Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e33322e302f31392d3139203d3e203238353733.roa
File:                     3137372e33322e33322e302f31392d3139203d3e203238353733.roa (raw, json)
Hash identifier:          C+FfqWsERC2Hxh9Xt+AnhxSouvfOkSqUlWCR9Cq0yfQ=
Subject key identifier:   77:6B:B4:28:80:B1:88:3A:48:4B:72:28:4D:C6:EA:81:A0:54:07:24
Certificate issuer:       /CN=2910A07ED49C655EB579592A3880C336E6AB83C0
Certificate serial:       4E8F41F9FDA8C782BE385E7B358C4555E0E368FE
Authority key identifier: 29:10:A0:7E:D4:9C:65:5E:B5:79:59:2A:38:80:C3:36:E6:AB:83:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2910A07ED49C655EB579592A3880C336E6AB83C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e33322e302f31392d3139203d3e203238353733.roa
Signing time:             Wed 18 May 2022 18:58:22 +0000
ROA not before:           Wed 18 May 2022 18:53:22 +0000
ROA not after:            Wed 17 May 2023 18:58:22 +0000
asID:                     28573
IP address blocks:        177.32.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8f:41:f9:fd:a8:c7:82:be:38:5e:7b:35:8c:45:55:e0:e3:68:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2910A07ED49C655EB579592A3880C336E6AB83C0
        Validity
            Not Before: May 18 18:53:22 2022 GMT
            Not After : May 17 18:58:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:9e:02:a6:39:9d:df:ea:41:89:4e:72:fd:
                    8f:ec:39:0f:5f:31:76:5f:28:bc:b7:cd:5b:4b:a9:
                    64:a7:5e:4e:03:44:f2:fb:ab:27:1d:3a:ac:85:b0:
                    19:a5:ea:8f:0d:1a:19:7c:54:01:64:5a:36:07:a2:
                    c2:45:a6:16:d5:8f:7e:51:a5:69:d9:1b:35:2a:09:
                    8a:92:43:33:70:d0:cd:5c:0b:23:d8:15:1e:7b:bc:
                    43:eb:78:6a:9f:bc:c9:a6:bc:c2:44:f7:d5:6e:ee:
                    f1:c8:c1:ea:e5:86:14:46:87:ac:f2:bb:cc:f7:f4:
                    03:89:bd:27:7d:06:16:05:76:98:5a:32:8c:e2:e6:
                    74:1b:94:5c:9a:c1:3a:10:71:00:f3:99:59:c1:52:
                    66:65:84:44:a7:23:d0:d3:a0:ec:0d:cd:bd:67:15:
                    1f:7e:fd:21:a7:4e:18:8c:62:8a:db:60:3a:27:3f:
                    3c:fe:ed:bd:1b:55:e6:df:36:74:a2:11:30:52:f4:
                    f3:05:d4:8e:2b:a9:6b:ad:2c:e8:26:84:96:91:0c:
                    49:3c:5c:26:eb:0b:07:2a:7d:c1:38:df:50:d5:62:
                    9b:54:e7:ae:b4:cc:0c:ec:8a:3f:1c:17:b5:07:05:
                    87:13:bb:5c:d5:86:4d:cf:e8:f4:31:67:1f:11:fc:
                    e6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6B:B4:28:80:B1:88:3A:48:4B:72:28:4D:C6:EA:81:A0:54:07:24
            X509v3 Authority Key Identifier:
                keyid:29:10:A0:7E:D4:9C:65:5E:B5:79:59:2A:38:80:C3:36:E6:AB:83:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/2910A07ED49C655EB579592A3880C336E6AB83C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2910A07ED49C655EB579592A3880C336E6AB83C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e33322e302f31392d3139203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.32.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:b6:28:12:2f:2d:23:ae:89:d2:73:72:06:7f:23:27:d5:a6:
         c2:5a:13:c0:e3:10:af:49:45:18:7f:79:9b:c6:35:8e:7f:84:
         0e:98:59:a3:e2:23:f3:ed:c1:9f:29:33:0b:a8:bc:9e:46:4c:
         52:2d:00:d3:df:46:ae:7c:17:5d:dc:92:2e:e2:76:81:1d:70:
         58:66:d5:74:99:14:23:96:13:07:13:3a:f0:22:7a:e4:e8:54:
         60:b7:3e:bc:63:e6:41:c0:92:e1:a9:4c:31:ed:88:8d:0c:50:
         a2:f4:71:31:07:f6:67:07:cf:48:0f:f2:94:18:61:98:08:ec:
         f5:83:a8:b1:f4:65:13:9a:6c:7a:ec:b2:eb:9e:ec:84:c4:ca:
         6a:97:27:c2:f5:30:7d:c4:7a:a2:08:3e:f9:63:4e:43:e3:b8:
         82:de:65:65:22:fd:07:cf:63:98:02:84:cb:e8:19:80:34:5a:
         5e:e8:83:8b:b0:bc:98:c4:0e:4b:9d:d4:71:b3:67:df:84:0f:
         77:8b:1f:04:0b:e2:4c:9d:7c:1b:d7:05:52:0e:37:4e:07:28:
         0f:75:bc:f6:af:cb:84:b9:8c:60:59:e8:80:5b:c7:0f:e2:a7:
         2e:c0:5c:f4:e5:c6:6b:ed:fd:c1:27:6c:d8:16:db:dd:51:15:
         9f:51:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org