Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa
File:                     3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa (raw, json)
Hash identifier:          NnvRfUCfag8QFaIQTS5oNQXX/suXrZjDlqwdt70KMhE=
Subject key identifier:   78:36:5D:BD:4A:5C:47:49:24:C3:D6:6B:39:20:3E:E4:63:CC:F5:37
Certificate issuer:       /CN=6D52CD8BD09198EF226E5087C7F2A88085A91B46
Certificate serial:       02064E965A2FA03AC745C98FC5E65092EE573622
Authority key identifier: 6D:52:CD:8B:D0:91:98:EF:22:6E:50:87:C7:F2:A8:80:85:A9:1B:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D52CD8BD09198EF226E5087C7F2A88085A91B46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa
Signing time:             Fri 09 Feb 2024 15:49:25 +0000
ROA not before:           Fri 09 Feb 2024 15:44:25 +0000
ROA not after:            Fri 07 Feb 2025 15:49:25 +0000
asID:                     28584
IP address blocks:        177.129.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:06:4e:96:5a:2f:a0:3a:c7:45:c9:8f:c5:e6:50:92:ee:57:36:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D52CD8BD09198EF226E5087C7F2A88085A91B46
        Validity
            Not Before: Feb  9 15:44:25 2024 GMT
            Not After : Feb  7 15:49:25 2025 GMT
        Subject: CN=78365DBD4A5C474924C3D66B39203EE463CCF537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:95:c6:9e:b1:8c:a7:71:ca:2e:58:df:f6:a4:
                    45:13:b0:3b:b1:e1:3a:99:d6:ba:fd:06:86:c4:62:
                    38:0c:ae:f2:6d:ce:86:ed:e4:67:ff:d1:6b:c7:92:
                    1a:0d:04:41:39:ae:c2:8a:a8:fd:db:5a:3b:e3:01:
                    33:19:1c:58:72:7a:d1:86:c8:78:48:59:12:9a:ec:
                    d3:c6:45:aa:b4:2e:8f:5e:47:12:6f:06:bd:2d:90:
                    41:f1:a2:92:f6:f3:bd:83:0e:e4:9e:54:47:3e:7c:
                    4d:ef:45:8b:2c:f8:c1:d8:f3:d0:06:9f:fe:ad:3e:
                    eb:da:6e:fc:1a:79:6a:58:01:47:3c:a1:db:77:f8:
                    3e:05:b4:f4:fa:93:01:83:49:c6:40:9e:a6:e6:5a:
                    05:74:aa:bb:8a:59:b7:78:58:6a:4c:bc:05:30:10:
                    ea:da:0c:61:2a:c7:6e:66:f1:09:87:01:7d:a1:c1:
                    4f:1e:df:46:f7:05:66:e7:32:d4:c5:4a:36:9a:60:
                    6e:d9:0a:70:01:7e:6b:d6:7f:01:e9:df:22:16:94:
                    2b:a2:70:c8:0c:95:f0:f7:2e:04:f2:48:b7:60:b8:
                    4b:8a:89:11:39:04:78:d5:b7:0d:84:cf:e8:d3:6f:
                    ed:cf:7b:e2:e2:07:58:7a:63:c8:6b:a6:c0:de:b8:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:36:5D:BD:4A:5C:47:49:24:C3:D6:6B:39:20:3E:E4:63:CC:F5:37
            X509v3 Authority Key Identifier:
                keyid:6D:52:CD:8B:D0:91:98:EF:22:6E:50:87:C7:F2:A8:80:85:A9:1B:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/6D52CD8BD09198EF226E5087C7F2A88085A91B46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D52CD8BD09198EF226E5087C7F2A88085A91B46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:e1:87:05:8b:18:f2:19:2d:46:3c:4a:29:46:4b:3b:04:40:
         aa:f1:d0:f7:60:92:e5:05:10:42:97:1d:6c:a9:18:de:36:a4:
         5c:70:6d:59:f1:2c:24:4e:9f:bf:df:35:49:81:80:3d:ef:83:
         5f:86:d4:ab:59:54:0b:13:40:8b:ea:88:58:6d:b4:2f:f1:d8:
         bc:29:a4:68:c6:9e:9d:1b:e4:22:1a:20:2f:e6:1b:00:90:a4:
         96:d5:f6:33:9c:b6:73:db:36:5f:23:ea:2e:d1:ce:a4:8e:07:
         d1:bf:3d:88:c8:b3:d7:e8:85:57:d8:b7:5a:bc:cb:1a:68:ef:
         1a:fe:4f:00:72:f4:70:b6:de:71:3c:89:d3:89:df:2b:97:2a:
         d1:0c:57:ae:37:09:dd:ed:c8:10:48:f9:42:b8:19:d9:1a:92:
         57:e2:0b:19:3d:43:1b:1b:df:fe:bd:48:22:1a:af:c5:2d:9a:
         9b:8f:a8:ab:9d:57:8b:ac:65:00:fa:f2:e4:52:4f:e6:4b:29:
         e5:61:10:7a:86:18:e7:c1:68:4c:4c:f7:cd:60:72:a6:4b:92:
         cb:24:46:6c:39:f6:11:92:5d:17:36:9f:38:c4:12:d9:55:c0:
         03:f4:58:43:33:f2:25:b7:b2:83:0e:bc:c9:ce:7b:e6:14:96:
         22:b0:d5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org