Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3137372e39322e3232342e302f32302d3234203d3e203238323739.roa
File:                     3137372e39322e3232342e302f32302d3234203d3e203238323739.roa (raw, json)
Hash identifier:          4T8wH0yOOJaWi99CPHK4j8V4xB3ZyIXpHX3ERRNazXk=
Subject key identifier:   1C:C1:94:83:69:3A:C9:E9:DF:C0:13:70:3A:75:54:BD:34:BC:FC:2D
Certificate issuer:       /CN=3B650AE130217DC191EA44A022BABF2EECE6BA37
Certificate serial:       0925255BF0A378FC30C23112F065747179FFEB19
Authority key identifier: 3B:65:0A:E1:30:21:7D:C1:91:EA:44:A0:22:BA:BF:2E:EC:E6:BA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3137372e39322e3232342e302f32302d3234203d3e203238323739.roa
Signing time:             Sat 24 Feb 2024 13:02:39 +0000
ROA not before:           Sat 24 Feb 2024 12:57:39 +0000
ROA not after:            Sat 22 Feb 2025 13:02:39 +0000
asID:                     28279
IP address blocks:        177.92.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:25:25:5b:f0:a3:78:fc:30:c2:31:12:f0:65:74:71:79:ff:eb:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B650AE130217DC191EA44A022BABF2EECE6BA37
        Validity
            Not Before: Feb 24 12:57:39 2024 GMT
            Not After : Feb 22 13:02:39 2025 GMT
        Subject: CN=1CC19483693AC9E9DFC013703A7554BD34BCFC2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:09:73:53:f1:2d:bf:e8:3b:e7:d9:ce:f7:
                    88:3f:48:8b:a2:b9:82:24:9b:f0:9e:02:f4:ce:da:
                    92:2d:bb:23:fe:a2:3e:e2:7b:3d:a6:bb:9b:da:29:
                    53:ea:5b:42:d1:1d:34:71:05:a4:16:8c:4e:2c:c6:
                    68:2f:86:e7:ba:77:af:c4:f5:10:bf:80:24:6b:de:
                    50:c4:b8:3c:44:89:51:83:d2:0b:13:8a:4b:0b:53:
                    ef:cc:29:6c:90:5c:a3:ed:fd:65:af:0c:53:9e:85:
                    5c:3f:cb:1c:ff:c6:e0:c0:ba:9e:c4:29:ba:d8:68:
                    21:27:72:27:64:44:27:d6:b6:94:05:55:88:ad:e9:
                    fb:95:f5:c2:16:36:57:e7:5c:67:0a:c0:8c:36:22:
                    67:b8:78:99:09:9d:6f:88:0b:67:cb:f5:aa:e9:83:
                    96:02:3b:cf:a1:ac:1d:b3:b0:aa:08:2d:b1:59:3a:
                    b5:94:a8:b8:9f:af:18:07:be:2d:02:f8:e7:19:f4:
                    0b:36:fa:a6:63:fa:73:2f:1e:aa:37:40:69:b0:3f:
                    59:53:fd:63:51:f6:a6:a7:4c:be:5e:8a:9b:b0:e2:
                    64:4d:4f:8a:12:b4:22:72:31:9d:5f:26:a6:e9:e0:
                    d4:a9:65:98:c0:d6:ca:b4:83:fb:e6:1f:8b:bd:49:
                    18:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C1:94:83:69:3A:C9:E9:DF:C0:13:70:3A:75:54:BD:34:BC:FC:2D
            X509v3 Authority Key Identifier:
                keyid:3B:65:0A:E1:30:21:7D:C1:91:EA:44:A0:22:BA:BF:2E:EC:E6:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3137372e39322e3232342e302f32302d3234203d3e203238323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:b3:01:ad:88:3b:99:db:50:3a:f7:d4:32:43:02:33:89:d3:
         bf:9e:22:ae:a4:bc:08:81:bb:b6:37:a7:85:de:6a:a6:3d:a6:
         60:93:25:b7:9c:5b:fc:32:61:01:f1:d0:24:ce:22:50:c9:bc:
         67:9d:fb:7c:9e:b5:61:c9:3f:14:87:78:fa:e1:73:0d:49:53:
         15:44:9e:9e:ff:e7:39:b0:61:7e:a0:3b:c7:f8:ed:e9:b3:f7:
         33:85:b1:53:34:56:e7:9b:78:40:35:00:80:ed:86:ab:bc:bb:
         0a:c2:d1:3c:08:13:80:93:e4:11:8f:61:dc:2b:93:df:9e:ee:
         56:11:08:33:06:cc:a7:62:ac:79:51:91:7a:94:62:9c:20:d5:
         d3:2f:41:1e:d5:b2:31:01:e0:25:b1:52:b5:56:93:8a:17:12:
         e2:37:e0:80:72:b4:93:0a:5a:ed:fd:19:64:73:b1:9b:3d:80:
         65:b1:8e:10:89:c1:40:82:1e:23:e5:63:49:ba:95:a6:17:7c:
         b1:76:be:90:e3:cd:0b:78:65:0f:ea:f8:18:4f:65:3d:f2:1f:
         dc:e3:7e:30:65:a7:d3:6e:a8:2a:5a:71:fd:03:b5:41:bb:76:
         8b:2a:8a:32:b9:48:34:a0:a7:83:06:01:03:3d:bc:2c:31:fe:
         a7:ef:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org