Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35302e302f32342d3234203d3e203533303438.roa
File:                     3137372e3133372e35302e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          xp+jbXF18kuuSpKlrQN0ZzZ/L2me51Ha5fG2aVNSnuA=
Subject key identifier:   B7:DA:2A:BD:7F:B0:96:87:1D:6D:EC:DB:E7:EA:AB:1D:83:9C:13:3F
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       532C4258AE35A84A3D20B10DFD3E26FCE10D36C7
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35302e302f32342d3234203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:16 +0000
ROA not before:           Wed 23 Nov 2022 18:34:16 +0000
ROA not after:            Wed 22 Nov 2023 18:39:16 +0000
asID:                     53048
IP address blocks:        177.137.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2c:42:58:ae:35:a8:4a:3d:20:b1:0d:fd:3e:26:fc:e1:0d:36:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:16 2022 GMT
            Not After : Nov 22 18:39:16 2023 GMT
        Subject: CN=B7DA2ABD7FB096871D6DECDBE7EAAB1D839C133F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:47:ab:af:ef:77:e0:22:c8:17:10:ad:d9:00:
                    43:8a:e0:92:45:ca:2e:22:c5:49:e6:a8:de:6e:7e:
                    d1:40:07:ac:bf:47:c4:e8:f7:8a:3a:42:7a:a7:83:
                    49:b3:16:a2:f7:e8:ca:5b:79:80:14:c2:fa:6e:40:
                    ad:bc:a3:b8:b4:3d:80:ae:f1:ed:60:96:76:ce:dc:
                    f4:5a:50:87:a5:92:67:5d:bc:36:2d:4f:25:88:42:
                    f5:93:75:c2:16:5c:5d:69:5b:7a:48:7a:d0:ac:04:
                    0a:af:22:d8:9f:dd:c9:ea:73:9a:53:8c:0e:52:ae:
                    96:07:66:be:48:bf:ae:c0:0e:9b:81:91:b3:b8:f9:
                    a9:d0:16:4c:3a:29:80:01:b0:ee:4a:7e:e2:eb:dc:
                    11:0a:27:de:a6:2b:2f:12:ae:f4:6b:72:6b:f6:61:
                    53:f9:f3:07:fd:6a:bf:6c:17:c8:55:ab:ea:30:f9:
                    a2:63:11:ee:ed:74:07:a5:5e:6e:5f:a0:2e:9b:67:
                    09:45:33:cf:f8:01:67:39:9c:06:f9:26:ec:77:61:
                    89:5f:38:d7:c0:bf:9e:67:8e:27:89:5f:2e:e8:b0:
                    57:84:80:76:04:5d:d0:3c:09:b5:dd:fa:ef:f7:45:
                    f8:94:55:bd:10:99:f2:92:fd:4b:8c:aa:8d:18:9a:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DA:2A:BD:7F:B0:96:87:1D:6D:EC:DB:E7:EA:AB:1D:83:9C:13:3F
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35302e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:eb:4a:d7:4b:66:82:b0:af:a2:3a:88:13:90:d9:c8:68:74:
         e8:ce:26:b5:3a:f7:08:fe:84:25:15:20:27:d1:75:38:ff:7f:
         ae:5a:9e:90:f6:36:aa:bc:c2:9f:fc:5a:05:62:99:59:9f:73:
         db:12:28:37:d2:d0:e4:81:60:96:61:5d:5c:0e:c0:f7:7e:cd:
         87:b4:71:81:9a:4b:32:13:be:e2:28:d4:74:2a:6a:86:71:8f:
         10:21:8c:46:b6:f5:9b:fb:03:a7:6f:e1:50:8b:1a:cc:63:32:
         12:0b:8e:e5:ea:7f:03:7f:62:8f:75:44:3e:4f:04:78:4b:c4:
         1b:d1:63:55:f4:d9:6d:f7:4b:8f:3e:b6:bf:cd:60:2f:cf:ce:
         d6:8a:04:17:eb:a9:87:40:3c:5e:ad:4c:6d:5b:e4:d3:11:a2:
         8f:f7:92:07:5b:37:20:df:e4:f1:3e:27:da:ea:56:4f:d7:3a:
         e0:18:8c:51:fc:c3:3f:a5:2d:c9:18:fb:50:44:e5:98:9c:75:
         33:2f:77:0a:39:42:74:34:95:2a:b9:b6:b4:d6:5c:0b:a2:6e:
         7f:4d:e4:44:d4:ff:1e:fb:71:a7:a8:4e:9a:e5:0a:a0:36:99:
         e3:81:7a:9f:df:c2:cb:42:bd:22:bd:8b:cc:5a:60:69:0f:a7:
         78:08:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:11 2023 by rpki-client on console-ams.rpki-client.org