Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/3137372e35332e3136382e302f32312d3234203d3e20323632343734.roa
File:                     3137372e35332e3136382e302f32312d3234203d3e20323632343734.roa (raw, json)
Hash identifier:          zRz7IfbixVvjwUrnzV+nXaC9PG/8tXPNCbz893PjZD0=
Subject key identifier:   A0:8E:62:6D:F7:C9:FA:45:ED:1D:DB:28:52:45:7A:B1:62:CA:6D:32
Certificate issuer:       /CN=A8068F05B096A70AA2F45346F49DF50B86D5530F
Certificate serial:       0D81657A296B50E4417CCB9DFBB95071B8C93162
Authority key identifier: A8:06:8F:05:B0:96:A7:0A:A2:F4:53:46:F4:9D:F5:0B:86:D5:53:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8068F05B096A70AA2F45346F49DF50B86D5530F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/3137372e35332e3136382e302f32312d3234203d3e20323632343734.roa
Signing time:             Mon 18 Apr 2022 23:12:32 +0000
ROA not before:           Mon 18 Apr 2022 23:07:32 +0000
ROA not after:            Mon 17 Apr 2023 23:12:32 +0000
asID:                     262474
IP address blocks:        177.53.168.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:81:65:7a:29:6b:50:e4:41:7c:cb:9d:fb:b9:50:71:b8:c9:31:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8068F05B096A70AA2F45346F49DF50B86D5530F
        Validity
            Not Before: Apr 18 23:07:32 2022 GMT
            Not After : Apr 17 23:12:32 2023 GMT
        Subject: CN=A08E626DF7C9FA45ED1DDB2852457AB162CA6D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:fb:53:c3:f3:3d:12:aa:64:f1:44:1b:27:
                    c3:f6:15:18:dd:35:0b:2e:2c:12:fe:4c:69:9e:43:
                    ce:2c:19:d9:7e:ec:86:30:ec:64:99:04:0f:c6:a3:
                    64:b6:cf:d6:a1:9a:b6:42:da:7c:20:cf:e3:38:ab:
                    5f:32:c1:82:46:d8:11:7d:6e:cc:6f:67:15:16:d9:
                    94:2a:2a:54:0e:29:80:ff:88:21:ec:f4:01:60:15:
                    f4:7b:ab:96:b4:75:67:1a:57:8c:e8:c7:09:22:09:
                    4c:34:24:ed:d5:2c:ca:da:ae:f1:5f:a6:e4:17:5d:
                    91:49:68:2a:5c:25:0c:48:f1:d1:95:08:2d:43:66:
                    b3:f3:a4:c3:1c:45:fd:8d:c8:3a:ae:a3:78:3b:df:
                    a8:16:a2:98:1f:49:a6:f0:01:4a:c4:00:d0:8e:1c:
                    57:34:ec:1c:f2:60:12:10:78:fa:e1:8a:05:4e:dc:
                    9f:ca:0f:ad:b8:c9:12:9c:f2:4b:f5:c7:cd:74:e8:
                    83:81:ca:cb:47:08:74:27:c8:1f:45:bc:56:27:a8:
                    f9:6f:58:b3:56:e1:8f:ce:dd:30:1a:c1:d7:d0:9b:
                    42:30:80:89:af:cc:f9:f9:50:78:b9:da:4c:56:ac:
                    bb:11:c8:56:34:c3:b6:9e:97:44:5a:c5:c8:78:15:
                    9c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8E:62:6D:F7:C9:FA:45:ED:1D:DB:28:52:45:7A:B1:62:CA:6D:32
            X509v3 Authority Key Identifier:
                keyid:A8:06:8F:05:B0:96:A7:0A:A2:F4:53:46:F4:9D:F5:0B:86:D5:53:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/A8068F05B096A70AA2F45346F49DF50B86D5530F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8068F05B096A70AA2F45346F49DF50B86D5530F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/3137372e35332e3136382e302f32312d3234203d3e20323632343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:76:af:95:14:58:ad:56:52:c4:60:56:7e:48:d0:df:3a:82:
         07:38:8a:91:7e:33:1d:57:05:24:e0:49:ee:e2:71:b3:f6:a4:
         27:2d:7b:25:9f:61:cd:ca:72:84:91:f2:a9:5b:f2:1b:50:00:
         ff:98:84:f9:05:ab:65:f6:60:24:d7:bd:6a:6d:14:ee:06:80:
         27:b4:a8:51:24:21:fa:02:6f:7b:c5:c1:09:5a:5e:e0:4d:c1:
         6c:c0:ee:5f:0b:62:2c:d3:21:95:ae:b1:44:f4:55:bf:2e:21:
         df:fb:23:0d:34:20:ab:17:0b:5f:8d:23:15:06:03:9b:f4:ef:
         9b:fb:b1:40:62:27:e4:13:26:da:77:d4:26:00:b1:2b:49:75:
         8f:8b:0e:11:6c:c9:bd:c9:79:a7:cf:6b:1a:90:48:3d:49:83:
         ab:68:44:55:95:29:ce:37:13:db:20:16:f5:11:03:d1:68:7b:
         3a:cf:c0:89:fe:29:07:16:8e:e1:e8:96:de:cf:3e:ba:2c:43:
         f4:4a:f1:1b:5c:61:2b:cd:ab:94:3b:d9:15:89:f1:88:41:04:
         e5:d6:f3:f6:a5:2c:3c:c0:e1:b1:46:d1:0a:95:b1:28:ec:08:
         f7:d7:42:f7:d8:48:52:62:bf:da:2e:23:6a:98:1e:f3:39:8d:
         2a:87:1e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org