Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/3137372e31302e3137322e302f32322d3234203d3e2033333536.roa
File:                     3137372e31302e3137322e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          BdP3TzAPcJ/TAKOfN3MlFWZ6JoYWE0ynLuZnl+RdlfU=
Subject key identifier:   36:68:BB:6E:93:F4:98:67:3F:4A:24:99:7A:95:5A:54:E8:4E:7C:AD
Certificate issuer:       /CN=DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241
Certificate serial:       6CC4E8E0173EACBFDB3C04420BDAE3D4A6AED308
Authority key identifier: DE:3B:24:29:AF:80:02:A6:DA:4D:D0:55:3A:09:E2:C9:A4:8E:F2:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/3137372e31302e3137322e302f32322d3234203d3e2033333536.roa
Signing time:             Wed 08 Feb 2023 12:12:06 +0000
ROA not before:           Wed 08 Feb 2023 12:07:06 +0000
ROA not after:            Wed 07 Feb 2024 12:12:06 +0000
asID:                     3356
IP address blocks:        177.10.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c4:e8:e0:17:3e:ac:bf:db:3c:04:42:0b:da:e3:d4:a6:ae:d3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241
        Validity
            Not Before: Feb  8 12:07:06 2023 GMT
            Not After : Feb  7 12:12:06 2024 GMT
        Subject: CN=3668BB6E93F498673F4A24997A955A54E84E7CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:c5:f3:71:df:66:95:13:84:8c:8f:4b:ff:
                    bb:f5:de:9a:c8:3c:7d:3f:9f:2d:e5:52:73:b0:0a:
                    b3:ad:ae:3b:03:a2:68:b0:cd:a2:37:8c:64:11:64:
                    4e:cb:61:5c:c8:a9:21:3b:51:09:df:9b:6a:aa:fc:
                    04:2f:52:8e:d3:b0:b0:1c:a2:2a:51:c4:89:a4:a4:
                    78:19:5b:19:26:5f:38:9c:26:17:c3:c9:3f:dc:9b:
                    45:38:87:53:49:74:c4:77:90:84:6d:30:90:bd:6a:
                    05:e8:e3:17:11:50:c0:43:77:98:ee:f0:4a:cf:ee:
                    3b:6e:90:b5:9e:e9:ae:ca:61:f3:a8:8b:2e:eb:53:
                    40:42:48:3a:9e:4b:ba:d9:6d:25:19:74:a1:e4:9d:
                    be:59:88:cd:f0:af:c1:60:9d:cd:64:cb:1f:44:f4:
                    68:07:9a:7e:61:4f:66:11:47:80:97:17:35:dd:de:
                    1d:2d:ad:1c:f0:df:c0:9c:ad:6a:60:c2:09:b0:15:
                    5f:ae:2a:19:ed:a1:78:53:be:36:37:a3:73:a2:94:
                    8a:10:25:84:49:46:66:97:fe:73:c9:4f:b8:80:2d:
                    5f:fe:f2:69:42:30:55:5c:41:2d:28:98:8a:d2:54:
                    d5:e7:e1:99:83:cd:84:da:b9:66:ad:26:32:9e:85:
                    9c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:68:BB:6E:93:F4:98:67:3F:4A:24:99:7A:95:5A:54:E8:4E:7C:AD
            X509v3 Authority Key Identifier:
                keyid:DE:3B:24:29:AF:80:02:A6:DA:4D:D0:55:3A:09:E2:C9:A4:8E:F2:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/3137372e31302e3137322e302f32322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:c5:a6:1c:44:78:1e:03:b2:2e:94:25:72:d5:01:f4:13:a0:
         ec:6b:68:3a:5f:87:7e:23:bb:98:ba:c6:37:06:75:02:89:b1:
         90:08:17:c8:06:30:71:29:c6:4b:2e:64:b3:70:fe:1c:a4:2c:
         22:ac:32:76:f4:06:f0:27:54:c9:7c:22:73:f2:99:23:87:a0:
         68:66:00:1b:b3:16:c0:92:13:54:b8:78:fc:c8:7e:13:a9:9b:
         fd:4a:d2:b0:8f:07:38:78:21:db:ee:58:21:10:57:e7:15:e0:
         39:cd:7f:eb:ae:55:0a:ce:38:22:cc:fd:83:29:35:f5:e9:08:
         a0:71:d0:c6:7b:66:eb:bc:57:be:30:9d:48:a3:7a:a0:63:21:
         1c:08:5e:f2:dd:4b:f0:88:a4:d6:ea:5e:0a:61:f5:71:65:89:
         f2:84:39:ff:29:b1:f4:9e:b4:4c:4b:28:99:3f:d7:81:3d:47:
         37:ed:4a:89:79:f0:77:cc:38:3f:a5:e5:d8:e4:0d:ff:15:c2:
         2b:99:8e:bc:eb:d4:d5:6c:c5:1e:7b:2f:51:68:6b:c2:c3:15:
         85:e7:72:51:01:f1:86:12:6c:07:08:60:42:9b:12:50:d6:bc:
         e7:31:e8:02:cd:46:15:19:69:0d:2c:55:04:1d:fd:40:76:11:
         98:4d:02:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org