Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31322e302f32332d3233203d3e20323731323531.roa
File:                     3137372e38352e31322e302f32332d3233203d3e20323731323531.roa (raw, json)
Hash identifier:          B4SkQ+aeYErfXdUvfYi+a26b3XZ8sjqZ0ah+V1jX8Kg=
Subject key identifier:   01:72:19:D4:F2:E2:FC:1B:96:5E:82:19:02:04:E3:01:D6:35:0F:DB
Certificate issuer:       /CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
Certificate serial:       126A5A9C986C58E38C952B6796EBE19471CB7046
Authority key identifier: 28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31322e302f32332d3233203d3e20323731323531.roa
Signing time:             Fri 17 Nov 2023 17:36:39 +0000
ROA not before:           Fri 17 Nov 2023 17:31:39 +0000
ROA not after:            Fri 15 Nov 2024 17:36:39 +0000
asID:                     271251
IP address blocks:        177.85.12.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6a:5a:9c:98:6c:58:e3:8c:95:2b:67:96:eb:e1:94:71:cb:70:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
        Validity
            Not Before: Nov 17 17:31:39 2023 GMT
            Not After : Nov 15 17:36:39 2024 GMT
        Subject: CN=017219D4F2E2FC1B965E82190204E301D6350FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c2:33:04:d4:d2:75:27:89:f8:c9:da:17:a4:
                    01:98:14:f9:53:73:19:09:f5:81:5c:8a:92:d9:22:
                    0f:8c:0c:97:cd:31:a7:79:c9:36:fb:f0:24:49:a3:
                    eb:13:c1:8d:d9:20:81:51:f0:67:4a:63:0f:cb:75:
                    d2:c0:44:83:d5:a8:46:47:02:19:b0:cc:fc:39:64:
                    d1:fd:d2:45:4d:77:9a:30:e9:97:0d:74:62:f3:a9:
                    cb:cb:29:d2:cb:14:d1:bb:d3:b3:59:62:bd:08:4f:
                    43:c3:2c:36:ac:3b:ff:04:79:7f:78:49:3a:61:cd:
                    63:0d:0c:f3:c4:ca:e6:dc:f1:24:51:4e:4f:6e:7d:
                    df:be:6f:49:72:1a:53:f9:c7:2e:e3:fa:3e:75:36:
                    e9:65:c9:63:db:b7:b6:b7:a7:27:0d:6f:de:6e:b4:
                    bf:e0:b8:01:71:f7:e5:7b:c3:7f:4e:a8:e0:b1:23:
                    14:ed:4d:49:38:58:48:7e:2b:d9:4f:14:07:46:72:
                    9d:bd:fd:1e:fd:b4:38:94:cd:cf:2c:9d:f7:ab:d6:
                    7b:31:8f:87:7c:7b:c1:6d:6e:f7:fb:60:b6:5f:85:
                    10:53:dd:e4:77:71:a5:51:63:82:2f:0e:71:5e:0e:
                    a8:05:0c:74:7e:c1:79:f2:d4:36:8e:02:93:f1:2b:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:72:19:D4:F2:E2:FC:1B:96:5E:82:19:02:04:E3:01:D6:35:0F:DB
            X509v3 Authority Key Identifier:
                keyid:28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31322e302f32332d3233203d3e20323731323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:6b:6c:e2:19:93:8c:1b:5f:88:27:56:90:af:6d:0e:e7:b9:
         30:fd:1c:1e:db:58:c3:40:95:76:45:e5:4b:3d:e9:9a:d0:1b:
         d7:9c:76:81:c4:6e:03:2d:1c:40:c0:4c:ad:b9:ec:b5:a1:84:
         3a:fe:25:cd:e1:a9:00:cf:81:4f:ad:38:cf:42:e4:01:d1:3e:
         24:2b:b1:f2:bd:fe:c6:28:37:58:ca:7d:d2:f6:69:86:6f:1c:
         f3:a5:e9:ab:72:5b:09:2e:16:75:cb:49:2e:53:10:74:47:51:
         a3:d1:68:66:ae:d5:fb:92:f5:3b:5b:a8:4a:dc:81:cd:53:92:
         51:0a:07:f2:c9:e7:0c:10:25:e6:7d:57:2f:2b:7e:f0:bf:24:
         ec:34:7d:d8:de:76:90:4a:1d:6e:77:c4:e4:2a:33:be:a4:97:
         c9:14:81:f2:41:a1:e6:16:16:d4:e2:9a:30:28:0e:31:c8:24:
         78:4c:55:da:09:c5:db:d2:e6:8b:a2:79:dd:2b:6c:36:61:1c:
         04:60:53:44:4f:bc:a8:04:b8:08:9d:e6:eb:72:7a:ac:4b:ea:
         c4:d2:8a:f6:19:e3:d2:b4:bb:d1:76:01:1e:dd:83:1e:70:6e:
         b3:5a:1e:e2:1e:09:ab:89:2a:70:56:f9:2c:73:77:07:53:be:
         e0:61:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org