Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3135322e302f32312d3231203d3e20323632353035.roa
File:                     3137372e35352e3135322e302f32312d3231203d3e20323632353035.roa (raw, json)
Hash identifier:          thK5QzwcUM6f9sKGRwxxUgpebyDrcizClRqoZhpjjmc=
Subject key identifier:   1B:E3:A6:87:EE:02:39:FF:8B:B7:46:0E:26:8B:10:FA:43:0F:FE:2C
Certificate issuer:       /CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
Certificate serial:       5BB45CA8E5CA3442557266B7A82525D95C2D9C4F
Authority key identifier: 2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3135322e302f32312d3231203d3e20323632353035.roa
Signing time:             Mon 12 Feb 2024 13:14:29 +0000
ROA not before:           Mon 12 Feb 2024 13:09:29 +0000
ROA not after:            Mon 10 Feb 2025 13:14:29 +0000
asID:                     262505
IP address blocks:        177.55.152.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b4:5c:a8:e5:ca:34:42:55:72:66:b7:a8:25:25:d9:5c:2d:9c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
        Validity
            Not Before: Feb 12 13:09:29 2024 GMT
            Not After : Feb 10 13:14:29 2025 GMT
        Subject: CN=1BE3A687EE0239FF8BB7460E268B10FA430FFE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c5:ed:b7:9f:4c:da:1e:66:0c:9e:27:ad:3a:
                    2d:1f:9c:fb:e9:8d:fc:66:dd:89:b1:72:6b:00:bd:
                    d0:bc:53:f1:90:b6:10:db:82:88:f3:d8:26:ab:a1:
                    39:97:40:16:4b:31:4b:9e:13:c0:42:ee:45:a7:91:
                    a9:2a:d7:c9:94:4d:8c:b3:76:9b:ba:88:5e:03:ab:
                    f8:34:0b:08:7a:e6:35:c9:32:9a:40:39:dc:89:b3:
                    ca:f1:d5:30:66:59:37:c2:c8:40:f5:4e:31:4b:66:
                    a3:7e:6b:56:6a:5b:27:cc:5b:f7:0b:d0:a0:06:fd:
                    97:c8:9a:41:e8:bf:31:ea:a1:d6:5f:25:c8:42:4c:
                    ba:82:d6:11:50:19:ba:5c:be:f4:37:94:0c:96:a2:
                    bb:eb:ea:4b:3c:5b:e5:91:35:53:8d:f2:4a:27:97:
                    ec:66:82:dc:bf:4b:00:81:99:59:fa:78:bb:74:80:
                    01:29:5c:57:75:89:4c:05:8c:e0:01:9e:99:ba:89:
                    35:28:89:d7:07:b2:09:68:71:7d:fa:d3:0c:89:02:
                    1e:8e:16:4a:db:38:67:87:f5:9d:ba:81:8b:e9:53:
                    ed:e5:f9:04:83:d6:8e:a2:49:79:e3:e4:59:ba:56:
                    54:e4:b7:7a:d2:03:00:d3:63:bc:60:d0:1a:e9:1b:
                    c0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E3:A6:87:EE:02:39:FF:8B:B7:46:0E:26:8B:10:FA:43:0F:FE:2C
            X509v3 Authority Key Identifier:
                keyid:2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3135322e302f32312d3231203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:f4:27:69:40:20:ee:4c:5a:e9:80:02:b7:28:a6:33:f1:b7:
         43:e5:75:a5:9e:3e:6e:e5:12:0f:27:2f:75:c0:e4:52:d8:f0:
         15:7a:a1:59:48:6b:96:a4:c5:45:8b:e4:bc:0a:6b:ab:66:00:
         3b:01:92:e9:15:62:e8:b1:9e:91:c9:72:1d:36:91:48:37:bf:
         49:73:1b:5d:c7:fa:bf:ea:b9:ca:ee:63:34:ea:c1:cd:5f:37:
         b2:d9:2b:e5:36:10:df:3b:02:14:f4:4b:96:5e:04:0b:04:5b:
         89:86:c4:ff:87:8e:c1:e0:02:eb:5b:66:c4:8a:fc:38:5e:b3:
         f9:13:a6:c8:a5:f8:09:73:cf:50:d5:56:b2:46:59:9c:54:d4:
         e9:35:88:e4:a2:f8:cb:e2:a6:8b:59:31:42:6f:d0:e9:70:9f:
         29:22:d8:12:d1:e9:4b:eb:3b:9d:62:3d:9a:ec:51:20:94:fc:
         c8:89:57:ba:cd:c5:ed:59:dc:72:95:d2:24:7f:14:88:e6:d1:
         eb:51:6c:71:6c:63:66:54:6d:66:5c:9a:04:92:24:13:ed:7d:
         31:97:76:66:ef:8c:e2:4e:fa:d4:72:b5:11:7f:ee:ab:d7:c1:
         b9:b0:46:e1:90:3d:7b:79:26:01:b5:07:0c:41:3f:28:25:29:
         aa:dd:10:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org