0:2e:72:
         06:e2:51:6e:45:22:9c:12:f7:6b:6f:c1:24:da:21:56:bb:e4:
         9c:0d:df:a7:0e:32:02:99:5b:cb:75:63:20:00:b5:72:48:cf:
         d4:3a:53:75:b9:cc:e8:b7:76:d5:a2:6e:35:e3:91:45:b3:e3:
         f0:99:35:05:76:b8:08:d6:83:d3:52:d3:b6:ce:d5:fa:fa:45:
         71:b1:a8:67:a0:a5:19:93:f3:ca:ef:2b:cc:64:1d:da:79:28:
         71:09:d3:8a:fd:be:17:cd:2d:f6:97:17:12:f5:d1:c2:47:90:
         a3:e3:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org