Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e35322e3130342e302f32312d3234203d3e20323632343434.roa
File:                     3137372e35322e3130342e302f32312d3234203d3e20323632343434.roa (raw, json)
Hash identifier:          bYC0TRgmPmNCsBwz/qmQG82MQ37vJFD2/9+A6lcn/8M=
Subject key identifier:   36:84:FD:CA:FC:1E:FC:98:56:FC:AB:DB:6C:31:F4:B5:E4:8F:57:97
Certificate issuer:       /CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
Certificate serial:       36D5367377CCAEDFD4268EB9232686112B24637D
Authority key identifier: E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e35322e3130342e302f32312d3234203d3e20323632343434.roa
Signing time:             Mon 14 Aug 2023 14:04:01 +0000
ROA not before:           Mon 14 Aug 2023 13:59:01 +0000
ROA not after:            Mon 12 Aug 2024 14:04:01 +0000
asID:                     262444
IP address blocks:        177.52.104.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d5:36:73:77:cc:ae:df:d4:26:8e:b9:23:26:86:11:2b:24:63:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
        Validity
            Not Before: Aug 14 13:59:01 2023 GMT
            Not After : Aug 12 14:04:01 2024 GMT
        Subject: CN=3684FDCAFC1EFC9856FCABDB6C31F4B5E48F5797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:27:0f:42:d6:db:1a:0d:d9:6c:72:04:e6:
                    f4:18:9f:dc:f7:cd:30:cb:c3:63:6b:0f:5b:82:7d:
                    98:0e:ea:22:e2:b5:a9:4b:44:11:c3:03:f5:98:b0:
                    a5:fe:de:17:08:3d:35:be:95:d3:fd:95:d1:a1:83:
                    8e:13:8f:b7:98:90:d2:a5:0a:82:45:70:97:fe:06:
                    b5:ad:c2:11:80:c7:73:01:d7:98:15:a8:ee:35:81:
                    f5:a5:f7:ae:61:e2:01:1a:63:65:4c:8d:c7:6a:57:
                    32:95:6f:65:82:29:70:f3:d2:1e:db:7c:18:af:a4:
                    3e:13:e8:92:80:c1:90:9f:0b:77:8b:c0:04:e9:f9:
                    97:a6:5d:39:8f:96:bf:ef:3a:3e:50:66:4a:a8:13:
                    ec:7a:e1:6c:4c:48:03:25:91:d7:d2:68:ec:6f:96:
                    19:83:ef:9e:df:37:d0:c0:08:65:f8:ad:84:c9:fd:
                    1a:50:76:3f:ab:1c:08:17:0a:2c:7f:82:1b:17:fe:
                    4c:76:6e:82:e7:55:c9:87:11:a9:98:7c:cf:cb:a6:
                    58:fc:84:63:ca:ce:32:c5:1c:d7:45:cb:5f:71:28:
                    9b:16:52:4b:77:35:eb:21:9c:91:76:a7:3f:7b:80:
                    78:f8:5d:ee:80:f5:ba:99:1e:b1:0a:6d:1c:59:42:
                    73:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:84:FD:CA:FC:1E:FC:98:56:FC:AB:DB:6C:31:F4:B5:E4:8F:57:97
            X509v3 Authority Key Identifier:
                keyid:E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/3137372e35322e3130342e302f32312d3234203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:00:d9:c3:29:d2:f2:23:34:3f:1d:c1:e1:21:db:1d:ab:ce:
         c7:c9:82:e4:16:80:83:91:81:31:ed:91:5e:16:de:fe:94:9a:
         47:03:36:5d:36:d4:2f:47:aa:05:f1:81:fa:6e:cd:8c:6d:53:
         b3:77:fc:ed:a1:fa:73:6f:28:46:82:49:70:51:20:d0:3b:6d:
         43:6b:8e:e4:c5:d2:f9:0f:86:f5:54:9c:94:56:50:5d:a0:22:
         41:9f:c8:08:e2:f0:67:b1:bd:05:ea:3d:ac:7b:b3:14:4b:10:
         fb:39:30:b7:2e:68:08:12:df:73:57:d4:74:ba:35:bc:1e:8c:
         30:4c:4a:d5:49:14:52:9a:7c:08:05:f1:de:3a:22:da:25:48:
         fd:75:c1:62:f1:7a:7b:56:8a:51:b4:e1:a6:a1:22:48:47:f4:
         e9:eb:a1:15:22:e3:6c:a9:e4:14:84:a1:d4:5b:3c:2a:f1:57:
         b0:a3:27:6f:3d:84:e9:be:79:0f:ed:8d:a6:f5:35:64:3b:c7:
         c3:8c:31:65:43:9e:f0:fb:5c:71:9c:1c:17:1e:30:ff:17:a4:
         44:5b:c5:eb:8c:b7:8a:b1:df:ec:70:49:96:b6:e5:55:4f:03:
         4c:41:6c:a0:fe:55:d3:1d:76:ab:30:79:36:43:f1:b0:db:97:
         8e:59:52:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org