Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3132302e302f32312d3231203d3e203238353938.roa
File:                     3137372e3130342e3132302e302f32312d3231203d3e203238353938.roa (raw, json)
Hash identifier:          Eh2qZBo2sHHdcZfeUxDEkJD+x90VnHNNIQ0+KcSHjOI=
Subject key identifier:   34:5D:9E:E5:8D:B0:B4:08:9C:3A:69:72:3B:FE:B9:47:BD:03:C8:33
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       13F27E801E72BE912B9CBA36552BBAF76E4FE149
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3132302e302f32312d3231203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 17:10:12 +0000
ROA not before:           Tue 30 Aug 2022 17:05:12 +0000
ROA not after:            Tue 29 Aug 2023 17:10:12 +0000
asID:                     28598
IP address blocks:        177.104.120.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f2:7e:80:1e:72:be:91:2b:9c:ba:36:55:2b:ba:f7:6e:4f:e1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 17:05:12 2022 GMT
            Not After : Aug 29 17:10:12 2023 GMT
        Subject: CN=345D9EE58DB0B4089C3A69723BFEB947BD03C833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:42:20:23:81:68:47:50:da:10:3f:61:7c:
                    e4:59:ad:b8:79:7f:36:cd:27:81:a6:4e:a3:a5:1a:
                    b9:71:be:92:45:f7:df:6c:a4:a7:03:d0:9b:aa:01:
                    f0:ea:81:a5:18:ae:45:76:f7:02:d3:74:3a:cb:9e:
                    f0:5a:5e:e7:9b:9b:ea:8c:50:a7:a2:af:18:ca:1a:
                    d1:69:dd:55:56:b8:7f:81:d8:38:02:92:6c:99:57:
                    aa:3c:c4:39:13:ec:1e:fc:6f:45:7e:92:15:ea:61:
                    f7:80:96:03:67:db:e7:1e:b6:51:5b:fb:ad:fb:72:
                    35:0c:9b:96:8c:c8:85:9d:98:fe:58:d8:cd:8d:71:
                    1e:74:d6:39:f4:2f:56:d1:af:23:04:28:7d:a8:7b:
                    69:d9:cd:f1:9e:ee:b6:a1:a2:09:46:1f:82:6f:c2:
                    2b:6c:8b:99:f5:ba:52:10:fd:a8:d6:6f:17:b4:0d:
                    ae:80:e8:54:88:03:05:e6:5f:d1:a8:28:34:5f:9f:
                    ba:9c:fb:91:f5:77:8e:81:51:82:89:69:21:fe:e5:
                    f2:17:45:8a:cf:3d:d3:55:ee:7d:c5:53:94:d2:ba:
                    13:2f:79:89:df:4e:1f:9a:d6:5d:27:22:1a:87:5a:
                    a2:aa:ce:56:e0:42:50:1a:37:c5:46:34:46:b8:89:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5D:9E:E5:8D:B0:B4:08:9C:3A:69:72:3B:FE:B9:47:BD:03:C8:33
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3132302e302f32312d3231203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:96:e2:ba:3e:bf:15:80:b7:32:a7:5e:fe:b0:a9:5d:d9:6c:
         88:69:02:91:e0:45:7e:48:84:da:96:56:e2:04:09:01:df:f2:
         98:68:d3:e6:10:0d:78:a7:f6:d0:f4:43:cc:b7:14:e3:dd:06:
         46:12:c0:27:dc:61:36:96:28:e0:9b:d5:91:a0:06:d5:b5:d5:
         2a:51:dc:65:df:e5:88:9f:c1:cf:b6:aa:5d:7f:7a:46:6f:b4:
         dd:79:c6:27:8f:81:f8:38:24:00:57:a5:42:6c:00:93:9a:f7:
         19:9f:bc:48:6a:20:66:01:f2:21:34:e7:05:2a:ce:82:66:b5:
         2c:ea:27:1e:89:79:9f:52:04:3e:c1:6f:ae:e1:98:f0:dd:f9:
         ce:14:36:22:2f:90:de:4b:7f:a1:75:b6:8a:56:f5:c1:d1:33:
         92:21:a7:07:ba:61:85:0b:3a:d2:70:74:d3:fd:34:f0:5a:8f:
         8a:c6:6f:67:4c:77:ca:56:ca:68:a3:25:ff:3b:d0:ef:98:67:
         2c:93:94:31:be:ee:9e:df:a0:7c:76:2a:9a:20:f2:04:dd:8f:
         7e:63:21:91:ef:d7:26:a6:d7:51:04:eb:56:99:37:9f:8b:32:
         e7:6c:3f:08:e0:bf:a3:de:7a:b8:85:1b:5b:07:34:65:20:52:
         d4:ef:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org