Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32322d3232203d3e203238333630.roa
File:                     3137372e382e31362e302f32322d3232203d3e203238333630.roa (raw, json)
Hash identifier:          CRAX31PkbXUL/EmE5E/5+dCyc1gjD/suF3r61YRjFlA=
Subject key identifier:   25:74:79:9B:01:0E:D0:C5:79:73:47:94:EE:2C:6C:A2:78:6B:8C:D8
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       532AD4D0EAA1F60F12A92FAFC3A7E194971027D6
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32322d3232203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:46:10 +0000
ROA not before:           Sat 06 Apr 2024 02:41:10 +0000
ROA not after:            Sat 05 Apr 2025 02:46:10 +0000
asID:                     28360
IP address blocks:        177.8.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2a:d4:d0:ea:a1:f6:0f:12:a9:2f:af:c3:a7:e1:94:97:10:27:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:41:10 2024 GMT
            Not After : Apr  5 02:46:10 2025 GMT
        Subject: CN=2574799B010ED0C579734794EE2C6CA2786B8CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:39:e1:75:f6:ed:5f:88:ed:a8:c3:ac:b9:
                    c8:38:f0:7e:85:26:00:fd:ef:19:1f:a9:14:ed:d9:
                    76:8f:e3:7c:2e:25:15:a4:42:c9:7a:05:d9:5d:95:
                    6f:5e:5c:fe:a0:b9:49:b0:ff:53:06:f2:3d:64:44:
                    9b:0e:68:65:c0:7f:94:73:42:a2:84:f4:cf:fd:77:
                    66:bf:b6:37:44:c2:21:26:39:67:3f:0f:84:e3:b2:
                    f9:c4:90:3e:7f:78:dd:5f:c7:a7:30:e7:15:6a:c7:
                    31:bc:a6:df:5a:03:3c:9a:3d:91:0e:1b:f4:4c:e3:
                    95:c4:d6:d5:63:85:78:93:ea:cb:0c:be:27:20:5e:
                    52:f3:6a:e0:3d:e5:2e:ef:0b:14:bc:eb:49:06:ed:
                    ca:33:ab:24:7f:53:07:78:12:0c:c4:82:46:49:cb:
                    07:7a:54:ff:60:00:4f:87:ca:72:ff:a0:dd:2a:47:
                    71:16:25:89:c7:44:b6:a4:a4:c0:54:99:7b:76:d6:
                    79:dc:cd:1b:a6:4b:46:fc:11:87:2a:54:f8:fa:78:
                    76:0e:07:6f:10:58:60:0d:86:09:b8:87:47:47:8a:
                    d0:b1:21:51:4f:99:a1:f1:e9:4f:dc:62:49:75:85:
                    ce:49:0f:8e:12:a6:c3:9f:90:9f:3d:bc:e2:2b:83:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:74:79:9B:01:0E:D0:C5:79:73:47:94:EE:2C:6C:A2:78:6B:8C:D8
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32322d3232203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:28:d2:7b:8d:8b:0c:51:8b:ee:60:a3:73:b9:47:14:74:47:
         04:3f:f2:44:a6:97:97:b9:50:04:6b:d1:a1:b3:bf:0d:43:8d:
         e9:21:68:42:f4:36:5e:de:9c:c8:70:d1:ae:6d:ed:bf:b4:16:
         01:92:bd:15:1f:4a:61:26:d7:2a:28:09:5c:50:73:40:f8:d2:
         18:f8:85:46:e8:06:9c:c0:d6:a5:b7:dd:22:d9:05:82:4f:ae:
         67:bd:df:1d:92:67:5b:d6:b7:47:6a:5f:b2:6f:6d:f1:6e:eb:
         08:df:85:c3:5b:00:86:5e:f6:55:82:9e:c6:d0:08:a4:8a:a1:
         21:69:da:f3:5d:9b:c6:37:28:0c:0e:7d:cf:d4:19:64:c9:34:
         e6:c3:71:c2:5e:07:29:ec:57:ea:46:ae:7f:38:f0:73:78:50:
         23:04:b3:8d:a5:3a:33:6c:92:d8:9f:82:25:3d:d8:74:9e:79:
         82:12:09:6c:97:4d:39:f6:5c:aa:2e:44:f8:32:41:81:ef:8e:
         a7:bb:56:d3:a4:54:c4:e1:05:ac:99:0d:f2:fd:d6:c3:0c:54:
         cd:3f:3b:32:91:9c:b2:81:a7:d6:de:06:70:2d:cd:44:ee:36:
         d0:08:84:0f:37:ae:50:13:22:d8:75:e8:3c:02:41:2f:fc:c9:
         c6:fd:35:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org