Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3131322e302f32312d3231203d3e203238353938.roa
File:                     3137372e3130342e3131322e302f32312d3231203d3e203238353938.roa (raw, json)
Hash identifier:          /Sr4Hbr9xjS3t8wRsr4NIag2Y8fxs+MQKUWsMMwogCo=
Subject key identifier:   21:BE:DA:6C:43:1D:00:CC:F9:FF:4E:38:5E:DA:91:33:27:82:61:EB
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       64573AFD3B904BE8E9C824E13469222A62BF9354
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3131322e302f32312d3231203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 17:10:11 +0000
ROA not before:           Tue 30 Aug 2022 17:05:11 +0000
ROA not after:            Tue 29 Aug 2023 17:10:11 +0000
asID:                     28598
IP address blocks:        177.104.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:57:3a:fd:3b:90:4b:e8:e9:c8:24:e1:34:69:22:2a:62:bf:93:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 17:05:11 2022 GMT
            Not After : Aug 29 17:10:11 2023 GMT
        Subject: CN=21BEDA6C431D00CCF9FF4E385EDA9133278261EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:42:d8:84:98:fb:9f:b7:05:ec:33:a4:f7:
                    81:9d:60:01:74:35:a4:9c:92:37:9c:95:8c:1c:ab:
                    89:40:f4:40:63:96:25:fc:bb:02:81:28:04:5e:ea:
                    62:73:46:22:6a:0c:0d:99:50:50:74:d2:da:21:68:
                    a0:95:54:a2:dd:68:66:b4:80:03:84:88:3b:b5:ad:
                    96:9f:fd:5f:80:6d:76:94:1b:54:54:66:89:4a:e2:
                    a5:1f:37:41:a0:84:97:ce:b6:27:e0:16:83:c1:b6:
                    99:38:9d:e0:95:9a:76:b7:2d:31:0a:73:d0:48:cc:
                    34:a2:1e:b4:7f:ab:d2:a8:71:51:59:12:d6:24:c6:
                    9b:4e:04:d5:0d:8b:d8:71:e5:cf:d4:19:91:73:78:
                    01:21:06:4f:17:90:95:3f:f1:e3:04:04:f9:9e:35:
                    19:eb:79:1a:a8:d0:fe:ba:b1:1b:03:58:1b:04:ad:
                    ee:80:e9:4f:2a:fc:32:14:77:65:26:ce:4c:ad:d1:
                    72:38:14:32:29:40:7f:43:ba:12:0b:12:09:77:94:
                    e2:6d:62:8e:f5:a3:e0:d3:e7:98:15:51:ad:c3:10:
                    2a:c0:76:10:50:e4:66:d7:81:d8:3b:a4:3b:32:57:
                    69:3d:3b:c4:4c:b5:8f:ec:16:50:f9:b7:89:03:47:
                    37:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BE:DA:6C:43:1D:00:CC:F9:FF:4E:38:5E:DA:91:33:27:82:61:EB
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3131322e302f32312d3231203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:cb:8f:fe:e0:08:96:0e:0e:4d:29:1b:ea:15:4e:f3:7a:
         86:a7:6d:85:b9:00:d4:ad:04:50:18:b2:b1:d9:40:99:2e:6f:
         f7:f2:92:01:32:3c:ea:b8:96:20:23:21:97:fb:ac:cb:84:1c:
         1f:38:9d:e0:f5:e9:bd:44:e8:4d:f7:96:79:97:01:f8:01:98:
         61:28:1f:4c:84:f7:df:26:9a:09:ac:c4:57:77:c6:3a:fd:55:
         06:d2:e7:ca:b5:04:bf:ed:31:88:31:c4:ac:fe:0c:c7:18:21:
         fb:80:fa:11:5a:52:80:c6:44:9e:6b:1b:d5:28:79:77:85:81:
         fb:20:98:66:61:3b:ed:35:45:bd:6f:b2:68:7d:b4:a7:3c:4c:
         df:ba:f2:df:10:8e:2b:d5:d1:6d:0d:ba:6c:fb:15:b3:16:4c:
         83:5f:df:01:6c:51:2b:cb:78:10:54:8d:89:75:a3:d3:61:de:
         8d:e0:2e:11:bf:6a:69:62:67:25:1c:b3:e2:18:77:41:54:5a:
         f6:6c:50:05:69:87:96:83:14:ef:6b:a6:c7:50:48:af:00:d6:
         dd:2c:1c:af:2a:53:b0:61:94:60:de:fa:18:c1:5a:3f:1c:25:
         aa:9b:e2:4f:3b:e9:62:33:39:a1:01:fe:81:8b:45:09:7b:68:
         4c:b5:3d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org