Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32302d3332203d3e203532383938.roa
File:                     3137372e3138342e36342e302f32302d3332203d3e203532383938.roa (raw, json)
Hash identifier:          cwiozSe9oiLhysbrys0LLbncwTxm0XlwDswQX6GOa6w=
Subject key identifier:   45:9A:52:C6:F6:BF:CD:41:D9:05:C9:5D:20:2A:48:59:85:15:C1:81
Certificate issuer:       /CN=5685F2E6C66A6D819815D1D86FC270B4F36579E9
Certificate serial:       56AE4317C7DBEDB58DC41BFD56E57339CE1813C8
Authority key identifier: 56:85:F2:E6:C6:6A:6D:81:98:15:D1:D8:6F:C2:70:B4:F3:65:79:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32302d3332203d3e203532383938.roa
Signing time:             Mon 10 Apr 2023 22:22:39 +0000
ROA not before:           Mon 10 Apr 2023 22:17:39 +0000
ROA not after:            Mon 08 Apr 2024 22:22:39 +0000
asID:                     52898
IP address blocks:        177.184.64.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ae:43:17:c7:db:ed:b5:8d:c4:1b:fd:56:e5:73:39:ce:18:13:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5685F2E6C66A6D819815D1D86FC270B4F36579E9
        Validity
            Not Before: Apr 10 22:17:39 2023 GMT
            Not After : Apr  8 22:22:39 2024 GMT
        Subject: CN=459A52C6F6BFCD41D905C95D202A48598515C181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:a1:a0:e0:c9:60:3a:89:38:63:f8:9f:2d:
                    08:ff:84:b6:7d:05:61:b8:c8:56:2e:90:3a:48:59:
                    a5:07:dc:c1:83:c3:02:94:65:b2:38:b0:40:d0:b1:
                    c1:97:d2:60:78:01:b5:9b:22:e6:dd:d4:f0:6a:51:
                    e0:6f:29:62:1a:1b:ff:db:ff:bb:48:3c:34:e5:05:
                    00:0f:66:8e:b2:16:48:29:21:41:96:09:79:19:6b:
                    90:f2:bc:58:64:e9:42:77:bf:f1:27:bc:da:58:0e:
                    12:c6:07:6d:f3:4e:be:26:6d:46:12:9f:3d:ba:95:
                    fb:1d:de:a3:d6:5e:14:10:ac:75:ab:77:c4:3c:b4:
                    f0:13:e5:9a:fe:dc:5f:5e:d4:6e:83:cc:25:c2:d7:
                    cd:ad:3d:af:28:8b:2f:a8:12:cf:38:a1:92:4b:74:
                    e4:f5:cc:63:96:1d:39:15:32:e5:0c:41:20:82:ad:
                    0a:ab:d5:d8:0f:e7:28:7f:62:b3:01:d4:5e:55:71:
                    18:cb:45:a3:34:d8:01:a7:f6:ca:11:34:52:83:ca:
                    e8:65:c6:9f:73:1f:ef:2b:25:2f:b8:7a:8e:a5:28:
                    eb:17:e0:65:23:1b:5f:56:09:63:0e:48:1a:32:78:
                    a9:fd:e0:2a:32:ea:8e:47:61:c8:69:4d:2b:78:2f:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9A:52:C6:F6:BF:CD:41:D9:05:C9:5D:20:2A:48:59:85:15:C1:81
            X509v3 Authority Key Identifier:
                keyid:56:85:F2:E6:C6:6A:6D:81:98:15:D1:D8:6F:C2:70:B4:F3:65:79:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32302d3332203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:b0:85:18:0b:bf:e4:2b:87:ee:e9:b9:bb:14:b9:a1:0f:06:
         c9:3d:07:17:75:ae:9c:14:ca:1f:f1:ee:21:82:e4:0b:22:e0:
         50:12:59:a2:ef:d1:a6:cf:c4:51:4b:43:b1:9f:2f:7a:ca:df:
         bc:c3:f0:f9:6a:d2:2d:2c:3b:7d:aa:2d:62:c2:f4:98:e5:82:
         c1:22:04:46:c8:98:6e:ad:b2:05:52:f3:a8:3f:b9:c0:55:7e:
         63:64:70:a6:03:51:c3:5c:53:ee:4f:55:1c:f7:57:85:57:1f:
         5e:fb:9a:88:9d:e8:2c:b6:9f:47:5e:b7:9d:76:2c:8b:f3:45:
         e8:3b:31:40:f9:e2:c7:bb:5b:f7:8f:00:43:42:be:6a:8d:dd:
         88:72:17:19:31:95:21:f6:25:07:d4:ac:37:cc:8a:d2:2b:d0:
         cf:ec:58:f8:57:5c:40:a1:41:47:92:d2:dc:41:03:a1:70:ee:
         d3:23:a2:f3:85:58:a0:6f:9f:ca:ff:3b:d8:77:3b:45:35:62:
         a3:c1:36:37:08:08:57:a4:d1:2d:70:f0:70:09:82:a0:cc:15:
         4d:31:44:26:4d:1b:64:3f:d6:ee:fc:3d:2e:12:22:4b:7c:04:
         48:b3:79:58:f7:04:08:43:ef:ad:ed:b8:09:c8:0b:c6:e6:e2:
         96:b0:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org