Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137372e35332e34302e302f32312d3234203d3e203532383037.roa
File:                     3137372e35332e34302e302f32312d3234203d3e203532383037.roa (raw, json)
Hash identifier:          /WhFCkdSpGKcK1SVLxjKF+wi+gmsttRY1n1rur+65cg=
Subject key identifier:   B8:57:07:08:7C:65:52:C4:47:BC:C8:DA:D1:0A:20:C3:B2:21:5A:40
Certificate issuer:       /CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
Certificate serial:       6696154F1E38046CD293C50AD1A4E6F9C8CDEB45
Authority key identifier: AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137372e35332e34302e302f32312d3234203d3e203532383037.roa
Signing time:             Wed 10 Apr 2024 13:29:44 +0000
ROA not before:           Wed 10 Apr 2024 13:24:44 +0000
ROA not after:            Wed 09 Apr 2025 13:29:44 +0000
asID:                     52807
IP address blocks:        177.53.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:96:15:4f:1e:38:04:6c:d2:93:c5:0a:d1:a4:e6:f9:c8:cd:eb:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
        Validity
            Not Before: Apr 10 13:24:44 2024 GMT
            Not After : Apr  9 13:29:44 2025 GMT
        Subject: CN=B85707087C6552C447BCC8DAD10A20C3B2215A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:81:43:73:16:bc:56:8c:4f:dc:be:60:7c:
                    63:dd:d4:58:25:71:87:13:62:70:98:ae:cf:96:5c:
                    dc:7b:87:dd:7b:60:cb:5d:b9:2d:0c:e9:2d:12:f9:
                    6b:b2:3f:cf:13:8d:6a:88:17:cb:0d:c3:5e:a8:ea:
                    23:f4:7b:e0:d5:c6:65:fa:1e:6a:54:d8:1d:0b:b2:
                    22:0b:ed:40:dd:f4:53:45:e3:2e:5d:9f:b4:27:73:
                    41:44:a1:73:4a:0c:f9:03:25:b2:ae:84:e6:cc:18:
                    68:99:85:ca:cd:85:6b:2b:49:36:23:47:c8:07:35:
                    0d:19:f2:f3:ac:c2:7e:07:9d:3b:62:fb:6f:8d:bb:
                    b5:76:ad:de:50:65:50:5a:25:67:56:ca:4b:8c:25:
                    20:6b:04:bc:ed:67:56:7c:73:e8:88:ea:a4:d9:f3:
                    0e:43:d0:db:60:5d:7a:fb:f8:ac:bf:15:80:46:c5:
                    d0:7f:f8:12:b4:5d:e9:02:67:dc:c4:5a:e5:e3:2b:
                    e1:2f:1a:26:cc:54:80:4c:35:ea:1b:0e:11:ab:27:
                    a1:24:6f:40:cf:a3:a5:c4:b7:c4:a6:1a:0d:af:80:
                    13:99:c2:61:eb:96:09:b9:b1:2a:19:58:cd:eb:2b:
                    b4:cd:78:8a:d3:e0:ca:ee:d5:45:ad:98:0a:cc:ec:
                    11:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:57:07:08:7C:65:52:C4:47:BC:C8:DA:D1:0A:20:C3:B2:21:5A:40
            X509v3 Authority Key Identifier:
                keyid:AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3137372e35332e34302e302f32312d3234203d3e203532383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:fe:6b:ea:f1:98:bd:7d:14:8d:45:1e:3e:23:9c:f6:1b:e3:
         40:40:d3:19:a8:f0:7c:41:d8:38:e0:07:56:8d:6c:05:51:10:
         fc:ad:99:8c:0a:dd:a9:8b:92:32:56:9b:09:3a:0a:4c:f6:1d:
         0b:bd:19:18:b1:9a:6e:85:44:74:71:02:24:89:16:90:45:e2:
         03:36:68:ec:42:c4:60:1b:76:45:bf:ba:ac:c9:31:c4:68:ae:
         a2:ef:5a:13:94:64:34:76:7a:ff:82:e1:e7:8b:a9:05:4a:9b:
         5c:a3:6e:13:36:9c:b8:81:21:91:46:32:f8:d2:f9:f5:e4:74:
         52:de:7e:89:0f:58:e0:16:0d:98:fb:53:92:91:2e:c5:d8:1b:
         9b:24:8a:81:33:00:e6:33:79:ff:94:54:73:cc:43:48:a5:4e:
         e3:0c:c2:26:f2:6f:f6:3a:de:5a:ef:3a:a7:41:5d:bd:37:52:
         da:2c:59:19:61:63:86:d7:c4:65:f6:8f:ca:59:82:08:1e:13:
         db:65:df:71:bd:15:11:7d:bd:d1:c2:67:d6:b8:f9:ed:b3:b9:
         4c:86:7f:bc:9c:26:a9:6e:24:c7:17:5d:30:48:a2:1e:b8:f4:
         8a:d1:84:df:2a:1c:09:41:f5:d5:75:83:bf:bf:f5:b7:09:25:
         3f:18:31:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org