Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3132342e302f32342d3234203d3e203238353938.roa
File:                     3137372e3130342e3132342e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          F+uTZkt1GWuBcFoyIMDorDykt9pj+OntQQXvtTF3KRg=
Subject key identifier:   BD:F8:0A:E7:68:7F:1D:BD:EC:0E:A7:9A:EE:16:F2:E4:C2:A0:89:EA
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       3B50978A34D59F2350FC48DCD4F51586F50ED80D
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3132342e302f32342d3234203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 17:10:13 +0000
ROA not before:           Tue 30 Aug 2022 17:05:13 +0000
ROA not after:            Tue 29 Aug 2023 17:10:13 +0000
asID:                     28598
IP address blocks:        177.104.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:50:97:8a:34:d5:9f:23:50:fc:48:dc:d4:f5:15:86:f5:0e:d8:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 17:05:13 2022 GMT
            Not After : Aug 29 17:10:13 2023 GMT
        Subject: CN=BDF80AE7687F1DBDEC0EA79AEE16F2E4C2A089EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:c3:b8:2c:60:d8:0d:a6:03:21:96:78:fa:
                    50:c1:c6:79:27:9d:f9:7c:71:31:cd:ca:c8:94:ea:
                    09:cf:f8:c6:f4:33:9e:dd:e6:8d:29:1d:81:0c:d7:
                    ff:13:c9:aa:58:24:7a:75:39:b7:bc:8d:86:d8:d2:
                    4e:0a:2b:f1:4d:ad:39:b0:68:ca:db:26:4a:64:48:
                    fe:df:40:4a:67:1b:a4:a1:b8:c7:d5:53:42:04:f8:
                    25:c6:a8:c9:80:51:6f:74:00:db:ea:50:90:86:3b:
                    64:b6:f6:f3:9a:aa:72:17:ef:e6:25:3a:44:dc:8b:
                    74:9a:48:d3:4d:79:78:72:27:ae:d2:2e:ba:87:6c:
                    01:20:5a:15:d9:8f:e7:bd:b5:4d:84:12:14:c6:5e:
                    86:ad:d6:7e:b3:65:b9:00:04:6e:99:7e:c7:79:09:
                    e0:71:e8:86:2f:73:6e:00:17:98:66:6c:4e:fa:02:
                    93:b1:88:7e:4a:b4:9c:41:80:b3:72:bc:3d:15:e8:
                    d1:2e:85:44:36:b3:59:ce:7e:64:a2:11:5d:52:cc:
                    6a:3c:d4:86:71:68:91:7d:04:ad:a9:bb:51:53:32:
                    e5:d0:57:62:6c:ed:87:18:74:cb:a6:00:92:b3:e0:
                    ee:93:44:8b:52:80:b3:98:6c:83:b6:9a:89:52:ba:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F8:0A:E7:68:7F:1D:BD:EC:0E:A7:9A:EE:16:F2:E4:C2:A0:89:EA
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3137372e3130342e3132342e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ae:a2:c2:da:24:d7:df:e6:4b:a3:a5:fd:b0:f7:d4:31:74:
         e0:1f:df:1a:26:fc:f8:40:bf:03:03:bd:35:d0:6b:fd:74:3d:
         fb:43:a1:73:c0:d2:a7:c8:21:2d:d9:61:ea:76:fb:7c:4e:b5:
         5d:b0:27:f5:88:bf:57:8c:13:9c:f6:9c:87:48:85:fc:9b:32:
         4e:04:22:4e:96:1a:0d:3b:0d:df:89:d7:aa:9a:8b:53:57:8e:
         da:fc:12:28:e3:b9:8c:4f:14:26:cc:08:0a:ba:43:68:06:14:
         77:07:48:4d:0a:f1:a5:22:1a:16:de:d8:ff:f7:9d:e2:ed:47:
         70:a1:d4:20:ed:26:de:a5:88:16:0f:21:0a:1c:3d:9a:3a:65:
         c5:5f:1f:06:0d:f6:ad:5f:3d:cd:ec:d2:ad:55:ae:af:ec:a9:
         f7:23:60:7c:93:fb:1d:4d:f0:2c:09:c6:1a:64:e2:49:87:9e:
         c9:09:0b:04:4a:22:4e:80:a3:25:fa:0f:e9:2e:f4:ff:9b:5c:
         e8:39:34:fc:e5:b2:26:1d:67:49:bc:32:31:d8:d4:2d:78:54:
         94:54:ca:53:b2:a7:24:22:3b:14:8e:bd:a5:d4:b6:22:b5:5c:
         c1:08:ea:80:08:6a:ff:d1:74:b3:56:58:d3:09:29:f0:27:47:
         59:0b:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org