Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/3137372e35332e33302e302f32342d3234203d3e20323732343732.roa
File:                     3137372e35332e33302e302f32342d3234203d3e20323732343732.roa (raw, json)
Hash identifier:          6AOQ0CMNpPtmQ9MDWrTEd3gghAfAvg2nPBb+K3+4UXw=
Subject key identifier:   E5:F7:39:ED:10:C8:F0:A2:53:5D:20:56:1C:76:E5:47:73:AA:84:E6
Certificate issuer:       /CN=5DD1B92D3CA06CD9B9DCAB1D64BFCAC89D9466FF
Certificate serial:       50CE8D23C4047FDA22EC841956A8E703BDF7F58F
Authority key identifier: 5D:D1:B9:2D:3C:A0:6C:D9:B9:DC:AB:1D:64:BF:CA:C8:9D:94:66:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD1B92D3CA06CD9B9DCAB1D64BFCAC89D9466FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/3137372e35332e33302e302f32342d3234203d3e20323732343732.roa
Signing time:             Fri 26 Nov 2021 19:09:34 +0000
ROA not before:           Fri 26 Nov 2021 19:04:34 +0000
ROA not after:            Fri 25 Nov 2022 19:09:34 +0000
asID:                     272472
IP address blocks:        177.53.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ce:8d:23:c4:04:7f:da:22:ec:84:19:56:a8:e7:03:bd:f7:f5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD1B92D3CA06CD9B9DCAB1D64BFCAC89D9466FF
        Validity
            Not Before: Nov 26 19:04:34 2021 GMT
            Not After : Nov 25 19:09:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:da:58:90:1c:22:ad:82:c7:ce:82:bb:4e:
                    95:ba:4b:3c:1d:fb:ea:87:3f:0c:a2:13:57:bb:87:
                    4e:3f:ca:e0:67:e0:67:9f:ea:f6:22:64:89:e5:2b:
                    ad:43:2f:c4:9f:00:f6:05:16:7f:26:61:48:76:49:
                    28:49:22:b6:38:2e:a0:e7:2b:6f:48:71:16:15:08:
                    2e:73:1f:73:59:e7:7a:51:73:00:53:ee:5d:14:62:
                    2b:83:8b:c6:48:e5:53:c6:4f:20:c9:59:2d:73:87:
                    21:3b:cd:dd:5b:44:6a:06:1b:57:e0:27:9e:7e:ae:
                    de:4f:49:2f:29:0a:d8:b0:17:2a:a8:85:6c:4f:fc:
                    66:b5:26:d8:be:46:7a:93:b1:5a:cd:7d:db:47:2e:
                    8b:19:80:bf:cf:3b:ef:63:6e:8d:0d:fd:0b:e3:76:
                    7d:5e:43:b7:d4:a3:94:d2:1f:d0:e4:a1:0e:3d:75:
                    ac:8d:12:93:14:e5:66:33:49:8f:fe:e3:31:37:b0:
                    c4:2f:dc:03:8a:34:f1:0a:41:4e:0d:2c:f1:f3:1f:
                    d8:e3:8e:63:af:a3:39:94:76:a8:f6:63:8c:a9:7f:
                    cc:d5:3d:30:7c:00:f1:5b:82:49:39:8e:8d:ca:ce:
                    66:2f:d5:0f:f5:5a:a7:10:a6:c6:24:2b:06:d3:dd:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F7:39:ED:10:C8:F0:A2:53:5D:20:56:1C:76:E5:47:73:AA:84:E6
            X509v3 Authority Key Identifier:
                keyid:5D:D1:B9:2D:3C:A0:6C:D9:B9:DC:AB:1D:64:BF:CA:C8:9D:94:66:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/5DD1B92D3CA06CD9B9DCAB1D64BFCAC89D9466FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD1B92D3CA06CD9B9DCAB1D64BFCAC89D9466FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/3137372e35332e33302e302f32342d3234203d3e20323732343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:54:af:9c:dc:1d:a2:b4:6b:aa:07:f0:5c:29:52:63:a1:cc:
         73:48:f3:ce:7d:0a:90:0f:58:ff:76:1c:1e:5b:45:21:7a:a0:
         0a:2c:7a:d1:ff:b1:3e:c8:c8:8b:4a:87:e1:f4:a2:56:00:84:
         df:84:ed:e3:24:8c:ef:60:8e:44:3c:eb:86:99:97:16:de:47:
         80:5f:dc:ea:3c:01:d4:fa:60:05:f7:18:b4:63:0e:c4:eb:2f:
         11:ce:b7:07:55:e9:11:67:95:70:8c:59:9f:17:53:e6:ea:8b:
         3d:10:f7:3d:0a:7c:c4:30:ef:53:0f:44:17:51:99:b0:b4:01:
         91:f7:16:bd:ea:75:03:0f:c8:99:37:5b:28:bf:5f:ed:25:e6:
         c6:e9:40:c4:ae:6e:63:60:36:66:71:f3:4c:14:e5:d5:cc:98:
         a3:65:db:40:16:a4:c4:f9:d6:4c:1b:e4:2b:b1:57:80:0f:47:
         b0:cc:30:06:42:35:43:76:19:49:9d:8c:b6:8d:4b:6a:1c:f2:
         d2:3a:eb:3d:56:44:f1:3f:44:5a:1a:61:cc:8b:bc:e3:e4:54:
         88:a4:2c:a2:df:fa:08:73:27:22:d2:99:3f:12:d5:00:0d:56:
         2e:3a:3d:ac:31:b0:92:75:e8:0f:79:be:bd:05:a5:e3:1d:e7:
         5c:31:e1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org