Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32322d3232203d3e20323632393031.roa
File:                     3137372e32322e3139322e302f32322d3232203d3e20323632393031.roa (raw, json)
Hash identifier:          A+kH14mRrLHA57YawAAXmrgrg/MU5b5jG+PnLKo6drQ=
Subject key identifier:   8B:64:6F:03:63:03:88:8B:12:73:35:14:BA:13:24:7F:C6:A4:C3:E5
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       375141864A9A6585D1A02CD6999FAAF74DCC632A
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32322d3232203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:17 +0000
ROA not before:           Mon 04 Dec 2023 19:39:17 +0000
ROA not after:            Mon 02 Dec 2024 19:44:17 +0000
asID:                     262901
IP address blocks:        177.22.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:51:41:86:4a:9a:65:85:d1:a0:2c:d6:99:9f:aa:f7:4d:cc:63:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:17 2023 GMT
            Not After : Dec  2 19:44:17 2024 GMT
        Subject: CN=8B646F036303888B12733514BA13247FC6A4C3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4b:4e:18:69:57:35:fb:d4:cd:a7:a2:e1:32:
                    a4:23:d8:e7:fd:0e:26:00:a6:7e:8e:8f:6c:c4:44:
                    be:21:b9:bd:c5:de:72:cf:18:3e:26:2f:38:d6:43:
                    bf:0e:6f:c9:97:ad:fb:5f:33:ce:e4:4d:05:83:f0:
                    be:f9:d0:22:ef:5a:2e:70:55:a8:e0:9d:28:13:ec:
                    ab:6b:a2:7b:51:d1:0a:0a:2e:30:56:0f:0a:8d:5d:
                    ba:40:3e:08:4d:0d:27:22:b6:f8:e0:57:04:66:35:
                    2a:96:6b:8a:d7:5d:35:6c:da:21:af:55:d6:9d:c3:
                    07:3c:e7:f0:76:04:54:8c:70:af:9b:27:c6:5b:0c:
                    64:87:63:93:1c:3a:0d:e9:12:7c:bf:da:01:e0:ff:
                    80:92:6a:be:88:de:17:9d:5f:50:1a:2b:97:b9:57:
                    40:db:33:bc:b7:12:70:90:ed:4b:59:b0:15:bc:11:
                    58:ec:f9:42:c0:66:da:0b:48:a2:36:05:c9:c2:43:
                    9e:0d:11:58:8d:68:04:1f:1a:45:f2:81:03:67:32:
                    1d:8f:f4:80:45:e0:ab:61:04:20:60:b3:b8:9f:19:
                    f8:ff:d3:19:a3:46:b5:b9:02:5d:e0:5a:21:73:e2:
                    90:c6:2c:7f:ae:14:1a:bd:73:46:ef:04:fb:47:9e:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:64:6F:03:63:03:88:8B:12:73:35:14:BA:13:24:7F:C6:A4:C3:E5
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32322d3232203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:a7:2d:16:98:d1:0a:f8:8f:ad:4a:0c:b3:df:6b:e4:cf:53:
         32:17:f9:47:3f:3f:9d:76:11:c2:d3:49:83:13:a4:d3:2f:c1:
         e8:38:d7:00:95:33:2a:33:87:7c:44:3c:91:38:62:e6:4b:f0:
         f4:ac:de:44:4a:26:fd:e5:43:8a:57:a3:07:bc:4f:62:71:cf:
         61:06:c5:f9:7e:d0:4d:6c:b4:21:87:a1:9c:09:b9:c6:3c:7d:
         55:84:46:b8:f5:3e:fc:fe:cf:a8:57:2f:d1:7f:03:06:3f:7a:
         07:f2:3e:a4:eb:0f:f5:5c:ec:2a:3b:ca:6f:be:2b:1d:12:1b:
         02:dd:6e:e9:96:60:60:e5:7c:5f:2e:26:e4:96:c2:6f:44:70:
         f3:c0:29:57:3e:5e:d3:d7:33:21:10:cd:d9:b2:25:43:0f:85:
         58:8a:29:c0:18:d9:08:fa:b6:a5:b6:17:46:94:b2:7a:be:e1:
         79:10:36:c5:8c:08:3e:fa:dd:19:da:1e:e6:4d:4d:6a:25:db:
         3b:ce:10:97:fe:4c:85:ff:ba:3d:c1:98:2d:c5:a6:3a:52:ac:
         2f:0e:18:73:eb:2e:fd:c3:b8:b8:22:95:4e:a8:37:72:a1:0d:
         70:89:c9:ed:33:d6:eb:c6:67:a1:3e:a1:97:6d:51:66:14:72:
         2d:1b:aa:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org