Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35342e302f32342d3234203d3e203533303438.roa
File:                     3137372e3133372e35342e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          CXsJAJcy3ytwsAOLnLry7uHIJ/gnqBwZpKnorqc0iO4=
Subject key identifier:   C7:28:AF:5E:45:DD:0B:46:B5:8B:78:28:3D:84:DC:A0:7A:3A:EE:23
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       613073B6A2A309AA62756397968E40261C6F731B
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35342e302f32342d3234203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:14 +0000
ROA not before:           Wed 23 Nov 2022 18:34:14 +0000
ROA not after:            Wed 22 Nov 2023 18:39:14 +0000
asID:                     53048
IP address blocks:        177.137.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:30:73:b6:a2:a3:09:aa:62:75:63:97:96:8e:40:26:1c:6f:73:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:14 2022 GMT
            Not After : Nov 22 18:39:14 2023 GMT
        Subject: CN=C728AF5E45DD0B46B58B78283D84DCA07A3AEE23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:52:86:c4:f2:c2:37:c5:55:5a:33:c7:a7:
                    8e:95:9b:88:cd:8e:48:13:40:4b:65:bb:fb:78:f1:
                    9a:f5:d4:3f:a2:6d:29:95:0e:ac:19:ff:02:ca:d2:
                    72:81:ca:8f:c1:d9:48:f8:1b:01:d3:f5:4c:d8:5a:
                    03:01:df:96:2b:73:6a:ab:4f:4b:c7:d3:a0:27:62:
                    2e:12:b5:64:e1:40:61:36:3f:30:6f:61:d4:0c:d8:
                    b6:54:ee:c0:b5:7b:73:f6:20:1c:ba:99:a9:46:34:
                    94:2a:48:6c:a3:d2:24:4b:e0:34:be:ec:07:27:0e:
                    93:7d:c0:04:29:aa:5a:f9:9f:01:20:0e:8a:84:d8:
                    5c:cf:39:c4:01:c3:c9:df:82:1f:41:08:fc:6c:10:
                    39:15:1f:e8:ec:1e:93:76:63:a2:26:90:3d:91:aa:
                    a4:03:51:be:3c:c5:6c:2a:2a:5a:6a:a3:3e:56:f0:
                    f3:a7:00:3d:a4:c0:a3:92:6f:5b:6a:bd:ee:73:55:
                    87:5a:aa:a3:6a:81:f6:d1:82:b8:db:84:3d:4d:bc:
                    bf:5e:f2:2e:cb:12:a6:5d:00:cc:40:58:03:ec:e7:
                    56:42:5d:c3:71:3f:09:7b:95:de:eb:66:09:ec:71:
                    72:69:88:b1:4f:f2:31:1a:bb:68:4f:78:8b:e2:da:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:28:AF:5E:45:DD:0B:46:B5:8B:78:28:3D:84:DC:A0:7A:3A:EE:23
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35342e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:f8:4a:c9:31:38:80:c5:8c:7c:c6:ad:81:7f:9a:a4:00:71:
         85:48:b9:0a:78:b3:62:31:83:a8:0e:05:f7:69:91:25:11:53:
         fa:32:c8:14:ec:2a:a8:0a:98:30:40:e5:d7:90:fa:d9:5f:5b:
         51:c1:37:82:7e:e7:8b:ba:48:8e:c5:e2:6b:d2:1a:a6:96:22:
         5e:c4:e8:c6:6d:05:e6:7d:dc:f9:2b:b8:c9:4c:9d:e8:55:00:
         9f:0b:88:89:b8:d3:40:76:d5:f1:00:57:e3:92:f6:50:08:84:
         c5:b6:3e:bf:70:67:19:1e:47:1d:0e:33:70:e3:42:24:0e:af:
         eb:f3:c1:f3:17:09:8a:7c:ae:1f:24:ae:53:ca:fa:1c:b0:3f:
         4b:a3:d7:09:56:7f:07:f9:43:3a:a2:0c:93:c9:cd:9a:01:18:
         72:89:ac:9c:56:0b:d8:be:02:fb:3b:f6:0c:eb:87:50:8b:7e:
         01:fc:f8:80:93:eb:e6:1f:6b:d3:8a:05:ae:ae:08:a7:f6:39:
         05:a9:36:27:5a:cd:7b:2c:ac:e7:25:f7:c2:08:4b:c6:57:98:
         e9:dd:c9:57:1d:41:28:a8:69:a9:d6:50:5b:18:08:85:0e:6b:
         22:1e:44:94:e3:55:d3:7f:70:56:64:02:ad:84:da:26:f0:72:
         f4:3d:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-fra.rpki-client.org