Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3231322e302f32322d3232203d3e203532393635.roa
File:                     3137372e37322e3231322e302f32322d3232203d3e203532393635.roa (raw, json)
Hash identifier:          JdRnOxV+OK0ZSdFAdBEcI662BIfsyJZ8q50clnt2cW4=
Subject key identifier:   1D:61:F5:78:9B:A6:94:BC:BB:F6:F4:55:F4:0A:B8:A1:15:EB:22:69
Certificate issuer:       /CN=3235A266D447CA3B72A35513BA9761F5805F23E2
Certificate serial:       46A931D038EDD560D4531465794041ACD53F1971
Authority key identifier: 32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3231322e302f32322d3232203d3e203532393635.roa
Signing time:             Fri 10 Mar 2023 11:04:23 +0000
ROA not before:           Fri 10 Mar 2023 10:59:23 +0000
ROA not after:            Fri 08 Mar 2024 11:04:23 +0000
asID:                     52965
IP address blocks:        177.72.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a9:31:d0:38:ed:d5:60:d4:53:14:65:79:40:41:ac:d5:3f:19:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3235A266D447CA3B72A35513BA9761F5805F23E2
        Validity
            Not Before: Mar 10 10:59:23 2023 GMT
            Not After : Mar  8 11:04:23 2024 GMT
        Subject: CN=1D61F5789BA694BCBBF6F455F40AB8A115EB2269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:73:ba:8d:97:44:6f:1c:83:5b:4a:87:24:
                    8b:69:5a:5c:ad:aa:b4:3d:d6:f9:da:db:50:e1:4c:
                    09:c2:79:95:9f:95:cb:aa:f1:69:e6:70:93:b9:4b:
                    f7:1b:b0:45:75:bc:71:06:f1:24:3b:ef:62:83:cf:
                    99:50:20:b4:ad:5d:53:95:0b:5d:be:9e:9c:08:a8:
                    e6:58:10:2f:6a:6b:70:71:4d:3d:18:27:d3:76:8a:
                    46:45:56:ce:c0:b7:16:1a:e8:8e:00:02:35:9e:d3:
                    9a:71:3d:32:5c:ff:f4:18:21:ce:ef:f6:28:69:32:
                    9d:b4:77:0b:38:94:f1:0c:48:de:67:14:89:68:56:
                    a9:f3:47:ae:6b:04:4f:86:7a:32:cd:03:b9:d1:33:
                    b0:e0:9b:31:7e:e9:7c:15:ea:88:19:6d:a5:e6:42:
                    ec:45:8f:b4:59:4b:4e:57:95:89:e6:d6:d7:2b:86:
                    2d:6b:2d:52:d5:a1:57:a3:53:87:f8:be:50:04:16:
                    93:0d:d6:ae:c5:6b:9c:11:b9:de:96:c3:84:bf:ee:
                    8e:cf:f4:fc:ec:ba:f1:61:fa:07:6d:8f:58:cd:af:
                    6e:ff:ee:e1:d4:8f:a0:7d:ce:11:45:67:a4:31:93:
                    3f:a7:21:ac:3d:a0:4e:0e:f8:0a:4e:bd:71:9d:aa:
                    83:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:61:F5:78:9B:A6:94:BC:BB:F6:F4:55:F4:0A:B8:A1:15:EB:22:69
            X509v3 Authority Key Identifier:
                keyid:32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3235A266D447CA3B72A35513BA9761F5805F23E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3231322e302f32322d3232203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:ac:49:8b:d4:db:dd:27:50:b0:e8:13:7f:c8:e4:3b:3c:4a:
         5b:9c:17:43:c2:14:92:6f:91:f7:55:fe:54:79:c2:46:5c:5d:
         81:28:85:9d:6a:e9:63:1c:cf:84:1d:6c:e7:95:c5:b4:f4:60:
         16:a4:3c:ab:9d:a9:8b:a8:68:72:57:00:e7:e8:f9:b4:84:02:
         4b:f9:e9:6c:1f:e3:e0:ad:76:25:4e:78:51:64:8c:68:71:6f:
         24:5a:ac:4a:37:94:7f:63:ae:f0:5e:3e:5b:88:95:ef:05:87:
         00:fe:3d:c0:93:37:d3:4b:cd:7e:71:1c:77:05:b2:8a:b1:5c:
         f1:11:05:36:1d:46:c0:71:9e:4c:ab:64:a6:0a:d5:e2:0a:1a:
         e3:f0:0f:bd:63:ac:0c:85:45:56:0c:a0:2b:5d:66:a6:a4:fa:
         28:00:dc:57:92:da:13:78:2a:73:2e:c2:75:c1:09:7e:b0:f2:
         07:f2:97:2c:ee:de:9a:9b:46:b4:cb:38:c9:96:e3:8d:99:0c:
         a7:63:c6:79:1a:ba:75:e9:83:86:c9:2e:36:72:d4:97:be:4c:
         2e:a9:47:b4:8f:5e:44:c6:4d:18:5b:19:38:44:55:83:08:55:
         bd:e4:2d:3d:98:79:32:5c:cb:1a:fe:4a:89:a7:66:e8:36:c4:
         a5:b5:10:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org