Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3131322e302f32302d3230203d3e203238353938.roa
File:                     3137372e3130342e3131322e302f32302d3230203d3e203238353938.roa (raw, json)
Hash identifier:          uMRbFhX9IXf0XX4DdWXvYgpZ7PyoOAYzIAMTYUMz2QA=
Subject key identifier:   B9:97:B3:3E:61:C8:D5:D8:1B:2C:23:F6:FB:8D:E6:A8:33:55:4E:F3
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       313F9C3ECED65EF7CDE97500FBB1E00741EC5069
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3131322e302f32302d3230203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 17:10:13 +0000
ROA not before:           Tue 30 Aug 2022 17:05:13 +0000
ROA not after:            Tue 29 Aug 2023 17:10:13 +0000
asID:                     28598
IP address blocks:        177.104.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3f:9c:3e:ce:d6:5e:f7:cd:e9:75:00:fb:b1:e0:07:41:ec:50:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 17:05:13 2022 GMT
            Not After : Aug 29 17:10:13 2023 GMT
        Subject: CN=B997B33E61C8D5D81B2C23F6FB8DE6A833554EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:27:44:fb:0d:cb:0f:a5:ca:04:a9:b5:20:
                    92:f2:45:11:b3:7f:76:0c:fd:80:37:9a:22:a4:53:
                    61:65:41:de:ac:30:95:d7:f9:88:54:a2:a6:75:9c:
                    0d:96:d0:40:90:a4:e8:35:b8:50:7a:b4:12:17:cd:
                    79:04:a4:01:27:7c:55:c5:c8:53:af:9e:54:e5:4c:
                    21:3b:28:6b:44:f1:b2:54:0c:8b:71:22:2f:a8:59:
                    52:97:db:65:b5:d2:3e:28:8f:f1:4d:42:06:7e:c5:
                    9a:d4:2e:d3:6e:16:ce:33:cf:d9:86:44:1c:13:ef:
                    90:4c:ea:17:e7:cd:53:f5:ea:4a:fa:c0:ad:e2:8a:
                    6e:34:d2:b4:82:2c:4a:3a:2e:d9:d9:c7:80:40:6b:
                    ac:c1:9d:2c:2e:89:34:bb:62:49:10:49:89:fe:f8:
                    a7:c3:27:cf:80:a9:c7:f9:b2:5d:65:43:d1:08:f6:
                    57:0d:9c:52:d5:58:1d:34:82:25:0f:ae:4e:88:fc:
                    fc:24:d7:e1:b8:b7:51:b0:f1:38:56:f5:99:fd:fa:
                    21:2f:a5:9a:95:36:ad:20:a0:a9:31:f3:39:5e:cb:
                    9c:fe:4d:00:8b:ec:4d:c4:ae:bc:3d:87:7a:d9:c5:
                    b9:9c:04:86:8e:81:24:bf:1b:3c:6e:37:9f:8b:7b:
                    22:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:97:B3:3E:61:C8:D5:D8:1B:2C:23:F6:FB:8D:E6:A8:33:55:4E:F3
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3131322e302f32302d3230203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:1e:22:0f:d8:44:84:54:6f:f5:8e:57:bd:33:d4:13:6b:
         4f:b6:fb:b2:cd:c5:e1:99:95:7b:28:db:c1:8f:8d:1f:37:3f:
         8c:df:9e:8e:b9:93:50:00:fe:d3:24:ab:97:81:40:fc:43:b4:
         ec:48:87:4f:a1:7c:ce:7b:8f:ed:e5:75:13:37:2e:e8:03:90:
         9f:c7:aa:b9:bc:1e:6e:a4:4b:6e:8d:9f:84:da:6a:a3:7a:a2:
         d3:d9:70:80:c3:1d:80:77:9c:bf:e3:07:70:11:c5:9f:11:0d:
         e7:c5:8a:c3:29:40:42:29:69:80:4b:68:80:2b:35:f5:90:5d:
         c8:e5:fb:a9:8d:ed:02:d7:39:b0:02:28:d0:4b:b5:71:be:c4:
         52:56:25:f8:9e:1a:33:39:29:a9:08:b9:b4:c4:5f:a4:18:af:
         a9:40:48:a8:cb:33:39:e8:c8:49:a3:0a:90:15:bd:50:41:f8:
         0f:6e:a7:19:79:80:4a:7d:db:6c:4f:4b:95:06:7b:15:15:6e:
         ea:c9:f0:72:f0:34:3f:2c:ae:09:98:8c:29:1f:87:8d:68:43:
         09:57:98:96:51:c6:5e:8c:96:8c:58:90:d7:cd:b9:05:eb:9d:
         8a:3b:47:2f:9f:05:c7:72:fb:e2:df:af:19:16:72:b2:40:3d:
         15:db:6a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org