Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31332e302f32342d3234203d3e20323731323531.roa
File:                     3137372e38352e31332e302f32342d3234203d3e20323731323531.roa (raw, json)
Hash identifier:          1mnG/pdXeD3PEe//9Sn5JMI1E7SWT4NQENyEzxHTgEU=
Subject key identifier:   50:D3:13:8B:1C:F7:83:AB:6A:59:C8:49:62:90:69:E5:93:A3:B5:98
Certificate issuer:       /CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
Certificate serial:       6709455C06BF8C37DF9AED9EE347C4A22B1E5329
Authority key identifier: 28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31332e302f32342d3234203d3e20323731323531.roa
Signing time:             Fri 17 Nov 2023 17:36:38 +0000
ROA not before:           Fri 17 Nov 2023 17:31:38 +0000
ROA not after:            Fri 15 Nov 2024 17:36:38 +0000
asID:                     271251
IP address blocks:        177.85.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:09:45:5c:06:bf:8c:37:df:9a:ed:9e:e3:47:c4:a2:2b:1e:53:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
        Validity
            Not Before: Nov 17 17:31:38 2023 GMT
            Not After : Nov 15 17:36:38 2024 GMT
        Subject: CN=50D3138B1CF783AB6A59C849629069E593A3B598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:bf:c6:30:c4:eb:b0:e0:32:ea:23:82:fb:
                    05:b1:34:5d:b4:4e:62:65:7b:88:1e:84:40:29:7d:
                    a4:6e:f8:a7:8e:20:04:c3:ec:6a:b5:d2:15:33:6f:
                    64:48:a4:f3:2c:f5:d4:a5:2c:b4:97:0c:47:ff:46:
                    e7:56:b0:a5:f2:8c:55:b5:88:05:de:1b:03:05:e9:
                    25:62:50:17:f1:b0:6a:42:79:88:0e:9c:6e:4d:f4:
                    bb:a0:d2:3b:4d:77:92:a1:1b:90:ff:88:83:d1:df:
                    f7:4e:1b:9f:7d:84:17:c9:66:b5:ad:7b:e0:25:eb:
                    1c:52:28:80:8d:ed:34:3e:73:fd:4d:dd:a6:b3:74:
                    de:ea:77:b2:64:86:12:82:56:82:9c:f0:b0:3f:03:
                    53:2c:99:ba:1a:64:9c:18:21:9a:b3:bb:9c:94:0c:
                    36:7d:6e:63:45:4d:d1:a7:4f:cf:e6:c5:20:9c:7b:
                    18:a2:34:f4:21:cd:e0:37:ac:34:52:5b:a9:69:cc:
                    03:39:ab:f0:01:d0:a2:75:c8:96:e0:a2:47:39:ca:
                    4a:b1:00:77:86:03:3c:db:c1:6f:df:3c:9c:f8:c3:
                    72:20:6d:13:68:10:8b:b9:39:b7:40:0d:ad:1f:8a:
                    bf:98:97:03:b1:38:7d:65:66:1d:d1:43:42:11:7e:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D3:13:8B:1C:F7:83:AB:6A:59:C8:49:62:90:69:E5:93:A3:B5:98
            X509v3 Authority Key Identifier:
                keyid:28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31332e302f32342d3234203d3e20323731323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:5f:4f:f7:94:a8:62:da:91:cc:c1:df:b4:11:4b:5e:09:
         30:69:66:b1:d2:fa:9b:78:6d:e1:72:bb:5d:41:fe:1e:21:91:
         8a:67:7d:11:4d:b9:4c:64:d1:79:35:cf:9a:05:ef:a6:0a:f2:
         08:4d:9b:6a:30:90:60:d4:49:75:d4:8a:3c:64:8a:32:40:7a:
         c0:55:88:b0:4e:ac:83:a1:39:e1:9d:8e:08:9f:67:ae:57:12:
         76:1b:8f:40:71:68:03:e8:95:81:79:f9:de:5b:e2:2a:30:ba:
         5e:0c:c7:11:2a:c7:ed:cd:56:1d:a0:29:d6:b5:64:a4:13:6a:
         6e:9d:f5:9a:26:82:cc:f7:65:12:9c:d0:c1:40:70:60:00:9e:
         d1:1a:82:7b:81:f7:44:24:c4:1f:c8:e1:89:7e:df:f6:92:fd:
         1f:07:ed:0e:23:d5:17:91:4c:7e:93:87:40:fe:2f:c5:d1:5e:
         42:af:e4:56:2c:30:e8:3d:55:ea:53:0c:b0:10:e0:07:2c:6d:
         2b:24:b5:ea:63:a9:24:25:17:a6:fb:53:8f:fc:a4:05:ea:04:
         39:6c:a5:4e:29:2d:bc:54:ee:79:b0:a0:b1:7a:ef:ef:74:06:
         ef:f4:6a:7b:79:68:b2:a2:0a:2b:4f:b9:6e:88:a0:84:2b:4a:
         65:0c:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org