Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32312d3231203d3e20323632393031.roa
File:                     3137372e32322e3139322e302f32312d3231203d3e20323632393031.roa (raw, json)
Hash identifier:          2kxnc2jOCra+IdbPJTDfBmGBBowgKt9Arwrm+hu4He4=
Subject key identifier:   0F:1B:B2:C5:B8:FF:A8:43:C2:8F:CD:50:13:05:E9:52:26:2C:75:48
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       50A46264F39A0C03E397DD56F9798EB2AA22D912
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32312d3231203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:18 +0000
ROA not before:           Mon 04 Dec 2023 19:39:18 +0000
ROA not after:            Mon 02 Dec 2024 19:44:18 +0000
asID:                     262901
IP address blocks:        177.22.192.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a4:62:64:f3:9a:0c:03:e3:97:dd:56:f9:79:8e:b2:aa:22:d9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:18 2023 GMT
            Not After : Dec  2 19:44:18 2024 GMT
        Subject: CN=0F1BB2C5B8FFA843C28FCD501305E952262C7548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:1c:12:f1:7e:0d:09:26:99:da:1f:d6:55:
                    63:64:29:c8:64:f2:f9:15:57:b0:9d:02:03:3d:25:
                    07:36:68:2e:43:0e:31:55:a2:68:2d:d3:7e:9f:d6:
                    d6:0c:f6:c8:7e:36:14:1c:fe:1e:af:f6:76:cf:5c:
                    7e:06:23:d5:56:5a:8e:a2:72:98:45:09:47:59:26:
                    a5:5e:98:19:ea:7e:76:74:52:1d:86:de:6a:f4:72:
                    41:f2:65:06:7f:5f:3b:9d:ab:47:2b:57:2f:2e:cf:
                    51:5a:64:00:8b:2c:c9:52:28:c5:af:e2:b4:5d:47:
                    15:b7:8c:42:c4:d3:2c:17:95:45:9a:c2:1d:68:89:
                    90:b5:c6:c2:09:da:15:ba:71:6e:9e:87:32:36:99:
                    7b:84:61:64:1b:23:45:41:9f:3a:25:2c:c8:b3:db:
                    22:ac:3e:8a:6d:33:2b:e4:09:99:48:da:88:ca:ee:
                    28:16:69:24:be:46:b6:1a:b5:57:aa:76:60:94:84:
                    8c:d9:cb:36:29:10:3c:4c:0d:e1:17:7e:44:82:92:
                    fc:69:40:b8:ce:4e:2e:80:43:f5:c4:d8:91:27:11:
                    c5:8d:76:eb:a5:20:1c:a3:69:ea:be:5b:d4:31:3c:
                    7e:cb:9e:a2:10:34:8f:a7:db:6f:38:fb:fb:fe:c5:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1B:B2:C5:B8:FF:A8:43:C2:8F:CD:50:13:05:E9:52:26:2C:75:48
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32312d3231203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:71:2f:cc:33:b5:2f:0f:ab:6a:a6:b9:d2:8c:35:14:59:93:
         2c:e1:5d:55:51:94:5d:67:d8:57:aa:9a:64:82:fe:4e:9e:95:
         06:0f:b5:1b:18:d8:bf:17:86:d6:d3:09:eb:17:5b:b1:d5:55:
         c4:c7:a4:52:46:4d:1b:65:b0:52:59:49:ea:7a:5a:8a:9c:25:
         ff:b5:bd:18:8c:84:00:70:3d:0a:4d:95:f8:a7:e4:7a:e0:a8:
         c1:4a:65:90:42:34:f4:54:15:71:00:86:98:b0:f6:c3:09:51:
         4f:11:fc:ed:50:c8:fe:3f:50:16:c3:e8:01:9e:fc:80:5b:f3:
         19:88:f2:8d:6a:19:6c:f5:01:44:2d:2b:4f:e5:d3:2d:0c:e3:
         a5:d7:6e:65:1c:02:fe:b8:32:fa:d6:7a:60:23:5d:fc:7b:e3:
         2d:8f:26:3c:ea:86:fe:d5:d7:43:3d:f8:c3:f9:58:36:9e:78:
         3c:f5:1f:28:1a:ec:38:b8:74:93:91:38:91:1f:6b:4b:6e:98:
         c2:94:2c:6e:fe:9a:f2:ad:ce:80:61:67:5d:8d:27:bc:c1:a4:
         a7:8c:01:f9:74:54:a2:94:0d:4d:8c:ba:96:ce:89:03:01:df:
         51:49:bf:ec:5d:e5:d9:ff:9d:c6:03:eb:a6:f9:2a:27:b2:94:
         5e:1a:40:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org