Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/0/3137372e3132352e35362e302f32322d3234203d3e203532363037.roa
File:                     3137372e3132352e35362e302f32322d3234203d3e203532363037.roa (raw, json)
Hash identifier:          1l/dOVt6Jk4Uu4D9Xoe7L6RHM7QGhp3ylD4/rIOdPOg=
Subject key identifier:   95:A3:99:77:60:7A:68:F9:B6:EC:96:8D:41:30:6D:FC:2A:D6:A5:92
Certificate issuer:       /CN=BC6552FEAE387B527DBA080AC5A9F268E628D723
Certificate serial:       70FE5196C92C9DB2A75E1820ED4FB0C67186C6A4
Authority key identifier: BC:65:52:FE:AE:38:7B:52:7D:BA:08:0A:C5:A9:F2:68:E6:28:D7:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC6552FEAE387B527DBA080AC5A9F268E628D723.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/0/3137372e3132352e35362e302f32322d3234203d3e203532363037.roa
Signing time:             Thu 01 Jun 2023 23:00:00 +0000
ROA not before:           Thu 01 Jun 2023 22:55:00 +0000
ROA not after:            Sat 01 Jun 2024 23:00:00 +0000
asID:                     52607
IP address blocks:        177.125.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fe:51:96:c9:2c:9d:b2:a7:5e:18:20:ed:4f:b0:c6:71:86:c6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6552FEAE387B527DBA080AC5A9F268E628D723
        Validity
            Not Before: Jun  1 22:55:00 2023 GMT
            Not After : Jun  1 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:31:cc:f8:58:69:85:9d:86:10:ca:6e:d9:b8:
                    43:a5:42:e5:cd:94:4d:a6:5a:59:f6:3a:2b:c1:51:
                    ef:e2:27:8f:58:4c:37:a6:d7:60:5f:be:d3:67:6b:
                    79:ec:2a:88:77:eb:81:81:9b:ce:0a:d2:0a:e1:3e:
                    d9:b5:be:8f:2a:21:a0:bb:d0:26:7f:d1:e0:3a:26:
                    ea:ee:27:91:b8:32:c3:86:89:5b:80:a9:8d:d8:89:
                    bf:2b:91:b5:6d:17:e3:6c:72:59:8c:9e:b4:1d:7a:
                    d2:a3:35:af:75:fd:b8:83:67:f7:7b:09:6e:0b:9b:
                    28:30:c8:ef:d0:79:52:44:8f:f1:74:56:d3:27:90:
                    a9:69:52:ec:49:dc:6f:c3:c2:c2:34:f2:91:d7:3b:
                    2d:1c:4e:1a:db:ea:99:1a:58:60:7c:c0:96:4d:ea:
                    1a:0b:1b:15:af:ff:76:85:02:8c:45:f2:aa:13:13:
                    d2:f3:b6:f6:d7:de:e7:1c:a2:42:e3:4f:f1:6b:0b:
                    a1:4a:f6:eb:47:5b:7d:18:64:ba:06:aa:84:02:c1:
                    e1:40:11:4a:ed:a2:22:da:9b:7c:99:af:f6:77:39:
                    18:c0:04:f9:94:6f:79:39:7d:b8:a6:72:06:f6:4c:
                    7e:6d:3d:3b:e7:e2:b8:48:56:1c:4b:85:b5:dc:b4:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A3:99:77:60:7A:68:F9:B6:EC:96:8D:41:30:6D:FC:2A:D6:A5:92
            X509v3 Authority Key Identifier:
                keyid:BC:65:52:FE:AE:38:7B:52:7D:BA:08:0A:C5:A9:F2:68:E6:28:D7:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/0/BC6552FEAE387B527DBA080AC5A9F268E628D723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC6552FEAE387B527DBA080AC5A9F268E628D723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/0/3137372e3132352e35362e302f32322d3234203d3e203532363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:b0:c4:d0:ac:02:27:4b:87:18:16:74:2f:2c:bd:26:90:3f:
         d3:3c:6c:10:ee:57:cf:96:37:1d:72:28:70:93:9b:91:17:5b:
         a5:a9:d7:24:0a:8a:44:36:c5:1d:e5:64:17:3b:c7:94:17:46:
         09:af:91:ae:6d:cb:1b:33:47:6f:43:00:36:49:35:56:d3:cc:
         e8:84:4e:c5:e4:99:5d:71:4f:dc:4d:b1:70:f3:16:7b:66:6e:
         88:e2:7f:60:f2:ff:68:5d:c3:4d:c8:00:77:e5:b7:6c:0e:21:
         0e:5c:8f:01:c6:48:6b:05:77:94:b0:31:a9:07:d2:32:34:1a:
         d0:11:dc:e1:c6:8e:76:90:d4:ae:f5:6e:7d:e8:d9:7e:d6:35:
         1a:e7:ed:9f:78:20:6c:57:79:1d:45:95:36:4f:71:48:a1:09:
         73:4a:e0:7e:b3:bc:ae:2e:82:bd:62:88:d8:70:32:ce:05:1c:
         b4:fa:58:b4:b8:4b:5c:e4:4c:69:9e:82:b2:72:e2:d6:16:c2:
         f1:50:91:33:7b:ba:a1:77:ce:09:61:0b:cf:0b:5d:72:73:fd:
         a9:0e:01:eb:5b:db:c2:dc:7d:99:4f:f4:57:bc:28:ee:29:53:
         2e:42:bd:40:00:91:23:88:36:73:54:2c:4c:7b:6b:d9:0f:d5:
         0a:bb:76:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org