Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e39322e302f32332d3233203d3e203238323737.roa
File:                     3137372e3133362e39322e302f32332d3233203d3e203238323737.roa (raw, json)
Hash identifier:          ZjfsP1UulFeUiRzVK5+TfKQYIbc+Dim/bfjyVYVxnac=
Subject key identifier:   05:CF:53:F1:B7:63:8A:26:DB:B2:19:FE:FF:7F:66:B5:44:F8:30:13
Certificate issuer:       /CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
Certificate serial:       286A4C03DE6DDC0B39E8267FD900AFC584EA762B
Authority key identifier: 37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e39322e302f32332d3233203d3e203238323737.roa
Signing time:             Thu 04 Aug 2022 13:00:01 +0000
ROA not before:           Thu 04 Aug 2022 12:55:01 +0000
ROA not after:            Fri 04 Aug 2023 13:00:01 +0000
asID:                     28277
IP address blocks:        177.136.92.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6a:4c:03:de:6d:dc:0b:39:e8:26:7f:d9:00:af:c5:84:ea:76:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
        Validity
            Not Before: Aug  4 12:55:01 2022 GMT
            Not After : Aug  4 13:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:88:f4:84:95:b6:43:0d:ef:89:cf:91:ad:
                    66:a4:68:7c:ec:59:77:ac:43:be:30:bf:9f:a9:00:
                    7d:2a:09:a8:01:18:c9:77:40:3a:57:a4:8b:06:6e:
                    4d:a0:6e:27:ef:e8:95:ca:9d:2d:22:49:38:b3:fd:
                    3e:90:ea:ec:11:ac:78:6e:f0:5a:96:07:be:87:97:
                    75:19:da:b7:7e:b6:8c:86:2d:1a:8b:67:dc:9a:c5:
                    0a:8b:49:f4:45:ea:30:f5:84:cb:e5:ab:7b:77:c6:
                    05:e9:5b:83:79:0b:e1:78:d7:22:b5:a2:a2:7f:0c:
                    ce:c7:62:35:46:42:87:0e:ac:8f:89:55:28:64:72:
                    fc:56:59:47:af:71:d0:a3:0c:42:80:07:c5:86:a6:
                    0c:ae:70:81:99:0d:0d:f2:07:b4:8e:55:4a:9e:2e:
                    43:b1:09:5c:04:d2:6f:43:be:23:99:d4:fb:54:fc:
                    d2:de:fd:10:fc:05:2d:33:bc:28:2d:64:cc:a4:30:
                    93:22:14:95:b2:6d:a9:c1:8b:69:eb:69:72:36:02:
                    f6:c1:4d:51:4c:a6:53:44:cd:a2:a0:ba:b9:cd:4b:
                    9c:2f:72:b6:ca:bb:6a:05:16:a2:4b:6e:a1:b6:8f:
                    07:d9:8b:f7:4e:cc:d6:80:c7:e1:3f:49:3f:07:76:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CF:53:F1:B7:63:8A:26:DB:B2:19:FE:FF:7F:66:B5:44:F8:30:13
            X509v3 Authority Key Identifier:
                keyid:37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e39322e302f32332d3233203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:c8:9b:24:95:95:78:f0:08:a9:e2:39:6d:e0:31:1c:2e:3f:
         bc:c7:d4:71:e8:66:6c:f7:d2:b9:6f:8e:74:ba:c5:4d:a0:e2:
         7c:7f:93:c7:f6:fa:7a:ce:90:27:98:70:ef:c9:52:6f:d9:9c:
         5a:c9:9a:af:0b:e8:77:76:a6:06:68:1e:5c:a2:ab:f4:39:74:
         20:8b:05:3e:e9:d0:50:bc:54:86:61:5e:e4:6f:b8:19:05:6b:
         71:b5:e1:27:cc:d4:bc:60:9d:8a:d9:6e:a4:93:2f:21:00:22:
         b8:0b:80:64:b9:33:30:85:74:25:9f:3b:b5:5f:ff:4c:4d:a5:
         6c:8b:8b:4e:75:35:26:ae:8b:c7:f8:ab:15:6b:7b:a7:1a:ee:
         eb:0a:b6:65:7c:2f:40:a8:d9:79:8f:52:14:6d:13:d6:5c:d5:
         00:b2:27:e0:9f:8b:5e:9d:f6:bb:89:a0:1a:7c:c2:f6:a9:5a:
         b6:9b:f1:29:f3:ba:42:73:5e:f4:00:b4:45:81:77:3b:21:9b:
         05:a1:c1:11:9c:12:52:1c:48:86:c9:e3:aa:b1:15:59:cc:6c:
         f1:ff:5c:28:1f:d3:00:0d:37:67:18:72:6b:ea:69:19:a3:6a:
         e1:67:fe:f6:f0:05:1b:6b:c1:fa:3f:c5:7b:58:6e:b6:81:13:
         97:d7:e5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org