Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138342e302f32342d3234203d3e203532373538.roa
File:                     3137372e33382e3138342e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          QSqZBMGs0acjAQQIQ7V8s1KsY8K2z4ulhrRtMpHl2us=
Subject key identifier:   1A:FB:FE:39:23:F9:27:9E:03:B3:67:D4:31:E9:59:57:F2:3B:20:5F
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       0A3E281CEA9D317E5F3E9A129C2A6C63B3E3036B
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138342e302f32342d3234203d3e203532373538.roa
Signing time:             Tue 12 Mar 2024 18:17:55 +0000
ROA not before:           Tue 12 Mar 2024 18:12:55 +0000
ROA not after:            Tue 11 Mar 2025 18:17:55 +0000
asID:                     52758
IP address blocks:        177.38.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3e:28:1c:ea:9d:31:7e:5f:3e:9a:12:9c:2a:6c:63:b3:e3:03:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar 12 18:12:55 2024 GMT
            Not After : Mar 11 18:17:55 2025 GMT
        Subject: CN=1AFBFE3923F9279E03B367D431E95957F23B205F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:c9:5d:06:30:70:24:d3:a1:72:c1:3f:1b:
                    9c:95:7c:37:74:9c:84:4f:8b:1d:a6:48:a3:91:15:
                    59:22:ce:c7:52:a0:98:2b:cc:46:d5:2d:9d:53:14:
                    fa:a7:5b:9b:12:01:4b:02:c6:90:0d:9f:a1:11:4b:
                    d1:35:5f:30:0f:69:83:c1:5f:6a:92:99:55:af:f7:
                    b0:4d:58:87:f7:91:74:c0:78:f8:06:18:42:58:55:
                    15:6c:a2:f5:b0:44:a4:55:c4:95:e4:cb:e1:01:df:
                    85:90:eb:5b:b3:8b:6a:c0:bb:0b:51:da:26:cd:80:
                    35:ab:87:f9:a2:23:2c:d1:33:91:9c:01:e7:67:1e:
                    34:73:4c:2d:b8:f8:ce:ce:20:ad:9b:19:8b:34:16:
                    4b:6d:61:51:93:7d:3c:8c:39:b5:b9:a0:0e:4a:d7:
                    c6:a4:cc:7d:ca:50:33:ac:a2:35:26:a9:3e:99:83:
                    57:86:a0:6c:30:62:23:12:e7:38:a5:2d:8f:45:85:
                    28:52:88:c9:8d:e3:b3:d5:c2:73:f8:23:72:f6:2a:
                    62:21:77:76:ac:23:8a:94:6a:fd:08:a4:a7:3f:da:
                    ac:2b:7b:b3:6e:21:39:01:80:9b:fc:f8:fe:3f:c0:
                    67:b3:94:89:53:8c:58:0e:18:eb:8b:eb:5c:37:89:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FB:FE:39:23:F9:27:9E:03:B3:67:D4:31:E9:59:57:F2:3B:20:5F
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138342e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:9e:70:20:6a:e8:88:79:00:f4:74:5d:ed:54:47:4e:bd:a1:
         09:d1:52:b0:30:6f:e4:40:51:7d:08:ee:04:fa:f6:2e:75:e3:
         77:28:dd:9a:0c:db:92:af:a2:9d:4c:f8:c9:b1:c4:cf:9b:6a:
         35:7f:3b:e1:e8:56:62:28:3c:f7:3b:cc:9c:c9:ef:e4:b9:40:
         f0:fa:ff:87:8b:92:50:bd:bc:aa:1c:cb:7d:a3:90:20:42:76:
         6e:86:69:22:cc:15:ad:b6:9b:83:62:0d:a8:c4:e5:e4:7d:8a:
         c9:9f:ea:1b:ef:97:02:ab:1f:53:d8:98:a0:80:44:da:7f:04:
         02:1c:e0:f4:27:be:c5:0f:05:68:83:b5:ed:3e:8e:67:0b:f5:
         1a:b6:c9:55:99:a2:6e:33:63:89:06:07:ff:72:34:d2:56:b0:
         76:7b:ef:2d:11:64:c2:11:44:8b:9e:3b:fd:58:31:d7:79:c9:
         8e:8a:51:13:ab:8b:0e:fb:7a:2a:e2:c1:59:b2:bf:f1:cb:f6:
         68:2e:f2:08:0e:91:7c:34:e1:5c:42:b6:88:99:38:6e:67:24:
         a6:46:41:9a:b3:00:41:52:69:59:0b:53:f3:a9:48:48:1d:21:
         44:50:99:3a:da:3d:64:9e:e7:b2:32:42:61:f5:37:aa:ba:4c:
         88:ef:14:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org