Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa
File:                     3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          8Y/My/b9zG+c3JmswOyLp8y1P4lgQvLXosuRSSBeQkM=
Subject key identifier:   17:E0:55:EE:06:36:05:3A:16:B1:F3:B1:0A:CF:EB:79:F1:CD:A0:69
Certificate issuer:       /CN=E0F50BC836788B2DEEAD1BAFAB381129AAEFC524
Certificate serial:       41562F780F8484CA3E150281C8CD7DFF56F296F9
Authority key identifier: E0:F5:0B:C8:36:78:8B:2D:EE:AD:1B:AF:AB:38:11:29:AA:EF:C5:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0F50BC836788B2DEEAD1BAFAB381129AAEFC524.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa
Signing time:             Mon 18 Dec 2023 12:33:18 +0000
ROA not before:           Mon 18 Dec 2023 12:28:18 +0000
ROA not after:            Mon 16 Dec 2024 12:33:18 +0000
asID:                     262550
IP address blocks:        177.72.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:56:2f:78:0f:84:84:ca:3e:15:02:81:c8:cd:7d:ff:56:f2:96:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0F50BC836788B2DEEAD1BAFAB381129AAEFC524
        Validity
            Not Before: Dec 18 12:28:18 2023 GMT
            Not After : Dec 16 12:33:18 2024 GMT
        Subject: CN=17E055EE0636053A16B1F3B10ACFEB79F1CDA069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:79:53:e6:37:66:5d:73:65:f9:6e:82:7f:
                    ed:26:e6:68:82:9b:48:52:77:d6:32:23:fd:18:1f:
                    29:95:51:ae:1f:6d:fa:1f:2f:d2:03:ad:3c:fc:22:
                    6f:ff:8f:fe:10:50:2b:07:b7:4b:45:21:5c:ec:8e:
                    f1:65:57:c2:34:97:ca:d3:8f:0b:08:81:9b:85:70:
                    0c:05:73:a7:16:85:51:3c:c9:fa:d6:e2:ca:2f:c2:
                    68:a8:d2:bd:06:b2:d4:d7:b9:5e:a9:58:27:ee:26:
                    ca:f6:45:8a:89:59:db:65:ac:66:f3:44:e4:24:e6:
                    41:71:82:3a:43:f7:25:23:5d:70:d5:33:2b:e7:9d:
                    5d:19:95:ac:ef:26:f8:d0:13:f4:c4:91:80:a2:fe:
                    af:9b:3d:02:44:d4:de:15:f1:04:1e:04:f8:4f:83:
                    2d:9f:fc:ac:68:cc:4b:33:0e:58:d4:66:5f:62:ad:
                    ae:cc:ac:30:03:9e:d5:1c:3d:7b:ee:5b:bd:58:81:
                    17:2a:eb:2f:fa:49:6d:35:21:6b:8e:cb:59:70:6d:
                    dd:ea:fc:ad:f5:84:57:a7:82:fd:8d:42:b9:9c:bb:
                    0d:eb:56:08:66:43:80:1e:de:81:ac:30:63:c1:5a:
                    73:70:b7:df:f9:3a:3d:88:54:9c:87:fb:f7:f0:02:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E0:55:EE:06:36:05:3A:16:B1:F3:B1:0A:CF:EB:79:F1:CD:A0:69
            X509v3 Authority Key Identifier:
                keyid:E0:F5:0B:C8:36:78:8B:2D:EE:AD:1B:AF:AB:38:11:29:AA:EF:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/E0F50BC836788B2DEEAD1BAFAB381129AAEFC524.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0F50BC836788B2DEEAD1BAFAB381129AAEFC524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:97:56:d5:43:cf:9c:b8:1c:03:b2:c2:39:fc:ff:6b:35:8d:
         c7:8c:3a:a7:57:6b:08:05:90:6d:57:7d:d3:57:76:d6:c2:a6:
         23:27:a4:09:08:2d:aa:31:64:9e:ce:56:85:6c:73:5e:28:73:
         cd:73:29:df:d4:ed:07:fd:2a:06:9a:a6:1d:a1:31:e1:8f:f0:
         e0:36:1b:d6:91:35:5a:a6:6c:c9:08:8a:63:af:d6:60:bc:f8:
         c3:9c:e5:d8:7b:1e:6e:e7:93:c6:40:69:79:4e:d9:d2:e7:3a:
         e8:0f:b9:43:a7:24:78:98:56:7d:32:7d:4b:84:40:65:79:31:
         a4:5d:96:a0:bf:d3:10:64:c3:bf:6b:4a:a6:2d:6e:61:e8:2d:
         1f:6d:7b:be:f2:b6:d6:30:3d:cf:ae:6f:48:6b:33:d9:7a:24:
         f9:9d:82:59:88:9f:a6:dd:3e:04:bd:d1:2b:a4:36:6e:cf:96:
         a1:03:be:11:c5:e7:74:37:6e:83:93:d6:72:61:58:0d:6e:cb:
         fb:6f:3d:a7:67:fb:bb:16:38:7b:52:18:4f:4f:50:db:31:98:
         71:9e:db:6c:bf:f7:62:4a:09:ee:ba:dd:12:6d:65:1a:64:00:
         d6:6a:ca:4c:7e:e9:a3:78:5f:69:90:62:3b:42:3c:33:da:1b:
         67:58:e3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org