Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e39342e302f32332d3233203d3e203238323737.roa
File:                     3137372e3133362e39342e302f32332d3233203d3e203238323737.roa (raw, json)
Hash identifier:          dSO0LelWjzdeW8l3pq2JgQKMK1+uHCu6pZIxtx08xdc=
Subject key identifier:   4B:C7:9D:28:66:21:74:C9:07:F6:83:51:89:EB:9F:B6:7A:C2:8D:92
Certificate issuer:       /CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
Certificate serial:       44915D07AF74C149C39194E30B35A2B85DF2777F
Authority key identifier: 37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e39342e302f32332d3233203d3e203238323737.roa
Signing time:             Thu 04 Aug 2022 12:00:00 +0000
ROA not before:           Thu 04 Aug 2022 11:55:00 +0000
ROA not after:            Fri 04 Aug 2023 12:00:00 +0000
asID:                     28277
IP address blocks:        177.136.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:91:5d:07:af:74:c1:49:c3:91:94:e3:0b:35:a2:b8:5d:f2:77:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
        Validity
            Not Before: Aug  4 11:55:00 2022 GMT
            Not After : Aug  4 12:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:c4:ce:11:3e:82:50:04:67:90:65:01:78:
                    7a:66:fa:7c:42:24:4e:42:84:0f:8e:4d:25:2f:23:
                    4a:e5:a9:c3:46:08:a3:00:0a:d5:20:d1:e8:e5:48:
                    4a:af:e4:fe:f6:d3:40:4e:42:21:68:fb:c1:0d:9c:
                    65:c4:8a:e0:da:24:ab:3b:7f:f4:47:15:41:17:08:
                    55:07:93:93:3b:81:25:f3:f5:85:77:7f:ac:9c:30:
                    d8:d8:21:df:a7:29:ca:6d:79:bd:30:77:ed:34:60:
                    e4:2a:54:d9:6d:f0:c8:5e:2e:b6:2f:7a:8c:b2:02:
                    f3:b6:a0:47:82:af:14:da:da:5d:fd:8a:f3:e9:b7:
                    1e:95:57:9c:17:b5:10:78:ac:e3:a6:b7:82:34:85:
                    45:7e:22:02:ae:3e:f7:bc:9d:99:8b:4e:d0:b2:1c:
                    5b:5e:67:e3:b9:c0:b2:d9:55:6c:d4:c4:00:c2:15:
                    5e:ea:4b:4f:9b:0a:37:8f:70:21:bb:d6:75:65:23:
                    2c:33:bf:9f:51:86:c2:07:c0:0a:43:0f:3b:bb:d6:
                    52:ad:d5:13:58:32:12:c6:ad:2e:4a:83:2e:87:18:
                    fb:1b:69:62:73:c3:85:41:5e:86:d6:22:38:8c:a6:
                    37:df:53:82:71:5a:06:0b:b5:65:8b:4c:8c:b7:f2:
                    0e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C7:9D:28:66:21:74:C9:07:F6:83:51:89:EB:9F:B6:7A:C2:8D:92
            X509v3 Authority Key Identifier:
                keyid:37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e39342e302f32332d3233203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:b9:42:90:42:8f:9b:7b:d2:a5:00:c9:73:eb:0b:b7:3e:fd:
         67:85:06:32:97:6c:df:db:dd:a0:a0:40:55:27:a0:9e:14:72:
         ad:02:aa:03:83:f6:b7:bd:71:e8:34:f9:b5:9a:d0:c8:61:60:
         49:f9:75:53:23:f9:e1:a1:0a:b8:70:d6:f9:2a:84:19:cb:0a:
         f7:ea:e8:c9:b7:e1:c6:7e:7d:1f:d9:b6:dc:bc:4a:ab:46:86:
         0e:f8:aa:36:d7:e4:2a:3a:8a:80:86:59:be:0d:6d:6e:73:72:
         d2:7c:d5:62:2a:d0:aa:7b:d0:c7:66:94:94:4a:54:40:95:a9:
         08:a4:d1:0a:44:ca:ef:48:fe:b4:7c:c9:5f:0c:6f:bf:88:8a:
         ba:e4:5c:fd:4a:db:b5:09:f1:17:a6:3b:35:d4:2e:b1:77:b6:
         9b:12:71:25:81:a7:34:7d:2a:39:b9:1c:83:2b:ed:93:60:6b:
         c1:8e:52:cc:7d:7f:9c:34:31:d3:6b:28:2e:22:8a:f0:b9:3e:
         8f:6b:bd:6f:02:a3:b0:50:40:ae:ee:9f:b1:af:0b:0c:2d:44:
         b9:b6:ea:ca:49:a9:6c:78:46:ab:ae:37:fb:bd:47:c2:0a:01:
         a6:cc:2d:8b:82:28:96:6e:8f:5c:54:62:e6:b3:51:6d:ad:8d:
         a0:84:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org