Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/y3nNEtb1v1a5AfB7bXittXJYAQacUuVpRCZSSNhaKKY/0/3137372e38362e3231362e302f32312d3231203d3e203532353737.roa
File:                     3137372e38362e3231362e302f32312d3231203d3e203532353737.roa (raw, json)
Hash identifier:          NDhXy1eDa9iCJKStj0YaT4nv7pN8++x3OXoHG3dlk5g=
Subject key identifier:   63:89:D7:AC:3A:6E:1A:99:2B:FE:59:14:05:48:28:24:AE:88:5C:43
Certificate issuer:       /CN=F9CFBEF845DAC73AEAAC81A34EB811728968C35B
Certificate serial:       62C884A3C6C3956FD97A6E89EE82E9FE6497F772
Authority key identifier: F9:CF:BE:F8:45:DA:C7:3A:EA:AC:81:A3:4E:B8:11:72:89:68:C3:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9CFBEF845DAC73AEAAC81A34EB811728968C35B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/y3nNEtb1v1a5AfB7bXittXJYAQacUuVpRCZSSNhaKKY/0/3137372e38362e3231362e302f32312d3231203d3e203532353737.roa
Signing time:             Wed 31 Aug 2022 01:09:18 +0000
ROA not before:           Wed 31 Aug 2022 01:04:18 +0000
ROA not after:            Wed 30 Aug 2023 01:09:18 +0000
asID:                     52577
IP address blocks:        177.86.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c8:84:a3:c6:c3:95:6f:d9:7a:6e:89:ee:82:e9:fe:64:97:f7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9CFBEF845DAC73AEAAC81A34EB811728968C35B
        Validity
            Not Before: Aug 31 01:04:18 2022 GMT
            Not After : Aug 30 01:09:18 2023 GMT
        Subject: CN=6389D7AC3A6E1A992BFE591405482824AE885C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:67:67:6f:05:57:19:04:96:4f:f8:3d:02:
                    ca:c1:d5:72:94:30:de:13:e7:81:b1:65:1b:05:3c:
                    c3:44:da:d0:03:ee:0a:a2:f5:e9:4c:81:e6:c8:19:
                    79:75:0b:1b:05:e2:53:c2:2e:bc:df:0e:a5:68:01:
                    06:13:fd:db:48:eb:9f:75:b8:81:27:93:3a:b1:17:
                    d9:b7:90:b2:3d:b7:48:47:54:8b:85:73:00:00:f9:
                    18:f3:e1:20:5c:24:d2:82:1e:6c:c2:28:2e:7f:63:
                    dd:d1:da:77:dc:d8:47:8f:51:4b:a4:4f:c1:66:71:
                    1d:35:1d:7d:63:58:9d:63:37:b3:ae:56:20:1f:b0:
                    7a:93:6b:1b:53:f9:4d:1d:da:ea:67:00:b9:c3:23:
                    da:ff:8d:13:75:e4:65:e1:4c:a5:62:46:f8:68:f0:
                    99:3f:47:1b:a0:40:0f:74:6d:12:4b:1b:13:7f:b1:
                    1b:95:06:60:8a:97:85:ad:31:d5:fc:11:18:30:e0:
                    25:35:27:65:c5:7a:65:bb:8f:38:33:70:61:75:ff:
                    62:d3:47:40:3c:07:2a:14:a6:81:e3:b6:17:33:11:
                    11:8b:7c:94:87:6b:2f:50:ab:7d:7f:92:b8:ad:29:
                    3e:50:1a:72:1d:6c:ff:97:1b:02:63:b8:dd:13:a9:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:89:D7:AC:3A:6E:1A:99:2B:FE:59:14:05:48:28:24:AE:88:5C:43
            X509v3 Authority Key Identifier:
                keyid:F9:CF:BE:F8:45:DA:C7:3A:EA:AC:81:A3:4E:B8:11:72:89:68:C3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/y3nNEtb1v1a5AfB7bXittXJYAQacUuVpRCZSSNhaKKY/0/F9CFBEF845DAC73AEAAC81A34EB811728968C35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9CFBEF845DAC73AEAAC81A34EB811728968C35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/y3nNEtb1v1a5AfB7bXittXJYAQacUuVpRCZSSNhaKKY/0/3137372e38362e3231362e302f32312d3231203d3e203532353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:34:04:24:86:5b:fe:5c:79:ef:e7:b4:8a:28:63:31:b0:15:
         aa:90:f5:ad:58:c0:28:81:ec:30:00:14:a5:eb:a8:71:9d:fe:
         5f:02:d1:63:c6:76:5b:cf:05:97:4e:47:75:90:75:86:b4:d0:
         4d:4d:5a:0b:29:7e:4a:75:c5:96:98:00:47:18:98:e7:d2:14:
         f1:9a:58:0c:f0:55:94:49:a5:d8:d4:72:3b:0f:e1:8f:72:69:
         d0:0a:c2:39:08:62:e7:fa:14:40:83:a1:74:a2:a6:b0:50:5d:
         7c:3c:8c:00:cd:96:19:1a:14:be:02:74:eb:99:45:9c:54:98:
         53:4c:72:a9:54:2d:46:f7:41:ca:bf:9b:f3:b9:e8:18:f9:cd:
         8a:92:7e:de:dd:c1:2c:c9:7f:5d:47:64:f2:21:b7:0d:64:f5:
         00:83:e1:a0:af:56:e0:a5:31:55:1f:40:bf:81:ac:42:25:5d:
         56:fb:25:57:7f:17:af:a7:ba:ea:27:b7:d0:56:7b:8c:3b:d0:
         e9:ab:39:92:c8:f2:1c:03:44:43:f8:7a:d6:13:57:07:e0:9f:
         e6:bc:25:b6:17:88:bb:34:98:7c:c4:c8:b9:2a:15:c9:ce:9a:
         1c:3a:66:ce:4e:5f:ce:c2:8a:4d:54:fa:89:51:7a:c2:d4:83:
         3b:9d:e3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org