Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3133372e3234382e302f32312d3231203d3e203532373438.roa
File:                     3137372e3133372e3234382e302f32312d3231203d3e203532373438.roa (raw, json)
Hash identifier:          9TJSLetj4BnuW1yjqHFnUy5hsfpFArG4hHnFcP1KcJw=
Subject key identifier:   3C:C3:AC:E1:E0:5A:FD:43:E4:1A:84:FD:B9:7B:71:68:02:85:52:68
Certificate issuer:       /CN=744C871E408F6C1C747A737D3AACACE3BFFA0A63
Certificate serial:       5C7F0742AD6C865DC1D9AA4DDC30630FB9F4DC16
Authority key identifier: 74:4C:87:1E:40:8F:6C:1C:74:7A:73:7D:3A:AC:AC:E3:BF:FA:0A:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/744C871E408F6C1C747A737D3AACACE3BFFA0A63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3133372e3234382e302f32312d3231203d3e203532373438.roa
Signing time:             Tue 06 Dec 2022 18:00:05 +0000
ROA not before:           Tue 06 Dec 2022 17:55:05 +0000
ROA not after:            Tue 05 Dec 2023 18:00:05 +0000
asID:                     52748
IP address blocks:        177.137.248.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7f:07:42:ad:6c:86:5d:c1:d9:aa:4d:dc:30:63:0f:b9:f4:dc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744C871E408F6C1C747A737D3AACACE3BFFA0A63
        Validity
            Not Before: Dec  6 17:55:05 2022 GMT
            Not After : Dec  5 18:00:05 2023 GMT
        Subject: CN=3CC3ACE1E05AFD43E41A84FDB97B716802855268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1d:48:1f:1a:fc:2b:79:1c:bf:9f:6f:12:87:
                    6a:9d:8d:7f:89:8d:ec:c2:94:50:94:2b:11:ca:0c:
                    54:73:b8:d4:de:bb:cf:30:f5:48:82:72:ba:2c:08:
                    cd:f8:70:97:40:3d:4b:1c:a9:fb:b7:b2:f2:c2:62:
                    af:7f:4a:f9:00:2f:4a:25:86:41:82:b3:a3:d7:f6:
                    bb:12:47:de:74:80:c2:58:83:72:30:09:2c:74:1a:
                    99:a3:40:61:74:34:a1:83:e9:7e:0b:3f:62:ab:c3:
                    26:13:4c:00:c4:4a:93:b3:c5:48:5a:99:c1:ef:a9:
                    f6:5b:04:30:38:03:9d:75:88:97:88:f9:10:71:f8:
                    77:13:c1:9b:a9:25:75:75:2a:64:42:83:b8:e6:be:
                    2c:17:3b:3c:1e:1d:d2:99:e1:9c:df:d2:91:23:d8:
                    8b:86:61:97:37:a6:08:52:94:07:64:c6:c6:57:62:
                    a8:16:a3:bf:07:cc:f6:50:d3:a5:8f:0b:13:97:89:
                    67:81:0a:b7:e5:9e:99:d1:a6:6c:af:5c:fc:89:60:
                    76:f0:33:90:62:ec:d9:c8:d0:d9:74:75:0e:06:bb:
                    d3:0e:bd:5c:8a:1a:40:1c:f6:23:9b:49:e3:83:8d:
                    01:d4:e9:b7:ea:da:3b:5e:bc:99:7a:dc:dd:86:af:
                    5a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C3:AC:E1:E0:5A:FD:43:E4:1A:84:FD:B9:7B:71:68:02:85:52:68
            X509v3 Authority Key Identifier:
                keyid:74:4C:87:1E:40:8F:6C:1C:74:7A:73:7D:3A:AC:AC:E3:BF:FA:0A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/744C871E408F6C1C747A737D3AACACE3BFFA0A63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/744C871E408F6C1C747A737D3AACACE3BFFA0A63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3133372e3234382e302f32312d3231203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bb:85:54:7d:97:43:59:55:e0:c4:99:80:b3:84:6f:eb:8c:af:
         f3:24:9a:f4:e5:d7:9a:7a:72:b0:8d:d1:7f:d4:59:6e:1e:83:
         c9:02:bd:70:eb:f4:1d:e2:90:36:ac:c5:98:bb:e8:71:a1:71:
         3a:7a:4e:85:45:c3:fd:53:b1:41:38:d9:45:a7:e6:f7:72:b8:
         a0:67:51:74:41:f5:1e:f8:da:9c:e5:92:03:e5:5a:c8:7a:c5:
         33:02:4f:d6:03:c1:17:4c:40:bc:d7:e9:d3:a5:a1:a8:26:f4:
         c9:81:57:24:09:6c:f0:aa:7e:de:98:6a:c0:ef:fb:2e:ce:6f:
         83:ab:60:e1:e0:79:d1:59:c2:b8:55:e1:5e:d6:0f:31:40:14:
         ff:cc:93:ab:6a:0e:fa:31:75:3a:a5:59:11:87:88:bd:8a:f4:
         1a:a9:69:f0:5f:b1:dc:a5:e1:f1:af:b8:23:d8:23:53:29:f8:
         a7:2d:48:b2:9c:49:e9:7f:ed:ca:a2:4a:f5:47:95:21:8e:81:
         28:bd:14:af:91:b3:4f:ea:05:e1:c3:1d:0e:9e:ec:c2:f6:46:
         e3:9e:4a:32:ef:92:80:81:77:48:2a:48:71:b3:f7:d4:52:8d:
         cd:30:fa:47:44:9e:07:40:3d:cd:d2:88:30:17:e6:9a:93:f1:
         04:20:3b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org