Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35312e302f32342d3234203d3e203533303438.roa
File:                     3137372e3133372e35312e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          0YMMpUy50zO4YPr667rDw0eJ6IFSjDCAUhMr3RoBcvE=
Subject key identifier:   97:0D:32:FB:AF:A4:A6:A8:6E:51:82:E9:96:0B:CB:E2:6D:0E:0E:B1
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       506BCB30120302A40FBC4D63110DDCB223F93998
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35312e302f32342d3234203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:13 +0000
ROA not before:           Wed 23 Nov 2022 18:34:13 +0000
ROA not after:            Wed 22 Nov 2023 18:39:13 +0000
asID:                     53048
IP address blocks:        177.137.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6b:cb:30:12:03:02:a4:0f:bc:4d:63:11:0d:dc:b2:23:f9:39:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:13 2022 GMT
            Not After : Nov 22 18:39:13 2023 GMT
        Subject: CN=970D32FBAFA4A6A86E5182E9960BCBE26D0E0EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:09:f4:f5:1e:d7:58:5f:08:9f:55:76:1d:
                    8f:58:9e:4b:06:20:e5:88:62:c5:51:bf:73:63:4f:
                    e0:28:60:3f:9c:94:ba:04:84:ed:a8:2c:ef:6d:be:
                    b8:c0:f3:5f:ea:bf:3c:b4:7f:9f:a7:1c:9a:44:75:
                    36:d8:89:42:08:88:d0:b8:6e:89:62:f3:aa:99:a1:
                    71:1c:79:b9:ae:a5:76:0c:78:08:a1:e1:56:3a:2c:
                    ec:a0:b9:8a:f9:f7:8f:bc:9b:77:9f:e3:32:8a:0f:
                    e2:75:38:5d:9a:ab:a6:ed:b9:c5:6d:ad:d0:b6:14:
                    87:b9:81:bd:33:d5:8c:9d:65:2f:ed:61:40:fd:99:
                    48:f7:d8:83:0b:02:ea:c1:d0:d2:31:a5:35:0b:f4:
                    c4:56:77:20:12:6d:a8:72:da:49:9c:00:b8:97:a9:
                    01:75:a1:23:e4:f5:87:ae:6d:bb:1c:be:df:e8:db:
                    7b:00:7b:88:d3:d2:fa:2b:f4:63:77:dd:20:07:2c:
                    a6:a0:b6:ea:d3:a2:86:38:b5:ac:14:8b:ba:eb:86:
                    bc:13:cc:ef:d0:3e:d0:66:bd:47:4f:01:a2:ae:e9:
                    86:fa:6f:50:49:bd:52:ab:14:6b:73:7a:20:7c:48:
                    bf:f4:2a:fd:6a:99:c3:a2:74:f5:60:86:8a:ea:19:
                    e3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0D:32:FB:AF:A4:A6:A8:6E:51:82:E9:96:0B:CB:E2:6D:0E:0E:B1
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35312e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:25:06:dd:68:f3:55:ff:e9:26:86:19:d7:69:95:6d:e7:32:
         64:cb:7d:fa:83:e8:b4:e7:9b:b5:b7:08:62:05:36:56:6f:b8:
         04:23:90:bd:42:fc:3b:08:6e:7d:fa:d9:e3:20:9d:5f:79:30:
         14:30:c3:10:9e:d9:35:d6:68:92:7d:8b:1a:93:bd:03:72:d9:
         f3:86:3d:d6:21:3a:61:57:73:28:58:ff:39:ef:74:41:ad:16:
         fc:93:e1:a6:74:5c:ae:48:8b:86:12:12:8e:c8:6a:49:03:23:
         b4:76:8c:c7:44:ed:1f:54:c2:6a:6e:73:b0:ae:07:ca:52:19:
         c2:16:45:91:5e:3d:d6:2a:eb:be:0b:02:75:5f:40:b0:27:bb:
         8b:ee:4f:b5:ef:66:c2:25:dd:d2:75:42:c2:c4:1d:03:3c:cb:
         95:43:35:6d:97:21:7f:16:df:84:7a:a0:d4:90:d7:7d:7a:72:
         8f:06:8d:de:f6:b8:c7:d4:0f:b5:69:19:55:bd:0f:6b:44:d6:
         3b:d1:52:33:94:86:d3:dd:60:86:8b:ee:4d:2b:b3:54:74:92:
         54:fd:0c:af:10:02:c1:11:4a:3a:aa:cf:3b:a5:e2:21:4d:c3:
         48:09:28:92:d1:eb:79:34:28:3c:20:3f:a8:3f:aa:15:9e:0a:
         42:e7:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org