Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e302e302f32332d3234203d3e203532383731.roa
File:                     3137372e3133362e302e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          O9dmjLJffEdiTVDbmP+AyiB04qLvDT8zXCfdIwMt9Wg=
Subject key identifier:   7C:D5:00:6C:2A:69:32:40:F5:E3:9E:48:18:CC:8B:37:FD:06:3C:C7
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       04BF9B48B2BAA27FBB4D2E5220BA59D71125EE23
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e302e302f32332d3234203d3e203532383731.roa
Signing time:             Thu 26 Oct 2023 16:02:44 +0000
ROA not before:           Thu 26 Oct 2023 15:57:44 +0000
ROA not after:            Thu 24 Oct 2024 16:02:44 +0000
asID:                     52871
IP address blocks:        177.136.0.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bf:9b:48:b2:ba:a2:7f:bb:4d:2e:52:20:ba:59:d7:11:25:ee:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Oct 26 15:57:44 2023 GMT
            Not After : Oct 24 16:02:44 2024 GMT
        Subject: CN=7CD5006C2A693240F5E39E4818CC8B37FD063CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:0c:bf:b0:f5:ff:0d:f2:ce:8d:a9:35:a8:
                    03:89:5f:12:7c:f6:0f:10:37:fd:cc:89:b8:e6:8b:
                    8f:b9:b7:3c:56:2b:7a:c5:60:15:b5:88:27:0b:59:
                    7c:ec:e0:87:a2:f8:09:be:d6:cd:95:3e:f7:b3:2c:
                    e5:09:3d:3a:08:64:c9:e2:bd:09:5c:b8:97:fb:01:
                    ad:83:00:6a:0f:7a:c7:2a:15:d8:01:46:82:81:89:
                    31:ee:cc:c7:76:43:45:e2:69:19:4d:8f:04:12:32:
                    79:1f:2b:fe:34:92:9b:34:be:98:20:f3:a0:3f:db:
                    71:42:f1:53:3f:ad:be:da:48:3b:f5:00:10:df:7b:
                    0f:0a:e7:f7:5d:43:01:17:9e:ce:d8:d1:86:c0:04:
                    ac:87:fb:ec:fe:cd:64:ef:32:45:5f:40:f7:50:d1:
                    91:d8:65:94:f0:f9:69:b9:5b:da:84:30:e8:06:dc:
                    c8:ff:b3:94:49:e3:59:aa:07:68:49:bc:2a:d9:d2:
                    f4:26:bd:db:72:01:b1:d9:77:97:b1:21:a4:2e:2f:
                    10:8b:0f:f6:6a:00:2b:51:02:af:e5:ae:b6:f6:92:
                    dd:33:1f:c9:ad:c0:3e:b1:b4:ee:8a:8c:2a:94:9a:
                    6d:76:fd:74:9e:4b:f8:99:46:5d:73:de:67:c9:99:
                    24:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D5:00:6C:2A:69:32:40:F5:E3:9E:48:18:CC:8B:37:FD:06:3C:C7
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e302e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:38:dd:43:a1:8e:23:4b:a7:d9:48:f9:21:27:0e:2d:de:4d:
         f4:12:5e:b3:dc:e4:48:be:ac:87:cd:e2:73:af:9c:89:b2:b6:
         65:fc:d1:ec:f8:ed:50:0f:e7:d9:ab:87:f8:8c:82:65:69:96:
         17:63:3c:e8:fe:e2:53:10:a4:d0:59:d6:41:0d:89:c8:8b:e1:
         d3:43:b6:40:5a:ed:6c:46:29:c5:04:4c:d8:84:40:a4:0b:cb:
         14:53:f0:92:4b:2c:af:1b:1d:c7:b1:0c:cf:66:c6:84:b5:0a:
         cf:42:93:ff:56:c8:90:92:b9:f8:64:b1:01:e5:03:0b:ef:8f:
         a2:c8:b1:18:ba:31:d1:c6:bc:59:1c:aa:1f:43:3d:9c:63:03:
         30:fa:07:3a:9a:58:65:cd:fa:d9:04:3b:0b:d5:29:12:cb:36:
         4f:32:4f:eb:04:0f:7c:1d:a1:cd:2a:77:1a:93:ff:06:42:14:
         e8:9d:df:f3:f3:62:05:ce:20:c0:a9:c1:d8:77:e2:8d:60:61:
         cc:56:f4:73:f4:73:74:06:aa:1c:da:bd:2f:a2:c4:d2:e6:b0:
         4c:29:51:2a:cb:72:d7:cb:37:3b:de:bb:ab:48:60:56:6f:18:
         9f:16:38:2e:67:58:7a:ff:06:bf:51:3a:0f:59:f7:a5:ae:b7:
         9c:cb:3e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org