Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31342e302f32332d3233203d3e20323731323531.roa
File:                     3137372e38352e31342e302f32332d3233203d3e20323731323531.roa (raw, json)
Hash identifier:          ERktz7V3JooPKdesv5K8Y2SfPqrdkm4Ua+ZpKEhu+pc=
Subject key identifier:   ED:3C:8E:2C:92:E7:2C:A2:79:90:22:C9:8D:21:4B:25:97:BA:00:80
Certificate issuer:       /CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
Certificate serial:       27736A497EA382D76F821628E8E8C57974F10401
Authority key identifier: 28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31342e302f32332d3233203d3e20323731323531.roa
Signing time:             Fri 17 Nov 2023 17:36:39 +0000
ROA not before:           Fri 17 Nov 2023 17:31:39 +0000
ROA not after:            Fri 15 Nov 2024 17:36:39 +0000
asID:                     271251
IP address blocks:        177.85.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:73:6a:49:7e:a3:82:d7:6f:82:16:28:e8:e8:c5:79:74:f1:04:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
        Validity
            Not Before: Nov 17 17:31:39 2023 GMT
            Not After : Nov 15 17:36:39 2024 GMT
        Subject: CN=ED3C8E2C92E72CA2799022C98D214B2597BA0080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0f:c7:51:38:a8:78:3e:9b:c7:4e:44:64:c7:
                    d4:47:c5:01:5a:17:54:fb:46:82:29:20:d2:7e:50:
                    0f:af:07:11:de:47:ba:0b:97:bd:37:7c:dd:93:ba:
                    cf:14:e7:18:f1:a5:5a:0d:00:c2:0a:bc:8b:d9:11:
                    6e:55:64:07:d5:dd:fc:5e:d6:41:17:b7:27:75:7f:
                    78:a0:af:0d:4e:2a:8e:2a:84:0d:4e:f6:b2:6a:f6:
                    ea:0b:9c:f9:6a:9a:9f:79:23:4a:67:f2:9a:7b:64:
                    e7:18:90:d6:f3:49:fa:f5:41:7a:ef:d0:6a:62:7d:
                    14:3d:f3:14:02:8e:ba:f3:34:5c:10:98:ce:64:5b:
                    01:d4:4c:21:ab:2d:c7:ba:f0:31:0f:e6:56:04:eb:
                    8a:47:7e:f8:21:5a:2d:1b:da:54:27:06:92:b6:5c:
                    e9:5b:b3:ca:6d:8e:a4:b6:bc:0e:b3:d7:ac:dc:2f:
                    81:f1:4e:65:aa:90:82:35:30:a6:da:19:34:f4:70:
                    34:99:8b:1c:29:de:0e:84:76:75:5e:26:65:54:22:
                    ab:6e:e1:66:8b:7d:64:c2:b3:7c:17:c8:db:28:a4:
                    65:af:9f:c5:86:64:23:39:71:0f:c2:af:24:df:84:
                    7a:d7:14:88:24:81:0a:57:a8:bb:5f:5b:39:65:85:
                    7c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3C:8E:2C:92:E7:2C:A2:79:90:22:C9:8D:21:4B:25:97:BA:00:80
            X509v3 Authority Key Identifier:
                keyid:28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31342e302f32332d3233203d3e20323731323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:a0:a9:3a:9d:b7:9a:6a:01:1c:96:b4:bd:0c:2b:74:3b:e8:
         68:4b:86:f6:48:a8:f8:85:1d:c5:ac:32:cf:1d:1c:cd:d0:ac:
         71:42:c8:ff:b6:2f:87:c4:3c:61:5d:9d:22:e4:7c:d5:59:74:
         4d:12:74:c9:a2:d4:8e:67:52:c0:45:12:69:80:24:51:93:6f:
         95:98:80:ea:6c:3a:71:1b:34:50:c2:1c:1e:9a:65:5b:4b:bd:
         07:12:2e:f5:ee:1e:72:9e:b8:e5:fe:2c:4e:8b:71:09:59:3b:
         be:74:ad:97:b1:11:51:ca:eb:b4:a7:00:ea:4f:84:af:07:f6:
         27:23:b8:e4:c2:e9:d6:ba:dc:1d:ed:81:04:55:69:00:c9:d6:
         01:57:0d:02:f3:86:a2:95:5a:40:0d:61:d4:8c:cd:ba:c1:81:
         09:d2:a8:01:a4:b9:0a:a6:5b:c0:4e:8b:9b:31:e9:5c:2a:ec:
         c1:06:60:38:5e:e9:05:94:a4:ac:e6:27:8d:f0:d2:81:ae:83:
         31:db:23:11:6b:cb:d8:3f:10:23:6f:38:20:f2:e3:d9:c1:1b:
         f6:e3:f4:e3:09:d9:8f:5c:7a:e5:13:63:4f:a0:65:55:b7:40:
         31:4d:1b:3a:c6:ed:de:54:b3:d2:de:a9:14:ab:41:7d:a9:ed:
         89:fd:05:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org