Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/3137372e37322e3135362e302f32322d3332203d3e203532383231.roa
File:                     3137372e37322e3135362e302f32322d3332203d3e203532383231.roa (raw, json)
Hash identifier:          eEVsdNJH8ayImdPyKqj2hmppoMvrcFsaJ/pVESr6Quk=
Subject key identifier:   AC:91:10:14:94:F9:C5:F0:A7:D4:DC:69:34:5F:17:64:AF:6F:28:0F
Certificate issuer:       /CN=47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3
Certificate serial:       451B1D28785476D79A9540C02A007E8ADF48F15D
Authority key identifier: 47:E7:DC:55:F4:FB:A4:DD:E2:B6:BD:A8:3D:31:03:59:39:43:A8:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/3137372e37322e3135362e302f32322d3332203d3e203532383231.roa
Signing time:             Tue 09 Jan 2024 14:40:55 +0000
ROA not before:           Tue 09 Jan 2024 14:35:55 +0000
ROA not after:            Tue 07 Jan 2025 14:40:55 +0000
asID:                     52821
IP address blocks:        177.72.156.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1b:1d:28:78:54:76:d7:9a:95:40:c0:2a:00:7e:8a:df:48:f1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3
        Validity
            Not Before: Jan  9 14:35:55 2024 GMT
            Not After : Jan  7 14:40:55 2025 GMT
        Subject: CN=AC91101494F9C5F0A7D4DC69345F1764AF6F280F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:83:4d:05:04:40:93:8e:03:7d:9c:05:d2:
                    ca:f3:16:f7:76:df:fe:17:c7:f7:09:0c:ba:59:6c:
                    5f:02:a1:3a:72:cd:95:21:6c:c6:fa:54:e9:14:de:
                    fc:ad:27:7d:f0:0f:84:34:fe:9b:f3:cb:35:6a:66:
                    de:cf:93:9c:54:61:df:94:ff:35:96:37:c9:55:84:
                    38:50:01:be:78:20:96:ed:f5:29:5a:0b:98:a4:6c:
                    bf:b7:e6:1b:63:77:8d:94:db:27:46:8f:19:37:9c:
                    e1:58:08:17:30:31:ac:57:e0:a8:1c:b6:18:b6:3f:
                    be:ce:aa:25:4d:29:5f:15:52:ae:88:42:c7:c2:39:
                    26:0c:b4:62:14:df:72:07:18:01:03:10:07:fb:d3:
                    11:8c:7f:1b:78:92:b5:dc:08:18:00:0a:08:42:15:
                    ff:8a:e0:79:ec:ce:ca:2c:a5:e9:15:5f:05:eb:45:
                    b3:17:80:cb:69:a4:e1:b6:f4:9c:f6:2a:ab:31:39:
                    9a:b4:02:ea:48:c6:49:c2:6b:d7:37:94:71:f6:4a:
                    44:04:95:27:05:2e:aa:2f:99:45:7a:73:f1:63:0a:
                    8b:f2:04:f7:0d:d5:a1:d9:09:02:b2:9d:76:e1:81:
                    5d:57:39:97:83:3e:ad:ed:4e:b9:c2:73:5f:83:c9:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:91:10:14:94:F9:C5:F0:A7:D4:DC:69:34:5F:17:64:AF:6F:28:0F
            X509v3 Authority Key Identifier:
                keyid:47:E7:DC:55:F4:FB:A4:DD:E2:B6:BD:A8:3D:31:03:59:39:43:A8:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/3137372e37322e3135362e302f32322d3332203d3e203532383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:8a:c2:0c:1b:5e:47:56:9d:e9:fd:1e:27:1a:5a:f7:ed:
         92:85:a1:57:bd:f8:23:0e:e5:a6:d9:23:7f:1d:e0:ec:3f:74:
         36:1f:f7:40:ab:2d:65:88:26:ae:1f:ec:4a:8d:34:2e:bb:cf:
         f0:0e:ea:09:e3:35:47:eb:dc:b1:19:e0:f6:a6:cc:3b:8a:e9:
         24:5b:d0:43:11:68:59:98:47:bc:b6:52:48:ee:c8:be:66:11:
         2a:9c:04:2d:60:6e:49:23:83:9c:df:3d:71:2c:59:e4:20:99:
         0e:be:36:fb:1d:9b:fa:84:81:72:88:c1:73:24:06:84:a0:94:
         4d:13:cd:87:c2:9f:20:b7:d5:d5:e1:f7:d6:1b:40:e1:4b:aa:
         f8:9e:73:43:46:06:b1:f1:ba:39:92:33:5f:f9:93:e4:1f:ed:
         9e:bb:79:87:72:49:87:cc:8b:f4:0b:a0:24:93:52:da:ca:43:
         8f:4a:e7:c6:c6:71:21:59:27:3d:64:07:a9:56:7c:70:30:29:
         8d:69:50:11:4a:a2:ea:2f:5e:8f:e2:b0:56:5c:5a:cc:f4:e7:
         38:09:9a:fa:d0:ef:60:65:d7:03:67:e5:1b:71:7b:fc:44:8a:
         63:3c:fb:47:33:8c:86:a8:44:c0:81:52:ee:50:32:de:56:02:
         2c:df:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org