Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32302d3230203d3e20323632393031.roa
File:                     3137372e32322e3139322e302f32302d3230203d3e20323632393031.roa (raw, json)
Hash identifier:          MGD4bcncc63kBgXya7wDXiiJqF90Wtb7n+rLLCChN7c=
Subject key identifier:   00:EC:62:0B:EB:37:35:C7:7B:78:08:8B:9A:BB:33:B2:33:FE:AC:3F
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       67939048920A4A882E63833EF0DC70AE6DEAC79E
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32302d3230203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:13 +0000
ROA not before:           Mon 04 Dec 2023 19:39:13 +0000
ROA not after:            Mon 02 Dec 2024 19:44:13 +0000
asID:                     262901
IP address blocks:        177.22.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:93:90:48:92:0a:4a:88:2e:63:83:3e:f0:dc:70:ae:6d:ea:c7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:13 2023 GMT
            Not After : Dec  2 19:44:13 2024 GMT
        Subject: CN=00EC620BEB3735C77B78088B9ABB33B233FEAC3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:2e:41:e6:84:ea:42:c8:b3:f1:6d:e4:87:
                    f5:59:05:54:db:b3:aa:3c:c8:1d:0b:c2:cd:48:15:
                    5e:d0:ae:47:9e:15:26:d2:83:07:8b:55:ca:db:f2:
                    7d:61:d2:5e:60:14:ba:6f:a4:fc:37:6a:d4:a6:5b:
                    f1:c7:2f:ec:ba:ad:9e:8a:75:7a:ca:1d:6c:eb:9d:
                    b6:5c:2e:30:0e:af:ba:1b:e2:e6:9e:80:82:0c:13:
                    ce:3c:d7:8e:d2:14:b0:31:7b:e0:10:26:37:2c:d1:
                    97:fd:03:a2:ba:1c:64:74:5f:dd:9e:04:5d:c0:6b:
                    b8:f2:df:73:f6:e8:a2:06:a6:eb:61:de:4c:c3:83:
                    8e:92:19:5a:ab:c0:d8:ab:4d:66:01:72:36:7e:14:
                    5e:6b:6d:73:13:a5:81:07:c3:40:2c:a3:ec:0c:3b:
                    3e:70:1e:e0:ab:d7:52:26:1c:68:e0:3c:8f:9e:63:
                    b5:07:4d:d5:c4:7a:72:87:0d:dd:48:0f:c9:53:b5:
                    1f:bb:10:12:69:02:eb:dd:5e:34:c6:a0:eb:f7:05:
                    72:89:3d:4e:42:c6:c6:21:4a:e0:d3:4b:8e:22:b2:
                    3c:87:c3:38:09:4f:8a:a1:9d:8b:b8:c7:bd:1a:18:
                    46:4a:16:b7:15:e3:1c:02:4d:6c:a0:fd:f8:ae:44:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EC:62:0B:EB:37:35:C7:7B:78:08:8B:9A:BB:33:B2:33:FE:AC:3F
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32302d3230203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:c3:67:66:2a:88:87:e5:e4:cc:90:e1:b2:0c:cb:4c:4b:
         90:f5:62:e0:6c:85:f0:4b:cb:47:65:ac:97:12:24:46:0a:3c:
         27:20:e9:d0:98:46:14:d3:c4:06:d3:de:02:13:28:0e:bb:c3:
         30:f4:dc:d4:bd:28:d4:cb:13:2d:1b:ee:98:8e:d7:db:66:4a:
         b4:7f:23:3d:55:6e:81:55:2a:dc:64:a6:53:a5:b4:65:f4:dc:
         48:95:84:78:4c:c0:6e:93:91:9f:f4:8c:1f:56:ba:0b:84:01:
         80:c0:ab:08:2a:a1:94:6c:12:b9:4a:52:33:5d:62:72:b8:70:
         6f:7b:01:67:f2:ae:9b:b2:43:86:a2:91:98:2d:71:b8:05:4d:
         e9:b9:63:59:95:49:d1:32:31:7e:d2:d2:16:8c:55:71:d5:50:
         3f:57:1a:33:93:9a:80:24:f4:73:be:a9:d8:e3:09:9b:17:39:
         f5:f8:88:03:3e:f3:55:73:e0:38:42:b7:23:ab:80:a1:0b:59:
         ef:46:e8:c6:71:e3:d2:9d:fe:b3:43:1d:8e:29:50:6c:14:7d:
         6b:3a:57:5a:47:3d:59:f2:73:ef:ce:86:a8:eb:3e:98:ea:3d:
         07:03:04:ed:0d:69:ce:c4:af:2e:be:ce:c3:50:02:b1:87:0a:
         da:b5:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org