Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32322d3232203d3e20323632353530.roa
File:                     3137372e37322e3136382e302f32322d3232203d3e20323632353530.roa (raw, json)
Hash identifier:          bTX+AGUsrbWw+tz+RN+KrnkLILcddFQ3plAvakH1f28=
Subject key identifier:   7D:C3:62:6D:04:B6:CB:D2:A1:88:30:98:BA:06:12:65:9C:C3:00:72
Certificate issuer:       /CN=F5C6737909B18B0D983456B3693B8BB6FF84B5B2
Certificate serial:       37E98E382FF88B905415BF09CDF9C7696E8915FB
Authority key identifier: F5:C6:73:79:09:B1:8B:0D:98:34:56:B3:69:3B:8B:B6:FF:84:B5:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5C6737909B18B0D983456B3693B8BB6FF84B5B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32322d3232203d3e20323632353530.roa
Signing time:             Fri 21 Jul 2023 20:38:25 +0000
ROA not before:           Fri 21 Jul 2023 20:33:25 +0000
ROA not after:            Fri 19 Jul 2024 20:38:25 +0000
asID:                     262550
IP address blocks:        177.72.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e9:8e:38:2f:f8:8b:90:54:15:bf:09:cd:f9:c7:69:6e:89:15:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C6737909B18B0D983456B3693B8BB6FF84B5B2
        Validity
            Not Before: Jul 21 20:33:25 2023 GMT
            Not After : Jul 19 20:38:25 2024 GMT
        Subject: CN=7DC3626D04B6CBD2A1883098BA0612659CC30072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:79:74:ae:8a:8c:10:a7:7e:a1:07:65:7b:
                    55:0a:dc:dc:92:d7:21:a2:fa:6b:76:2c:3e:67:9e:
                    e7:b3:d1:4b:aa:aa:09:33:0c:37:2c:14:7c:34:41:
                    1e:12:43:ec:f5:e8:7f:e7:68:95:ff:a9:89:fc:48:
                    04:32:ff:d6:8a:d9:11:b0:3d:60:d6:90:b6:33:67:
                    a4:13:17:21:ef:73:76:01:08:48:93:a6:14:df:bd:
                    6f:52:30:de:58:68:bb:dc:96:c1:01:f5:59:15:5b:
                    1e:25:f7:c2:51:c9:17:fd:6a:ca:2d:18:bc:53:ad:
                    23:40:ba:d6:9e:cd:a3:2d:2e:89:91:92:95:79:8f:
                    de:8e:f7:b3:56:6f:b8:80:81:23:6a:ba:fa:ce:68:
                    4c:40:4d:42:37:55:5f:54:5f:5e:13:1b:ee:54:f2:
                    dc:78:11:63:46:54:c8:46:88:eb:81:bc:d4:cb:18:
                    d7:62:a0:09:4c:08:06:8a:d9:93:29:9b:08:1c:ff:
                    6a:cd:6b:62:68:2b:fe:87:1c:02:f0:c6:f1:d6:d7:
                    f1:5c:45:50:99:f0:7f:6a:c6:62:46:97:d5:4d:45:
                    0e:30:f0:b7:e9:ec:fc:21:d8:66:30:58:08:cc:b7:
                    7f:64:39:35:05:11:6b:a0:ae:d2:3c:84:af:4e:47:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C3:62:6D:04:B6:CB:D2:A1:88:30:98:BA:06:12:65:9C:C3:00:72
            X509v3 Authority Key Identifier:
                keyid:F5:C6:73:79:09:B1:8B:0D:98:34:56:B3:69:3B:8B:B6:FF:84:B5:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/F5C6737909B18B0D983456B3693B8BB6FF84B5B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5C6737909B18B0D983456B3693B8BB6FF84B5B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32322d3232203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:9b:3a:d7:ee:8c:a6:11:80:4c:14:e8:e5:6c:36:6b:3a:f1:
         7a:d9:38:91:bf:b2:8c:7c:25:b4:94:af:6b:68:b4:41:05:ed:
         b7:08:c6:64:0b:5d:0b:4f:16:2d:7a:c8:6d:6e:57:a7:53:3f:
         cc:66:46:08:48:4e:a6:11:db:0c:59:e5:f0:94:24:04:62:bd:
         84:3c:5e:2c:77:1c:e4:88:40:f3:89:a6:bd:c8:c1:af:d3:0a:
         5f:22:ef:08:d5:86:35:99:20:75:47:22:88:a6:32:1d:32:19:
         df:1e:69:61:f1:ce:35:ed:8f:42:ab:64:61:63:85:1c:55:6f:
         c4:60:b6:a7:bf:35:50:52:20:e4:ae:9b:f9:0d:08:e3:18:4d:
         1d:d3:2a:6b:77:68:9e:ef:35:95:b6:88:2b:87:30:00:45:62:
         b0:a8:98:48:86:e8:47:7c:d8:c6:f0:ba:7d:f5:3a:54:d9:ce:
         8c:85:11:eb:de:d2:9f:15:47:01:53:2a:71:3a:72:03:4a:84:
         f8:33:13:29:1a:65:32:11:c4:65:06:ef:42:88:dc:ed:a1:52:
         a4:2d:ec:76:09:3e:f8:f4:23:e5:bc:d0:72:85:1f:c2:58:e0:
         9f:95:51:9c:ce:b1:6b:6c:e0:ef:b7:13:35:bb:d5:9f:a5:f3:
         8d:ab:54:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org