Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35322e302f32342d3234203d3e203533303438.roa
File:                     3137372e3133372e35322e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          PSx9Je70y8vUR+K6IvGr60Scqo9MfgXSrKB8kNfSGsw=
Subject key identifier:   D6:2C:1D:75:FE:0D:D5:3B:1D:FB:54:C2:1A:D3:C5:31:BC:11:31:DA
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       0C2732B661C7C932922056793004BA5FDE95B7E1
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35322e302f32342d3234203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:15 +0000
ROA not before:           Wed 23 Nov 2022 18:34:15 +0000
ROA not after:            Wed 22 Nov 2023 18:39:15 +0000
asID:                     53048
IP address blocks:        177.137.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:27:32:b6:61:c7:c9:32:92:20:56:79:30:04:ba:5f:de:95:b7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:15 2022 GMT
            Not After : Nov 22 18:39:15 2023 GMT
        Subject: CN=D62C1D75FE0DD53B1DFB54C21AD3C531BC1131DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:fe:28:4a:6e:04:01:34:bd:17:5c:74:c1:
                    aa:73:f8:c2:f6:77:6b:4d:dd:b1:e9:63:29:70:8e:
                    b4:38:52:98:77:8b:ab:13:1a:bf:9d:79:78:c1:1b:
                    23:3a:92:89:0a:f7:4b:93:ad:6e:2b:47:87:cb:d1:
                    10:9a:33:d8:5a:32:41:4a:a3:a3:9f:bd:4c:97:41:
                    66:d5:53:c6:09:9d:ae:db:9a:df:01:2f:34:5e:17:
                    97:e3:6f:6e:0a:ea:4e:5f:29:88:1a:7b:58:e4:4c:
                    25:7b:06:ad:01:46:e5:f0:e7:4e:c3:60:f5:67:7e:
                    4f:db:41:89:1d:53:d1:39:75:e2:77:07:83:5e:b8:
                    be:04:41:83:df:72:db:4b:c9:05:5f:4f:73:51:04:
                    5d:09:b6:e4:2a:b1:bd:20:69:60:6e:32:56:35:4a:
                    47:8a:a5:3d:3f:2b:5e:7d:24:b0:68:2e:c4:6d:49:
                    a8:49:b1:15:81:4a:8a:c4:04:86:a5:ea:20:ab:47:
                    8d:22:4a:7f:68:78:3b:40:4f:dc:32:de:c3:11:f2:
                    d7:67:92:86:78:e1:f4:7a:ac:16:2f:68:19:f2:ad:
                    38:f1:2b:cf:2e:9b:70:8f:55:34:3e:fe:c0:9d:39:
                    53:a9:c2:e5:45:34:28:f4:18:45:0a:19:1b:37:c4:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2C:1D:75:FE:0D:D5:3B:1D:FB:54:C2:1A:D3:C5:31:BC:11:31:DA
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3137372e3133372e35322e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:ce:c9:61:f7:a1:d4:eb:7b:d0:2a:9d:ee:07:81:06:32:f9:
         c1:ac:e5:7d:fb:f0:d4:90:d3:74:b9:ba:f7:a9:ad:9c:54:6f:
         e6:00:f9:27:9b:d5:2a:96:52:35:39:13:9e:17:63:99:3b:aa:
         0b:ba:6d:b1:dd:29:ca:3d:12:47:8c:70:1c:1a:41:25:37:7a:
         5c:d3:e7:a5:f4:e0:80:81:47:82:8d:1d:b4:6b:20:1c:1e:99:
         a2:61:65:06:7f:fc:73:69:5c:c9:b7:3a:1b:02:19:38:44:68:
         1f:76:0e:25:43:ad:e6:d4:d4:03:54:e4:bc:60:8b:3d:75:b3:
         16:db:be:e5:93:4e:03:da:6f:52:ec:2e:1e:b2:f4:97:a9:cf:
         97:f8:7b:d8:e8:30:f9:17:48:48:87:56:29:e7:61:db:4b:75:
         dc:c2:11:58:ea:d6:25:37:f2:44:e2:7d:d9:7b:02:71:1f:26:
         03:e9:ba:07:94:4f:9c:e6:ad:6a:1a:3f:c2:ac:30:20:9c:47:
         05:b0:fa:d4:b3:40:32:18:46:9f:68:34:55:10:5c:ed:f7:ec:
         54:c9:23:b5:c4:1d:cc:36:f9:a2:9c:48:a3:03:27:0f:c8:b4:
         eb:94:81:6d:22:e9:c0:9b:25:a4:41:ba:49:6d:1d:e4:dc:3c:
         2e:6e:72:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org