Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/3137372e39322e3132382e302f32312d3234203d3e20323633313038.roa
File:                     3137372e39322e3132382e302f32312d3234203d3e20323633313038.roa (raw, json)
Hash identifier:          cKmRXURfJTXzvdk1ymZ90YE8t/neG6d5ZgWAmQteCLM=
Subject key identifier:   20:C7:B7:2B:F4:4B:F8:70:AB:2C:53:08:E2:77:A3:B8:B6:93:B7:0D
Certificate issuer:       /CN=F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8
Certificate serial:       2F9B817A74E054683C08C85186B83475F84C4DDC
Authority key identifier: F3:65:58:69:53:1F:DF:3D:28:13:ED:9C:5D:0A:DF:28:BC:FD:0C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/3137372e39322e3132382e302f32312d3234203d3e20323633313038.roa
Signing time:             Wed 10 Jan 2024 18:30:10 +0000
ROA not before:           Wed 10 Jan 2024 18:25:10 +0000
ROA not after:            Wed 08 Jan 2025 18:30:10 +0000
asID:                     263108
IP address blocks:        177.92.128.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9b:81:7a:74:e0:54:68:3c:08:c8:51:86:b8:34:75:f8:4c:4d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8
        Validity
            Not Before: Jan 10 18:25:10 2024 GMT
            Not After : Jan  8 18:30:10 2025 GMT
        Subject: CN=20C7B72BF44BF870AB2C5308E277A3B8B693B70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:7f:be:16:b1:0f:20:83:98:93:94:b0:14:
                    3e:1e:43:d3:28:c3:aa:87:0f:29:a9:cd:8a:19:9f:
                    3a:71:2d:42:5e:c0:ba:36:02:d8:98:16:de:4a:98:
                    fe:37:0b:c8:81:5a:16:c6:9d:e8:a3:86:56:c9:68:
                    f5:6f:5c:99:72:8c:61:9d:4e:fd:dd:1d:b5:06:ae:
                    2d:e2:ec:f7:ec:3a:67:31:2b:23:08:5d:82:7c:ab:
                    4a:94:c1:b5:f8:f3:a4:cc:91:92:1c:92:03:39:f0:
                    45:cc:85:86:cd:23:aa:5a:d8:81:f0:1b:4e:3a:8a:
                    ae:9b:fc:0b:af:d8:00:d3:45:9c:48:88:3e:7d:3b:
                    15:9d:16:28:aa:4e:a6:5e:85:27:f5:f9:cd:62:6c:
                    19:0a:ce:f0:93:d9:be:29:cc:e1:50:89:41:f3:f6:
                    b7:d6:5c:ab:89:94:b6:1c:34:de:d5:07:41:11:be:
                    e8:12:da:6f:7f:e8:00:a0:47:2d:24:22:a6:c7:cf:
                    35:dc:31:32:0d:fb:0c:32:a6:e6:b5:58:a4:57:55:
                    98:b2:b2:7d:fb:e7:5c:fd:69:a0:7f:06:44:b2:b8:
                    6d:36:4a:96:19:d6:e4:6a:d0:57:32:78:a2:72:5a:
                    71:7c:c0:7b:90:ba:97:82:30:bf:42:3c:5f:d2:e7:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C7:B7:2B:F4:4B:F8:70:AB:2C:53:08:E2:77:A3:B8:B6:93:B7:0D
            X509v3 Authority Key Identifier:
                keyid:F3:65:58:69:53:1F:DF:3D:28:13:ED:9C:5D:0A:DF:28:BC:FD:0C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3655869531FDF3D2813ED9C5D0ADF28BCFD0CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/3137372e39322e3132382e302f32312d3234203d3e20323633313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:6f:69:d9:e7:42:45:98:f5:38:62:93:d9:54:fd:94:a9:8e:
         8a:7d:bf:42:5a:97:fd:f9:04:8d:8b:70:d0:c0:d6:42:eb:c8:
         6a:de:51:02:92:a9:63:5f:3c:44:84:4d:c2:53:ad:6a:0d:5f:
         8b:9f:b9:be:7b:30:20:f8:ff:da:ff:d7:b7:1c:29:27:6e:0a:
         69:d3:11:27:63:4f:3e:07:64:56:f5:8e:d3:bd:f3:d1:89:92:
         06:e6:61:20:12:88:cd:b1:35:f2:32:e0:b5:d5:a2:e9:0a:be:
         79:fa:f4:5b:7f:ad:fe:e3:f2:79:f2:b1:b7:d9:ae:c4:33:b9:
         a6:16:d0:3d:d8:13:65:f4:23:d8:18:1f:28:64:27:69:c3:65:
         20:a1:10:39:73:98:23:5c:d3:aa:a9:92:2f:69:c3:2c:05:e8:
         8a:f2:e5:c3:a3:7e:0b:10:0d:05:f2:27:61:42:0a:ca:53:e7:
         56:f7:98:c6:30:10:20:25:c5:ab:82:ac:3a:1d:a5:5e:2e:9d:
         b0:72:15:2f:f8:ea:b2:d8:65:92:6c:73:9a:62:0f:19:e0:28:
         df:6e:21:59:16:7b:76:79:1b:c3:2b:7c:2c:a9:f6:21:d6:2d:
         44:fe:7a:7e:43:80:bc:36:61:2b:b1:a5:b7:af:d9:67:8b:ed:
         81:35:45:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org