Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139332e302f32342d3234203d3e20323632393031.roa
File:                     3137372e32322e3139332e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          jHrA+yL7c5JNanY3+4C3G8XvsMdQ9rBcH0XcjFq/A5Q=
Subject key identifier:   B6:5E:09:64:27:6B:75:84:99:BB:BE:1D:5A:5A:92:2A:9A:0D:05:54
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       7F389D804BF915FF3AC74BED24DF56ADC6DB7CB6
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139332e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:41 +0000
ROA not before:           Mon 04 Dec 2023 19:39:41 +0000
ROA not after:            Mon 02 Dec 2024 19:44:41 +0000
asID:                     262901
IP address blocks:        177.22.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:38:9d:80:4b:f9:15:ff:3a:c7:4b:ed:24:df:56:ad:c6:db:7c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:41 2023 GMT
            Not After : Dec  2 19:44:41 2024 GMT
        Subject: CN=B65E0964276B758499BBBE1D5A5A922A9A0D0554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:0c:41:25:bc:7b:44:f3:45:66:fe:5d:54:
                    87:a2:47:f7:fe:c6:13:69:d1:56:74:02:e4:f1:c8:
                    5f:88:5f:f0:84:82:f9:99:51:5f:97:de:bd:53:ee:
                    41:4d:37:15:d7:71:38:67:ec:85:4a:9b:af:39:f3:
                    d0:f7:2c:19:da:77:98:ce:be:1d:28:57:d8:73:de:
                    f9:d2:21:ac:b7:33:b7:35:c7:11:87:f5:7e:92:76:
                    ae:6b:d7:e5:2c:38:dd:62:70:38:f4:25:a8:f5:9e:
                    bb:42:92:6f:c8:d8:42:b3:9c:39:48:77:3b:fc:d6:
                    3f:16:ec:79:ca:a9:82:03:3a:14:b9:4a:8c:be:e3:
                    07:f9:0c:ae:ef:43:82:5f:8a:13:11:85:c0:54:1b:
                    d9:0a:53:40:a9:f7:4b:da:f3:17:70:89:91:f8:26:
                    15:f7:a8:64:69:9b:8e:04:19:b7:53:2d:f2:15:38:
                    7e:9f:de:53:5d:67:1c:e4:0b:38:cb:d1:a8:f9:69:
                    e1:99:93:08:ee:a3:35:3d:59:0b:a3:f7:28:fd:24:
                    bd:16:d8:88:c1:a3:bd:6f:26:f1:c5:19:2c:37:43:
                    01:b5:03:1e:31:98:ba:82:98:73:db:49:98:11:74:
                    88:70:9e:d4:86:b2:8c:e2:2b:76:0e:9a:5e:3f:7d:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5E:09:64:27:6B:75:84:99:BB:BE:1D:5A:5A:92:2A:9A:0D:05:54
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139332e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:b5:19:d8:4a:bc:b4:e2:09:f7:e7:c5:d7:cd:7b:99:f6:8e:
         c3:75:b1:05:2b:65:94:24:e6:0f:ed:a5:e8:a3:ce:e4:18:b8:
         7c:b9:7f:6e:4b:05:85:41:b6:1b:53:0c:88:2f:a3:d5:88:37:
         a9:71:f2:37:52:0f:03:5f:c3:b2:b0:85:98:8b:ed:bc:aa:e6:
         bd:46:45:4e:8a:82:9c:fb:e1:ba:97:47:e3:27:bf:53:61:7f:
         d4:00:76:59:96:1f:82:cf:44:88:0e:79:e5:96:d4:c6:a4:7d:
         68:81:62:06:c6:92:be:c3:ff:b3:ff:5c:aa:24:2f:c2:61:df:
         f3:83:ce:f3:a1:d6:6b:ef:74:ee:35:cc:49:bf:35:05:c9:f8:
         58:84:96:a7:a0:7a:b1:e6:ea:a8:96:d2:7b:5d:60:ee:26:b5:
         ad:4c:ac:6f:29:a3:9a:4d:1a:71:5d:61:dd:d9:6f:44:cb:ed:
         1a:57:e8:92:1f:a0:41:ef:c9:ea:ca:d5:84:68:9a:2b:a1:02:
         68:3c:6d:8f:ba:43:87:29:75:4d:9b:4c:fc:cb:e7:a1:a9:a5:
         b1:f3:fc:b4:c4:29:ea:d3:17:bd:78:cb:ed:60:6e:ba:e0:71:
         97:c7:85:93:bf:8f:2e:17:45:a0:00:f4:02:83:db:7b:84:f5:
         0e:f2:c3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org