Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32322e302f32332d3233203d3e203238333630.roa
File:                     3137372e382e32322e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          5HrTnsoqDvgD2+mWDv0xNx5bnvXAl38aSUBkn97FQ6U=
Subject key identifier:   04:CE:21:66:C8:E8:08:CF:3B:57:20:C3:6E:0F:A9:57:76:9B:DB:E2
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       1D3D90F1DE8AE1434EF91027B129CE8831596DF5
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32322e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:21 +0000
ROA not before:           Sat 06 Apr 2024 02:40:21 +0000
ROA not after:            Sat 05 Apr 2025 02:45:21 +0000
asID:                     28360
IP address blocks:        177.8.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3d:90:f1:de:8a:e1:43:4e:f9:10:27:b1:29:ce:88:31:59:6d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:21 2024 GMT
            Not After : Apr  5 02:45:21 2025 GMT
        Subject: CN=04CE2166C8E808CF3B5720C36E0FA957769BDBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5b:4e:23:1b:ab:d8:1d:6b:00:34:a1:41:37:
                    e7:0c:47:77:9d:eb:c6:b6:14:0f:2f:99:f5:4f:ec:
                    8e:5c:c7:e5:0d:4d:f0:3b:be:9f:ac:67:c8:90:b3:
                    13:d7:c6:57:7b:f9:b4:15:c5:57:43:11:da:38:7b:
                    97:5b:e2:21:08:a6:ba:4f:b8:75:be:bf:2e:fb:7c:
                    8c:01:0e:6b:1f:d0:e7:f4:0f:14:b2:63:0a:3c:51:
                    5a:b2:01:03:d3:82:01:8b:20:c1:67:53:f5:87:1c:
                    84:4f:4c:6a:26:31:7f:15:a9:cd:87:cc:80:9d:11:
                    2a:4a:54:34:ea:a3:fd:db:6a:13:6c:dd:c4:d8:de:
                    2f:94:f5:0c:53:9b:3b:5f:4a:bc:7b:fe:f3:17:1a:
                    ee:97:c3:a6:cb:b6:83:58:06:bd:d5:2a:34:30:b2:
                    7a:1c:80:54:85:21:39:65:08:ff:4b:99:f2:46:d1:
                    ab:69:a4:4f:a8:12:1c:a5:bd:c0:0a:bd:37:ae:a8:
                    50:a8:9a:51:b4:63:5f:a7:64:f8:10:16:21:e1:a8:
                    23:ab:32:8b:b7:aa:2a:88:83:fa:6a:cc:f5:0f:12:
                    cb:e1:e0:4c:48:a3:9d:12:48:54:ce:c8:0d:d0:35:
                    5e:02:5c:d8:16:2d:d4:1a:05:cf:ac:0f:c5:21:3d:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CE:21:66:C8:E8:08:CF:3B:57:20:C3:6E:0F:A9:57:76:9B:DB:E2
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32322e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:63:8a:d6:e4:7e:51:e1:27:39:ed:bd:b5:66:5d:e3:21:c0:
         f9:a4:fd:5c:8d:21:00:33:33:f7:7b:d6:93:7a:57:a4:9e:a5:
         e1:bf:15:94:9d:f5:f1:ea:60:e7:30:1e:54:62:ce:9f:13:f5:
         da:0c:f0:31:57:84:3d:61:d3:06:17:fc:22:20:82:75:7d:1d:
         af:58:f4:43:3e:33:6b:f7:12:a6:f9:b6:83:55:41:a9:ee:e4:
         4c:98:77:43:37:b0:a9:1f:7c:0d:b2:c4:c4:ad:4c:ab:27:93:
         c3:46:89:12:01:b8:a1:20:c6:8a:4b:f3:fc:2e:32:73:63:56:
         e9:a7:04:c7:29:22:69:d4:a6:5f:93:01:ba:2a:f1:2c:d7:e7:
         6e:73:a9:25:0a:46:f3:79:ba:09:d6:c8:7a:28:1a:d5:50:45:
         0d:3a:74:92:a0:cf:b2:2f:4b:8b:fa:24:87:a6:f6:de:76:58:
         1f:f6:b7:7b:84:d1:79:1f:f0:ca:97:34:4a:2b:0f:b5:f0:f7:
         04:c6:32:2c:8c:23:90:40:7b:7d:7a:4d:44:d7:98:f4:58:35:
         3b:18:11:53:6b:6b:f7:1f:e1:f8:7e:e9:7f:d6:d7:fc:1f:c4:
         4e:be:b0:e7:29:91:a7:3d:b0:84:3e:66:e6:da:23:0a:f5:6e:
         76:c1:d7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org