Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3138372e31372e3134342e302f32302d3234203d3e203238323739.roa
File:                     3138372e31372e3134342e302f32302d3234203d3e203238323739.roa (raw, json)
Hash identifier:          fi9xa0WGEEuYfumeY+EOF+nRQHTb9VAZ3HG4pNf037M=
Subject key identifier:   C3:0E:4A:57:2A:48:C5:53:03:55:D4:73:AE:33:91:0E:28:A1:B6:48
Certificate issuer:       /CN=3B650AE130217DC191EA44A022BABF2EECE6BA37
Certificate serial:       04BF7581B39921B0D731BB364677D786DCA1ABDE
Authority key identifier: 3B:65:0A:E1:30:21:7D:C1:91:EA:44:A0:22:BA:BF:2E:EC:E6:BA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3138372e31372e3134342e302f32302d3234203d3e203238323739.roa
Signing time:             Sat 24 Feb 2024 13:02:39 +0000
ROA not before:           Sat 24 Feb 2024 12:57:39 +0000
ROA not after:            Sat 22 Feb 2025 13:02:39 +0000
asID:                     28279
IP address blocks:        187.17.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bf:75:81:b3:99:21:b0:d7:31:bb:36:46:77:d7:86:dc:a1:ab:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B650AE130217DC191EA44A022BABF2EECE6BA37
        Validity
            Not Before: Feb 24 12:57:39 2024 GMT
            Not After : Feb 22 13:02:39 2025 GMT
        Subject: CN=C30E4A572A48C5530355D473AE33910E28A1B648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:85:b1:34:cb:3c:27:e3:97:4c:6a:38:b7:
                    49:f3:6a:a2:aa:aa:d3:5f:cc:0b:df:3f:47:c5:58:
                    a9:e0:6d:ea:f7:c8:79:3d:2e:b4:22:9b:12:a0:ba:
                    e6:de:46:76:2d:9e:f9:a1:ba:44:e4:43:d8:ea:3f:
                    b2:c2:7b:ae:da:a8:27:63:5c:7d:48:29:f0:e9:d0:
                    b5:b1:da:98:51:9d:98:ea:3a:95:80:29:6f:5d:b3:
                    c8:c1:a5:56:2c:71:9e:45:25:bb:ec:65:e4:ab:32:
                    48:3b:a0:8d:e7:1d:26:f5:a1:f1:5e:fa:f6:46:b2:
                    05:ba:8e:a0:a1:07:25:26:bb:95:c0:83:73:fa:c0:
                    03:e9:9c:76:b0:20:08:5b:bd:28:12:f9:43:73:e2:
                    f4:05:80:b5:ca:76:51:2b:16:9a:ad:07:1f:6b:96:
                    7e:04:51:2e:3c:16:a8:29:a7:95:65:38:67:e4:f1:
                    7e:03:45:95:dc:b0:ad:66:1a:15:ad:00:fe:95:68:
                    8b:a9:bb:2e:6d:e9:f7:4b:f9:79:cd:f4:c7:8b:56:
                    af:cf:cb:a7:06:e5:b3:83:56:03:ab:28:07:8f:d2:
                    bf:f4:54:22:3e:e9:8d:e8:cf:b7:ef:2f:dc:0d:6e:
                    49:20:33:cb:c7:17:1e:a4:0b:76:1b:71:62:b6:36:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0E:4A:57:2A:48:C5:53:03:55:D4:73:AE:33:91:0E:28:A1:B6:48
            X509v3 Authority Key Identifier:
                keyid:3B:65:0A:E1:30:21:7D:C1:91:EA:44:A0:22:BA:BF:2E:EC:E6:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3138372e31372e3134342e302f32302d3234203d3e203238323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:40:36:57:6c:b4:c1:70:93:c0:23:70:61:3c:32:1b:63:b8:
         b5:b4:eb:26:69:1a:2d:64:6b:2b:ee:ef:61:98:42:41:fb:a8:
         6c:1f:69:33:3c:ce:73:de:3c:9f:c7:0d:6f:e4:66:5e:85:c1:
         f6:ff:5f:fb:3e:f1:63:e4:7b:41:bd:fa:d0:8f:99:c1:1f:73:
         2d:85:da:e8:0e:79:55:6d:b4:b4:e1:e4:0d:c1:3b:f9:e9:3f:
         87:59:50:d4:29:ea:b9:c3:a2:d4:81:c0:02:f7:f5:c2:59:43:
         62:eb:02:a3:57:f8:1b:68:29:f5:f0:ea:2c:1c:2d:2c:b1:7e:
         ac:5d:9d:fb:09:89:fa:a3:97:25:cf:f3:cf:63:85:02:64:f6:
         f8:1a:6d:34:e1:bb:7c:87:c6:7d:a9:21:a3:f0:22:93:5e:27:
         63:cf:8e:91:f7:51:8f:4c:22:a0:58:d8:d5:9d:be:dd:2c:06:
         d3:1a:ff:21:e5:5f:09:a0:20:de:a1:ec:e0:8d:2e:a0:62:3f:
         41:fc:26:7e:79:d7:1b:42:fa:24:93:17:12:35:9f:37:d8:05:
         47:8f:9e:7a:29:d4:bc:e5:d1:e7:ba:0d:9d:8a:12:0b:11:bb:
         25:d3:49:b7:b7:88:7a:74:a7:86:9e:7c:16:74:3a:6b:b8:3b:
         dc:a3:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org