Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138382e302f32332d3234203d3e203532373538.roa
File:                     3137372e33382e3138382e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier:          5doGEHI1KyOlAINTIw69r+Ab6oQHomiYFDBk7F7BjGY=
Subject key identifier:   FE:30:82:A7:B3:5A:A7:18:FF:D3:59:38:87:C5:DA:96:6F:25:74:80
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       2EE2E45C858F0E0029237E466EFF6CCFB82C1BD6
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138382e302f32332d3234203d3e203532373538.roa
Signing time:             Tue 12 Mar 2024 18:18:22 +0000
ROA not before:           Tue 12 Mar 2024 18:13:22 +0000
ROA not after:            Tue 11 Mar 2025 18:18:22 +0000
asID:                     52758
IP address blocks:        177.38.188.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e2:e4:5c:85:8f:0e:00:29:23:7e:46:6e:ff:6c:cf:b8:2c:1b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar 12 18:13:22 2024 GMT
            Not After : Mar 11 18:18:22 2025 GMT
        Subject: CN=FE3082A7B35AA718FFD3593887C5DA966F257480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:cd:2c:16:f4:2b:ee:09:0e:56:b4:0a:f0:
                    90:a1:8c:b2:81:a7:2e:1d:04:f7:f2:72:7e:81:e1:
                    2d:bd:88:71:31:97:ac:6b:03:69:b7:88:80:16:0f:
                    53:3c:4e:ba:fa:1f:ba:cc:e6:78:7c:a5:2e:2a:17:
                    8a:d5:05:21:af:da:df:b2:5d:7c:6c:5d:f3:87:25:
                    a0:f3:f9:d3:c2:ad:ce:fc:54:bb:72:90:56:ee:f8:
                    0a:70:f5:4e:43:d8:75:db:c8:26:df:07:8d:b8:64:
                    a7:8e:47:71:b0:a9:f3:44:b9:3e:08:c0:9f:76:12:
                    40:9b:6c:e0:d8:e4:fa:81:01:cd:ae:cf:c7:d5:ea:
                    df:3d:c7:5e:55:19:b5:f1:23:72:32:41:03:a3:47:
                    2d:14:4c:12:5b:fe:49:5a:61:72:83:92:0e:63:f2:
                    7b:e4:f8:3c:0d:05:aa:1a:2f:5f:c6:d0:67:ff:43:
                    fd:e2:fc:da:6c:4f:82:9c:48:6c:28:78:ba:2e:8a:
                    c4:2e:f2:58:e4:aa:7a:68:3b:f8:90:24:86:49:9a:
                    0e:9a:e0:dd:98:f6:d5:c1:3b:1d:01:9d:be:e3:2d:
                    99:8b:1c:bf:c6:f8:2d:98:cf:72:16:d2:3b:3d:a1:
                    49:40:ca:43:18:b3:77:09:eb:02:c3:92:0f:e1:e4:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:30:82:A7:B3:5A:A7:18:FF:D3:59:38:87:C5:DA:96:6F:25:74:80
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3137372e33382e3138382e302f32332d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:78:b6:b6:2f:ae:33:d9:18:60:db:ce:75:e8:85:c1:7f:3a:
         60:c8:90:36:15:ec:00:db:f0:7b:66:7b:d2:17:fd:98:56:83:
         4b:74:f9:0f:fa:b0:a4:f2:a0:fd:ca:a8:b5:c4:7a:b0:46:89:
         de:0e:57:a5:a0:d5:f1:0b:2d:0f:47:31:68:d2:a4:2e:d4:21:
         86:17:c8:bf:27:60:36:6a:d2:81:7b:46:45:ec:6c:b2:1a:b9:
         6a:8c:db:0c:a8:bc:02:a3:99:80:a0:8d:b1:f1:d5:07:60:fd:
         63:6b:16:bd:84:8b:4b:d4:b4:4c:f7:8f:7e:f1:e4:6c:38:87:
         f6:6c:79:d2:3a:b6:d6:10:0b:0b:86:96:2f:ca:41:1a:90:1e:
         43:9a:ad:57:bd:96:3a:b2:49:55:26:75:cf:a2:51:ce:02:c4:
         b4:d2:70:37:c5:b0:53:96:63:52:fd:1e:21:1d:87:aa:19:45:
         7a:48:a7:a6:cc:5f:f9:58:f0:38:2f:ea:67:17:22:18:81:4d:
         f5:64:09:92:37:1c:7b:31:f1:4d:36:41:db:12:3a:18:cf:32:
         8b:7b:20:05:67:93:c0:82:10:51:dc:89:55:96:3a:50:a7:84:
         6c:67:e9:85:c4:1c:08:2b:03:a1:07:ee:34:5d:f0:88:71:6e:
         3f:91:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org