Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3132342e302f32322d3232203d3e203238353938.roa
File:                     3137372e3130342e3132342e302f32322d3232203d3e203238353938.roa (raw, json)
Hash identifier:          Io+aMtyEmtH1k3c0Ie7+nXGYXIT5hBJP5y4n33rSpuE=
Subject key identifier:   80:CB:ED:94:FE:AD:F9:E4:84:F2:66:15:79:72:C0:2A:11:63:BC:B5
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       2B74B6814AB2D9C68FF1D534A7F37EAD1D2C20B3
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3132342e302f32322d3232203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 17:10:12 +0000
ROA not before:           Tue 30 Aug 2022 17:05:12 +0000
ROA not after:            Tue 29 Aug 2023 17:10:12 +0000
asID:                     28598
IP address blocks:        177.104.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:74:b6:81:4a:b2:d9:c6:8f:f1:d5:34:a7:f3:7e:ad:1d:2c:20:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 17:05:12 2022 GMT
            Not After : Aug 29 17:10:12 2023 GMT
        Subject: CN=80CBED94FEADF9E484F266157972C02A1163BCB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:27:f8:f8:e8:ad:26:a5:02:c8:4c:ea:fe:
                    b9:ae:e0:98:cd:bb:28:39:70:be:2c:10:1f:21:5d:
                    ed:ad:29:a4:5a:52:e8:0a:6d:b9:04:7f:ae:da:23:
                    20:a8:2c:c3:c8:88:01:10:c6:41:77:16:57:5f:ab:
                    76:ce:bd:fa:8d:b1:49:75:39:90:de:b8:03:9a:a7:
                    3c:8d:4c:70:20:cc:e0:7f:b3:70:20:08:af:e4:a9:
                    02:f5:95:a4:4d:ed:85:d9:0e:69:22:35:ff:1d:d9:
                    58:95:58:67:18:d0:c0:aa:0c:25:44:4e:5f:7e:d8:
                    ae:c6:3d:61:54:f1:e8:8e:51:2e:1e:4a:c7:5a:33:
                    5b:13:11:7e:8b:77:83:6f:9d:db:83:a6:e4:af:71:
                    c5:41:46:2f:76:0e:eb:03:0b:b5:f2:4e:46:a9:58:
                    1e:15:0d:be:d7:46:bd:43:1d:8f:cf:c0:ef:90:6a:
                    25:5b:d7:68:fa:0c:fc:29:dc:d4:19:37:f2:47:2f:
                    18:fc:70:23:79:74:ee:20:06:38:0b:73:f9:a8:ce:
                    0f:31:9d:90:ef:c6:67:b7:17:5a:5e:12:d2:9a:be:
                    eb:0f:e0:d8:9a:f9:14:bd:63:e0:54:a1:82:43:e9:
                    57:33:0b:53:b8:72:7c:56:f3:5b:17:c4:ba:19:18:
                    6f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CB:ED:94:FE:AD:F9:E4:84:F2:66:15:79:72:C0:2A:11:63:BC:B5
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3132342e302f32322d3232203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:09:33:37:d8:a2:69:d8:50:35:f5:35:22:4a:d7:2d:ad:bb:
         b6:70:f5:43:42:f1:be:b2:b3:a8:78:e1:8b:59:6a:cc:5a:b9:
         a8:5b:1a:71:24:c7:03:23:c3:c5:98:c4:8a:b7:89:5f:8f:2e:
         84:42:75:74:e4:df:ed:8e:50:55:0d:6d:ea:a6:2a:61:07:a0:
         52:5d:40:dd:4b:b5:c6:25:d9:77:fe:35:fd:15:8d:83:62:cd:
         db:dc:57:06:06:8d:3e:63:28:b5:bb:79:68:e6:f4:b3:ff:d4:
         13:8a:e0:4a:5a:2c:db:78:16:64:12:09:21:1b:27:d0:96:d4:
         72:a9:b7:73:84:4e:fa:df:25:9f:20:a8:40:23:93:84:88:a7:
         ee:4c:68:ad:74:4f:88:43:0c:55:ed:14:04:78:26:f1:f9:46:
         78:9b:e1:11:d0:50:f6:dc:41:f5:cf:03:ec:12:f4:f1:57:4d:
         bd:0e:92:6f:2f:f2:69:04:38:17:81:54:17:74:5f:d6:75:da:
         1a:e9:c4:ec:24:5d:c6:4f:3a:9d:59:fb:7a:6d:9a:8a:a0:c8:
         9e:0f:5a:26:cc:78:77:3c:a1:2d:78:e4:a4:4f:3e:36:7a:a9:
         e8:c0:00:67:91:64:03:85:f8:b2:92:2c:92:c4:77:d4:45:b3:
         37:02:6a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org