Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e36342e302f31392d3139203d3e203238353733.roa
File:                     3137372e33322e36342e302f31392d3139203d3e203238353733.roa (raw, json)
Hash identifier:          LSvMVZkoagNgFTi3wWNhp6iGboI+i6aYCtBoaxkJXww=
Subject key identifier:   D9:DC:12:B0:31:1C:63:64:8A:50:A0:23:E2:47:09:ED:A7:53:59:FD
Certificate issuer:       /CN=2910A07ED49C655EB579592A3880C336E6AB83C0
Certificate serial:       7CCF87117705121125A428D17C91F79CA40D4135
Authority key identifier: 29:10:A0:7E:D4:9C:65:5E:B5:79:59:2A:38:80:C3:36:E6:AB:83:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2910A07ED49C655EB579592A3880C336E6AB83C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e36342e302f31392d3139203d3e203238353733.roa
Signing time:             Wed 18 May 2022 18:58:25 +0000
ROA not before:           Wed 18 May 2022 18:53:25 +0000
ROA not after:            Wed 17 May 2023 18:58:25 +0000
asID:                     28573
IP address blocks:        177.32.64.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cf:87:11:77:05:12:11:25:a4:28:d1:7c:91:f7:9c:a4:0d:41:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2910A07ED49C655EB579592A3880C336E6AB83C0
        Validity
            Not Before: May 18 18:53:25 2022 GMT
            Not After : May 17 18:58:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:71:fa:5e:17:5a:c7:35:09:5b:2b:00:84:
                    13:2d:6f:6a:37:e5:2e:de:4c:7c:67:43:10:60:41:
                    d6:61:c6:ab:cb:7a:77:71:35:02:07:b1:4e:0b:77:
                    3f:7e:fb:bd:5e:17:8c:12:08:20:01:de:88:8d:32:
                    5d:56:10:44:4e:ea:e6:60:7f:bd:22:e2:17:8a:6d:
                    12:2b:11:da:7c:95:b9:37:f7:f2:28:f4:18:d4:ce:
                    45:4e:f3:bc:2e:a0:c7:2d:b1:65:a2:0d:4b:1a:77:
                    20:20:0f:0b:11:55:31:1f:67:d2:b0:30:7a:3a:67:
                    3d:f6:f6:48:20:b8:3d:2c:bb:9c:1e:df:3d:a1:66:
                    d6:86:0e:75:39:43:0b:68:95:32:af:58:b5:71:14:
                    fe:c2:66:a9:33:74:30:9a:64:0a:86:1e:49:84:d0:
                    ce:3b:24:c9:2d:94:25:fd:55:f1:e8:24:aa:7d:aa:
                    a5:3a:49:3d:0d:1e:fd:f2:d3:00:f0:e3:8b:9b:f8:
                    6c:50:d2:09:5a:fb:9b:36:6f:43:7e:10:98:64:21:
                    84:10:45:c9:1d:aa:81:65:75:0a:95:9e:c1:3b:de:
                    69:a4:eb:2f:f7:df:90:04:9a:fa:f7:2c:c0:f8:ef:
                    1e:33:16:aa:26:4d:e0:e3:66:ff:d6:3a:4e:98:ef:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DC:12:B0:31:1C:63:64:8A:50:A0:23:E2:47:09:ED:A7:53:59:FD
            X509v3 Authority Key Identifier:
                keyid:29:10:A0:7E:D4:9C:65:5E:B5:79:59:2A:38:80:C3:36:E6:AB:83:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/2910A07ED49C655EB579592A3880C336E6AB83C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2910A07ED49C655EB579592A3880C336E6AB83C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbLHQw3VAXfBrqfeVGBSBbwr7qDVThq7W1FuSP2rJB2K/0/3137372e33322e36342e302f31392d3139203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.32.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:45:1c:4c:6d:44:ed:0a:30:99:14:b9:b9:46:2a:19:5c:fb:
         ca:73:b4:0e:ce:4f:ae:62:6f:b0:74:f9:5b:1d:c2:6a:5e:1a:
         c0:9a:f4:2d:40:99:84:e0:4e:78:a8:a6:b6:64:dd:d6:81:1a:
         ff:57:06:fc:32:5e:49:3d:43:ca:de:9c:15:5e:f2:d5:a4:11:
         cf:e6:bb:64:44:56:a1:07:07:18:57:01:29:ca:a5:29:67:97:
         b4:60:3a:99:40:12:1b:27:40:cf:c9:a0:ef:f4:e8:b7:25:1a:
         7b:cf:66:dc:3e:bf:c4:e2:da:58:c3:67:50:88:2f:b8:bd:93:
         d7:74:1f:6b:4b:f0:ac:b0:1c:5a:d0:07:5c:74:30:00:17:fd:
         35:12:1f:25:a8:05:0c:4c:b4:f6:fa:13:85:ee:38:be:c8:8f:
         50:21:b5:92:ce:e9:38:46:f7:b6:8e:f7:bc:5f:9f:cc:11:9d:
         4d:51:23:17:02:33:2d:0e:2a:74:24:39:eb:11:78:36:94:4a:
         7b:58:36:a0:0f:0b:5f:ce:7c:bb:30:23:d2:9c:c9:ac:9d:37:
         33:71:f8:dd:3e:0c:49:6f:37:7a:f2:0f:61:1b:53:fa:72:92:
         bf:ee:b5:83:71:37:f6:18:52:31:3e:0b:f9:80:f3:06:92:9d:
         74:3f:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org