Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e38382e302f32312d3231203d3e203238323737.roa
File:                     3137372e3133362e38382e302f32312d3231203d3e203238323737.roa (raw, json)
Hash identifier:          cYXYnQpSmTDtrfT7kPz+uYyCYezAsVnrnEsftbBXXjA=
Subject key identifier:   B4:24:36:50:04:64:CD:39:AC:AC:17:56:F8:4B:FE:09:FF:51:7F:EC
Certificate issuer:       /CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
Certificate serial:       65D259B568D50A1CA9185461518A1E8D38DCF272
Authority key identifier: 37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e38382e302f32312d3231203d3e203238323737.roa
Signing time:             Thu 04 Aug 2022 12:00:00 +0000
ROA not before:           Thu 04 Aug 2022 11:55:00 +0000
ROA not after:            Fri 04 Aug 2023 12:00:00 +0000
asID:                     28277
IP address blocks:        177.136.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d2:59:b5:68:d5:0a:1c:a9:18:54:61:51:8a:1e:8d:38:dc:f2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
        Validity
            Not Before: Aug  4 11:55:00 2022 GMT
            Not After : Aug  4 12:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:45:b9:7d:cb:cc:be:92:3b:58:3d:55:ae:
                    71:be:58:65:ce:69:12:d7:4b:26:c3:dc:c3:2e:b2:
                    b3:4c:e1:d8:93:9d:83:50:f7:cc:92:2a:bb:c1:f8:
                    32:2f:d5:86:01:65:42:b2:63:1a:49:26:68:08:96:
                    89:73:1e:07:3a:fe:ec:00:9f:d6:8f:5d:f1:d9:b4:
                    94:f6:ac:e4:65:31:1f:b1:c0:7d:61:81:4f:f1:65:
                    35:65:d9:37:9d:bd:61:de:e3:56:6b:2a:f7:98:29:
                    6f:ea:0b:8b:cf:cf:4d:84:c0:3c:91:e5:95:a7:44:
                    aa:34:db:1d:9d:88:0c:98:b1:14:a2:27:a0:06:a0:
                    b9:a1:e5:05:7d:4d:cf:f6:cb:b3:d8:90:4f:c2:e7:
                    3e:c4:13:fb:f5:aa:67:95:56:10:fc:1d:a7:ef:73:
                    2b:85:42:43:b1:87:92:ad:ab:33:22:c3:10:0f:2b:
                    95:cb:2f:57:d0:01:05:97:af:f9:c7:53:04:91:62:
                    dc:62:78:1c:d0:9f:f7:bf:46:3a:e4:88:2e:4c:d5:
                    96:20:1d:6c:6f:ad:a2:90:29:ad:88:c9:4c:37:92:
                    6b:98:f6:7d:d1:53:1b:42:e3:74:98:f6:7d:7f:80:
                    15:ec:e4:71:3a:ff:06:3b:0c:65:ef:28:8d:76:eb:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:24:36:50:04:64:CD:39:AC:AC:17:56:F8:4B:FE:09:FF:51:7F:EC
            X509v3 Authority Key Identifier:
                keyid:37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e38382e302f32312d3231203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:34:5b:9a:fc:59:ff:fe:a7:2f:3d:df:cc:33:d7:8a:de:0c:
         bd:61:7a:25:e6:64:40:ac:da:3b:22:e8:a6:f4:82:92:3e:2e:
         51:82:fe:21:a1:1b:bd:b2:d4:2b:86:7c:71:74:01:bc:cb:bc:
         28:e1:17:95:15:a0:60:a8:ce:f0:dd:2d:7b:3d:b0:2f:11:f1:
         e1:c1:d1:e6:39:3e:d1:ed:96:5e:7d:ac:c0:5d:eb:51:43:d6:
         68:b8:b6:dd:c6:3e:28:d1:b5:77:93:52:e4:7c:ed:bd:28:ca:
         4b:1a:47:a6:f2:fd:29:7b:a4:f4:7e:76:03:6f:79:a3:5d:43:
         76:b7:d4:e3:df:c2:58:5f:c3:21:c8:4e:d6:5b:3d:1a:84:53:
         52:be:a8:25:bc:8a:41:74:96:62:45:4c:97:75:fd:55:27:1f:
         af:eb:4c:2b:be:1a:93:67:cb:a9:d6:be:13:4a:7b:8d:a8:6b:
         c7:2f:13:54:a3:28:af:3a:bd:96:ae:b0:14:db:6e:2b:61:7e:
         4c:46:6f:45:40:61:0c:be:be:8c:f9:b3:ca:ad:46:d8:de:78:
         fd:ab:b1:bd:b0:f1:90:7a:2d:6c:c0:ef:e5:eb:70:89:c7:ee:
         82:e5:5f:f2:b6:c3:39:c3:d4:a1:32:87:a4:fc:42:02:ae:da:
         8c:e4:13:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org