Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31322e302f32322d3232203d3e20323731323531.roa
File:                     3137372e38352e31322e302f32322d3232203d3e20323731323531.roa (raw, json)
Hash identifier:          2odpst8hPf5DufsLXW4/ltGgbXUTOjQ/0mmbw6yxuWw=
Subject key identifier:   45:7E:50:B3:A2:74:D7:D9:0C:77:A1:FB:99:10:DE:BE:ED:57:92:28
Certificate issuer:       /CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
Certificate serial:       23565202B0C5763D6B8268570C2FE53FA4F4EE20
Authority key identifier: 28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31322e302f32322d3232203d3e20323731323531.roa
Signing time:             Fri 17 Nov 2023 17:36:39 +0000
ROA not before:           Fri 17 Nov 2023 17:31:39 +0000
ROA not after:            Fri 15 Nov 2024 17:36:39 +0000
asID:                     271251
IP address blocks:        177.85.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:56:52:02:b0:c5:76:3d:6b:82:68:57:0c:2f:e5:3f:a4:f4:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
        Validity
            Not Before: Nov 17 17:31:39 2023 GMT
            Not After : Nov 15 17:36:39 2024 GMT
        Subject: CN=457E50B3A274D7D90C77A1FB9910DEBEED579228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:a0:27:13:28:cf:1b:fe:24:14:a5:85:33:
                    4f:33:53:59:fb:30:53:73:e6:a4:5d:cd:f1:d4:09:
                    1d:7e:9e:cb:59:6e:16:4d:c7:ed:da:87:48:bd:97:
                    04:06:18:4f:59:0a:0b:f3:6e:43:76:53:de:a2:7d:
                    69:d0:09:f9:8f:b3:7a:5b:53:c8:1b:5d:7a:fc:55:
                    f6:69:54:96:d3:d7:11:15:da:ee:a2:e5:c5:54:a0:
                    2a:82:5c:c2:6f:55:2c:c7:79:b0:95:ab:42:fe:17:
                    98:e8:c8:60:41:aa:c4:5f:2f:92:be:cc:da:28:e6:
                    06:18:1a:82:e0:a4:5a:bb:69:b0:33:d9:c2:0f:ea:
                    01:23:97:2b:ed:ba:61:2b:c9:9e:ec:30:df:55:d6:
                    9f:37:85:f7:4c:d6:08:94:e1:af:3f:5f:3a:47:98:
                    76:c4:a3:6f:bc:70:7d:a9:e4:24:40:a7:ed:2d:9f:
                    f9:bd:2c:72:16:70:f5:2d:45:ff:7c:1c:30:d5:73:
                    38:91:4e:36:c0:c5:b3:95:d0:1c:32:4c:cd:02:37:
                    7d:61:46:06:f2:5e:0d:23:41:df:09:9a:57:33:d3:
                    c9:9b:e6:83:cb:9b:aa:2a:10:a5:b9:2b:1d:a1:9a:
                    74:2f:9c:57:eb:e5:be:d3:cf:b8:fe:62:aa:cc:48:
                    5a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7E:50:B3:A2:74:D7:D9:0C:77:A1:FB:99:10:DE:BE:ED:57:92:28
            X509v3 Authority Key Identifier:
                keyid:28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31322e302f32322d3232203d3e20323731323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:3e:32:7b:f6:08:ba:5f:7e:05:80:d7:ef:9c:a1:8f:8d:
         c0:80:fb:1c:81:03:ff:9e:a4:0f:3f:a4:be:96:66:d6:76:e7:
         38:06:16:cf:aa:a6:39:c7:65:b1:20:17:72:fe:a3:74:ca:26:
         a6:9b:e0:00:78:88:91:95:90:de:29:bb:b1:31:e8:38:38:f0:
         47:68:2e:f4:db:4f:4c:4b:3a:87:fd:e1:29:ed:12:1d:81:6e:
         9a:43:10:66:4b:44:d5:ef:87:60:4c:53:f7:da:79:38:86:eb:
         ac:93:8c:3c:ea:e4:f3:d5:b0:8d:f6:44:60:8f:48:05:8e:d7:
         1a:fd:34:de:43:c4:5a:10:9e:04:03:1d:2d:7c:52:5c:68:c8:
         83:43:aa:a6:a3:d8:87:78:1c:38:ae:35:9d:d8:9b:f6:2b:ca:
         c8:1d:a8:7b:4e:14:50:23:c0:55:3e:5e:73:a8:4a:7a:19:bb:
         db:18:4e:3c:b9:16:93:54:87:af:fc:66:5a:9d:e4:79:2f:30:
         15:43:df:93:f1:e2:21:5f:43:82:a2:73:84:19:d1:b6:61:02:
         22:f0:59:66:73:42:5a:61:fc:05:92:fc:ee:2f:a4:4a:c5:0d:
         f2:45:f9:c8:df:4e:71:12:f0:19:5d:34:cb:52:8d:b4:36:fa:
         d8:45:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org