Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3137372e31312e3135322e302f32312d3234203d3e203532393031.roa
File:                     3137372e31312e3135322e302f32312d3234203d3e203532393031.roa (raw, json)
Hash identifier:          EvrZUwr6n/pYCty28xsw7W6ywPzsPTRZn5pX4fQZ3c4=
Subject key identifier:   66:5C:93:EC:B3:AE:25:79:62:AB:66:23:BB:D7:65:F8:3B:00:85:05
Certificate issuer:       /CN=CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E
Certificate serial:       5B47DE34C77252CB31CDB4486E3D4CD83C148033
Authority key identifier: CD:43:0F:A1:1C:F9:9A:2A:02:BA:82:D5:05:CC:F2:4F:BC:8C:E7:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3137372e31312e3135322e302f32312d3234203d3e203532393031.roa
Signing time:             Tue 12 Jul 2022 12:55:42 +0000
ROA not before:           Tue 12 Jul 2022 12:50:42 +0000
ROA not after:            Tue 11 Jul 2023 12:55:42 +0000
asID:                     52901
IP address blocks:        177.11.152.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:47:de:34:c7:72:52:cb:31:cd:b4:48:6e:3d:4c:d8:3c:14:80:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E
        Validity
            Not Before: Jul 12 12:50:42 2022 GMT
            Not After : Jul 11 12:55:42 2023 GMT
        Subject: CN=665C93ECB3AE257962AB6623BBD765F83B008505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:b9:d8:5f:f3:47:e9:39:d0:43:60:ae:5a:
                    95:45:c7:06:1a:b9:bb:26:a5:d7:3d:f0:1b:ab:ba:
                    6c:a4:d1:d3:39:2a:7b:f6:4e:68:c7:04:8e:39:2e:
                    70:61:c8:f8:4b:65:f2:b0:0e:e9:6b:bc:91:a4:b4:
                    6b:b5:0a:db:28:5d:0f:32:c8:40:9e:e7:5e:86:f2:
                    7f:cd:2f:13:cb:7d:e4:c3:f9:61:ee:0f:56:54:e8:
                    71:8e:54:0d:df:4d:42:66:07:c6:43:73:15:d1:62:
                    17:08:7b:5e:df:46:84:ac:06:b9:26:9e:47:d6:b2:
                    f9:d4:e3:b7:12:66:b2:b1:d6:3e:49:7a:3d:8c:41:
                    57:b6:dd:72:f0:ef:a8:2d:5f:fc:ad:21:96:18:63:
                    34:92:6f:1f:7e:4d:c4:08:61:c8:7d:e7:60:57:d7:
                    76:b3:38:d4:bf:d1:36:f0:96:b2:fc:ec:f0:2a:03:
                    f1:c3:ee:83:b4:fa:7e:3b:25:0a:70:1a:04:e5:8c:
                    56:15:3d:cd:f0:e9:62:c1:74:dd:4a:43:95:2e:9d:
                    92:51:b3:86:aa:99:59:a7:0c:cd:35:55:bc:fc:27:
                    c8:59:38:36:c3:c8:a7:54:36:a5:7a:af:7f:4c:37:
                    8b:c9:fb:5e:b4:89:d8:22:95:7c:b6:fd:6a:ea:d1:
                    6e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5C:93:EC:B3:AE:25:79:62:AB:66:23:BB:D7:65:F8:3B:00:85:05
            X509v3 Authority Key Identifier:
                keyid:CD:43:0F:A1:1C:F9:9A:2A:02:BA:82:D5:05:CC:F2:4F:BC:8C:E7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3137372e31312e3135322e302f32312d3234203d3e203532393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:55:05:85:be:7a:21:47:88:cf:f1:cb:88:32:c6:9e:b7:a8:
         fa:60:22:2e:0f:6c:85:b3:0f:06:ff:17:58:15:6a:30:10:c2:
         57:e4:fe:a7:c6:d7:2a:eb:ba:bb:a8:e2:bb:8e:a1:ec:d6:c0:
         e8:5b:6c:f7:15:00:19:65:b2:14:91:7b:28:4e:7b:7b:f9:50:
         bf:e7:ff:b9:dc:c6:ba:70:bc:50:33:d8:6f:42:c7:f7:1e:31:
         f2:a7:58:a6:58:ef:cf:5b:ef:65:51:0e:7e:06:8c:93:32:4f:
         c4:a8:be:ac:4d:c8:3b:63:b3:a1:4a:6b:1d:62:70:9a:34:48:
         a1:6b:55:43:a5:0c:2c:e8:0c:c2:fd:13:b5:d2:0b:26:eb:b2:
         b1:4f:ab:6e:4d:39:ac:15:d3:0a:e2:8c:e9:a7:89:90:f1:3b:
         5e:87:5a:fa:de:16:05:f4:8e:da:b6:ce:a1:d6:23:d0:01:86:
         1d:c5:c5:5a:3f:1f:56:2a:c8:9a:0d:f3:d3:ad:14:8a:2e:8d:
         4d:a4:5b:40:89:1a:cb:35:7d:37:d2:0e:ea:bd:04:a4:9d:a4:
         12:e8:72:eb:9d:ea:4a:80:c8:31:1c:99:e6:44:7a:7e:d0:78:
         9d:76:58:0f:07:73:cd:3f:b2:28:82:3e:a0:32:0e:3f:df:bc:
         51:a4:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org