Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3131332e302f32342d3234203d3e203238353938.roa
File:                     3137372e3130342e3131332e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          EXfFvfeUtdMG0FBDyusoXMQKKCfrES815cb7PwS+uRE=
Subject key identifier:   D5:BE:B4:F8:79:4C:AA:8B:91:7D:78:D9:64:9A:6F:0E:7A:5F:FE:62
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       3CBC57CBD91C3DB014CF16556278E39C5BF20F41
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3131332e302f32342d3234203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 17:10:13 +0000
ROA not before:           Tue 30 Aug 2022 17:05:13 +0000
ROA not after:            Tue 29 Aug 2023 17:10:13 +0000
asID:                     28598
IP address blocks:        177.104.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bc:57:cb:d9:1c:3d:b0:14:cf:16:55:62:78:e3:9c:5b:f2:0f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 17:05:13 2022 GMT
            Not After : Aug 29 17:10:13 2023 GMT
        Subject: CN=D5BEB4F8794CAA8B917D78D9649A6F0E7A5FFE62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:55:40:db:67:99:80:d2:8c:a5:02:7d:26:cf:
                    ce:f2:c7:11:ce:95:f8:91:c0:71:25:93:84:72:8f:
                    e6:3d:d1:25:ee:0a:e1:63:90:dc:84:7a:c2:57:25:
                    52:e3:6c:b5:47:32:69:e4:3e:c9:01:fb:37:09:83:
                    c6:2d:98:59:2d:27:d8:80:21:a4:25:00:f3:ea:be:
                    1b:9b:6f:90:94:02:e7:d9:b4:d4:8f:ef:cb:c7:9d:
                    21:0c:09:8f:2e:f7:df:9b:23:f9:93:47:95:e3:db:
                    13:8b:16:f1:cd:f3:7b:23:e8:61:5c:b6:ea:dc:9b:
                    08:7b:da:4c:81:72:21:cd:e3:50:c8:ee:63:93:14:
                    66:b9:58:85:a4:70:27:45:61:09:8d:ff:11:a7:22:
                    83:0e:95:f8:fc:ba:6f:e2:10:6d:21:3f:33:59:69:
                    59:1e:48:46:98:47:ce:ba:47:23:62:41:5b:0c:f8:
                    71:e8:11:9b:01:26:9c:3b:93:70:59:bb:82:bd:9b:
                    96:64:11:9f:5e:b4:44:c9:a8:00:9c:c3:36:f3:95:
                    c0:cb:b1:43:93:ca:28:95:0c:08:f4:2c:25:c2:64:
                    41:81:a6:a6:d4:1f:7b:46:1f:e1:3e:3f:d3:96:c6:
                    90:23:6a:f6:25:5d:b4:e0:13:62:90:38:51:9f:62:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BE:B4:F8:79:4C:AA:8B:91:7D:78:D9:64:9A:6F:0E:7A:5F:FE:62
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3131332e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:4d:57:dd:2b:fc:b3:58:41:1c:d4:a2:be:a5:13:92:24:0b:
         5f:0d:3a:f2:9d:1e:ee:e8:9a:c3:fe:7e:ce:45:2e:f9:1a:43:
         be:d1:10:75:b0:4d:6d:e3:db:5d:95:69:70:56:f8:9f:74:4d:
         7f:5c:00:65:c5:33:fa:29:39:ae:94:9a:50:cc:d5:10:70:f1:
         63:96:26:01:5d:40:d7:28:9f:d8:ef:c6:7d:47:70:ed:a8:bd:
         b5:bf:82:56:aa:60:61:44:9c:1a:8f:24:32:e1:1f:3e:86:d9:
         5b:11:e4:18:7f:25:dc:79:69:69:22:72:80:fa:26:ca:1c:c9:
         c1:42:12:a6:a5:dc:38:1e:09:1a:31:e1:7c:57:15:ac:2b:9f:
         b4:26:80:cf:42:92:57:d6:3e:78:2f:03:99:69:72:c5:7c:1f:
         a4:49:60:65:7e:9b:5c:f3:15:eb:89:ac:08:74:2f:3a:3e:04:
         7f:aa:fc:fc:bd:b5:ce:0e:3c:e4:29:a0:77:c8:b7:fd:45:7e:
         ef:60:8d:fb:47:83:7d:6b:6b:a4:db:f3:b4:52:05:86:4f:49:
         e2:3a:01:ff:57:3d:a1:18:2e:50:fa:be:b3:88:b8:95:20:c0:
         8d:db:54:a8:68:8c:fd:7c:3f:1f:bf:f1:34:50:d6:b3:da:e0:
         4a:f8:cd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org