Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138362e302f32342d3234203d3e203532373538.roa
File:                     3137372e33382e3138362e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          NSwL0iKW/o/IVfeJSzziLd6FTqk7HX6viN1KmlB2RNw=
Subject key identifier:   82:4D:7E:83:00:8C:CE:F7:06:F4:8C:1F:56:43:46:31:CF:8B:76:35
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       4DC70082C971E17D1DB34082AACF23A29FC63C25
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138362e302f32342d3234203d3e203532373538.roa
Signing time:             Tue 12 Mar 2024 18:18:13 +0000
ROA not before:           Tue 12 Mar 2024 18:13:13 +0000
ROA not after:            Tue 11 Mar 2025 18:18:13 +0000
asID:                     52758
IP address blocks:        177.38.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c7:00:82:c9:71:e1:7d:1d:b3:40:82:aa:cf:23:a2:9f:c6:3c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar 12 18:13:13 2024 GMT
            Not After : Mar 11 18:18:13 2025 GMT
        Subject: CN=824D7E83008CCEF706F48C1F56434631CF8B7635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:74:3d:f5:dd:98:ba:f8:1f:ab:28:0a:d2:
                    1f:25:3a:35:8f:ae:f2:d6:7c:75:d5:22:5a:b3:82:
                    2d:d1:cb:eb:1d:b4:ed:61:0c:93:9b:25:e8:81:46:
                    f3:5d:8a:d4:fb:c1:6e:e7:05:5f:23:ac:cc:27:24:
                    6e:7d:41:19:b4:93:65:a5:a0:93:14:bc:54:5d:fb:
                    57:8b:08:08:03:a8:5b:1a:dc:83:d6:88:4d:ee:f9:
                    98:36:9d:a5:e6:ed:a4:7a:c9:83:60:d0:ca:02:60:
                    01:b1:64:3d:8f:3e:d5:60:25:b2:97:2b:63:f1:57:
                    fd:c9:78:ec:ca:3e:ce:1a:44:db:35:42:c9:91:ef:
                    71:ba:4f:bf:d7:76:cc:40:98:a7:59:1b:7f:30:e0:
                    47:1b:ca:26:14:86:c5:54:a4:b6:a9:84:fd:7b:b4:
                    fa:b9:7a:1b:10:6f:c6:b9:a3:6b:31:dc:33:ac:9e:
                    e8:9a:54:1a:90:b8:67:dc:a4:45:0d:dd:6e:e1:aa:
                    8f:6a:50:8d:fb:43:fc:71:b0:40:db:d3:4d:82:4a:
                    8c:e9:a1:95:7c:1b:2b:9e:6f:d7:e4:d8:c9:fd:20:
                    5a:12:61:74:73:97:df:9c:01:dd:43:21:c7:c4:51:
                    58:21:b7:02:7c:a9:5b:cc:c0:a2:17:9f:bd:53:36:
                    4a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4D:7E:83:00:8C:CE:F7:06:F4:8C:1F:56:43:46:31:CF:8B:76:35
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138362e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:92:7c:bf:28:98:2f:e0:9e:3f:0e:76:aa:f6:4c:1b:ec:91:
         f4:30:0b:08:2a:bf:95:ac:63:d2:c8:d6:ef:8e:f3:38:57:a0:
         99:83:dd:d1:7f:79:53:21:b8:f6:32:26:29:92:2c:2e:4f:c5:
         e4:f1:5a:48:d5:eb:f6:ac:3a:28:ff:63:65:4a:54:4b:3f:73:
         0f:fc:f1:05:13:ee:98:0e:85:e4:ca:33:82:5a:6c:e9:0d:44:
         4e:f7:07:21:47:63:3c:c0:c4:62:64:6e:dd:86:0c:0c:58:ea:
         e2:17:3f:fd:80:7c:37:ce:22:14:0f:8c:0e:21:e6:1d:d0:7f:
         82:57:e8:e1:2f:9c:44:21:6f:dc:58:02:30:cf:ab:3d:d0:70:
         6e:d9:dd:5c:be:87:01:cd:ca:ef:f4:69:4a:9c:19:8e:c9:54:
         61:80:c6:73:f7:db:f9:39:77:6f:f4:26:31:3d:83:a2:a5:08:
         d0:9d:e8:4e:6d:b2:8c:b4:78:15:e0:05:e2:27:a5:ae:90:8c:
         9e:05:90:81:2a:53:d1:6f:3c:32:81:68:ee:b7:9f:40:77:58:
         25:71:a3:4a:21:cb:46:bd:b8:4f:51:c7:e9:b3:ba:cc:39:97:
         96:ab:38:fd:09:79:a0:fb:38:f5:fe:fc:51:02:69:cf:9a:a3:
         20:21:fa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org