Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e3232312e33322e302f32302d3234203d3e203532393635.roa
File:                     3137372e3232312e33322e302f32302d3234203d3e203532393635.roa (raw, json)
Hash identifier:          kfGs8+dKAsSfpRco2lXjx2Yy/ouRNrzjHNdBHXylxdc=
Subject key identifier:   96:4E:B4:F8:BF:0F:D5:B4:A7:48:4B:9C:A8:6A:E6:A1:1C:E7:AA:15
Certificate issuer:       /CN=3235A266D447CA3B72A35513BA9761F5805F23E2
Certificate serial:       14DAB28890D58355F8020CCE384774198252F78A
Authority key identifier: 32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e3232312e33322e302f32302d3234203d3e203532393635.roa
Signing time:             Thu 06 Oct 2022 19:09:08 +0000
ROA not before:           Thu 06 Oct 2022 19:04:08 +0000
ROA not after:            Thu 05 Oct 2023 19:09:08 +0000
asID:                     52965
IP address blocks:        177.221.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:da:b2:88:90:d5:83:55:f8:02:0c:ce:38:47:74:19:82:52:f7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3235A266D447CA3B72A35513BA9761F5805F23E2
        Validity
            Not Before: Oct  6 19:04:08 2022 GMT
            Not After : Oct  5 19:09:08 2023 GMT
        Subject: CN=964EB4F8BF0FD5B4A7484B9CA86AE6A11CE7AA15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:47:41:ce:88:c4:db:61:4a:dd:b1:b6:b7:55:
                    bd:15:18:a1:78:bf:7f:4e:dc:65:d7:be:85:63:5d:
                    42:b6:6a:8f:51:3d:fd:7b:7a:c9:7e:0f:cb:64:fa:
                    8b:9b:c6:99:74:cd:5a:2c:4a:04:7e:4a:52:5a:ec:
                    f4:da:9c:4a:11:82:8a:de:e9:3c:56:21:02:fc:45:
                    c0:fd:b5:f0:52:96:76:c1:2c:d3:04:f6:b8:6d:e6:
                    31:64:9b:a0:df:37:2e:5c:40:92:47:b0:c2:d3:e6:
                    06:3b:88:2f:1c:15:1b:6c:47:49:21:bb:70:83:3d:
                    6b:9a:0b:54:13:b8:b3:0e:26:c3:f0:02:ec:8f:d9:
                    41:00:70:ef:43:29:1e:5c:7d:82:5a:15:96:33:96:
                    5b:e3:38:ed:54:6d:d4:48:3f:c4:ff:e5:95:f2:fc:
                    4d:de:18:ac:c5:7c:eb:a7:a0:f7:f1:55:f2:5b:cf:
                    a6:e5:e6:b1:03:2c:88:8d:13:6c:e6:cc:53:86:b8:
                    8b:ca:24:3b:39:63:37:bf:ca:65:5f:92:98:bd:a6:
                    ef:a6:37:03:6b:59:e9:47:e6:91:cc:03:06:ba:92:
                    80:75:7a:23:c4:23:9c:7f:f7:dc:50:8a:02:ce:71:
                    84:b1:e2:6b:bf:0c:e4:83:6e:7a:37:b1:ff:31:75:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4E:B4:F8:BF:0F:D5:B4:A7:48:4B:9C:A8:6A:E6:A1:1C:E7:AA:15
            X509v3 Authority Key Identifier:
                keyid:32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3235A266D447CA3B72A35513BA9761F5805F23E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e3232312e33322e302f32302d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:03:77:1e:c5:36:fc:21:bb:35:f5:04:39:c1:cf:86:f6:3f:
         60:e0:93:e7:dc:a5:f4:18:b2:da:99:4b:3c:c8:11:02:3f:a1:
         6e:fc:b5:b7:d3:cb:da:91:89:ff:cb:3e:2c:79:2f:50:7f:c5:
         69:54:5f:f1:8f:fb:5e:4c:b6:21:67:ea:37:4f:3a:03:11:18:
         44:c6:23:5c:a3:a9:a8:4f:8a:0d:2c:13:2f:66:63:ea:99:2f:
         ff:64:ec:70:89:f4:36:6a:52:da:45:f5:9b:e3:57:24:c0:46:
         3d:2b:1b:e7:89:dd:4a:dc:37:3f:f3:9b:ec:bf:05:8d:bc:dd:
         da:d0:20:ee:7a:1d:94:cb:53:22:42:9e:0e:9c:2f:0b:f9:9d:
         fd:d0:6c:da:0b:b7:c4:47:ee:7b:fc:55:3e:31:6d:a2:06:8c:
         12:af:c5:b8:c5:f1:2e:60:9f:c0:4e:03:8f:4a:ce:73:b8:b1:
         5e:b7:8b:da:3d:24:ed:1e:ea:93:84:66:e8:fe:e8:b4:0f:46:
         16:2a:2b:09:26:05:50:a9:c6:05:f5:79:ca:8a:3e:1b:6a:b4:
         d1:52:b7:46:96:fb:f2:b1:36:20:e4:70:24:ca:b4:04:91:65:
         a5:75:d4:e2:88:f2:43:41:12:84:19:11:f7:e7:cc:44:6a:39:
         3b:ae:a6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org