Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139342e302f32342d3234203d3e20323632393031.roa
File:                     3137372e32322e3139342e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          5+GsOATkNgMLd6YPIXv2bGd9Rak+phdIqyRzMrxpGnI=
Subject key identifier:   C6:2B:4B:E1:64:46:9B:28:56:2F:1E:12:40:BA:70:45:56:8C:69:E3
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       3689BE44AEFFF47709C0CD9728886EB19A926C7B
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139342e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:36 +0000
ROA not before:           Mon 04 Dec 2023 19:39:36 +0000
ROA not after:            Mon 02 Dec 2024 19:44:36 +0000
asID:                     262901
IP address blocks:        177.22.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:89:be:44:ae:ff:f4:77:09:c0:cd:97:28:88:6e:b1:9a:92:6c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:36 2023 GMT
            Not After : Dec  2 19:44:36 2024 GMT
        Subject: CN=C62B4BE164469B28562F1E1240BA7045568C69E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:ad:a7:6f:ff:f2:3c:24:c3:17:67:76:78:
                    88:45:8f:f1:b1:cf:d5:6f:64:41:a2:7a:4f:f4:b2:
                    fa:44:e8:51:79:b5:d1:a7:43:6b:69:df:92:84:de:
                    5e:78:59:56:9c:9b:f1:e7:ae:31:2e:70:7c:2e:e3:
                    38:d6:fd:fa:59:db:40:50:03:42:81:9a:e3:47:1f:
                    39:23:0c:75:37:f8:31:20:1e:3e:26:1b:9e:8e:ad:
                    f8:d2:5e:66:26:02:b4:e8:29:95:5f:3d:e5:69:93:
                    b9:e6:28:34:68:29:c9:db:00:e8:9c:1e:3d:d8:71:
                    6e:cb:b8:ae:6e:4f:6d:fe:14:ff:05:7b:9e:f7:3d:
                    aa:94:d7:df:33:be:08:1a:2e:21:b1:98:f3:5d:d8:
                    02:c2:39:cd:6c:ab:36:94:34:c0:17:82:24:72:6e:
                    41:b9:35:61:8d:69:f7:a3:8b:12:c7:ac:8b:af:94:
                    48:c0:71:de:4a:57:39:18:a4:b1:bd:b2:e0:d8:67:
                    db:be:d8:2e:78:1a:6b:62:07:3e:b6:ff:65:ac:68:
                    dc:84:16:d0:bb:b9:2d:ec:b7:17:20:7a:61:85:ec:
                    b0:7d:58:6a:45:21:e4:83:2f:13:61:ed:0f:fe:f0:
                    50:f1:39:40:79:a5:d3:48:70:ab:9e:4a:bf:1e:49:
                    16:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2B:4B:E1:64:46:9B:28:56:2F:1E:12:40:BA:70:45:56:8C:69:E3
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139342e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:4b:67:64:d9:0e:11:2a:7c:c3:b2:59:3e:2c:af:15:f1:53:
         24:de:48:32:cc:0f:95:0d:b5:43:b1:09:b3:51:5e:26:3a:cb:
         f2:5a:30:55:db:cd:51:c4:75:59:e4:c2:12:47:61:e4:dd:91:
         cc:f6:13:e0:1f:57:d9:c3:04:b7:15:98:dc:f9:21:a5:cd:b0:
         08:3a:48:03:c6:54:21:70:1f:34:97:ed:ab:6e:c6:f4:a6:b1:
         d1:da:33:d0:1b:46:03:96:00:36:39:42:82:bc:01:18:56:ec:
         5d:2a:a6:57:a3:7e:c6:72:e5:42:3a:7c:e3:9f:3a:d2:fc:af:
         82:7e:c3:46:e4:44:f0:e8:e1:55:68:05:4e:76:56:2a:20:b4:
         1f:11:6f:37:cc:f9:7d:a0:53:83:15:d8:43:71:58:a2:1d:bb:
         db:ca:1a:b5:3a:fd:a5:10:29:d1:13:b4:39:ba:a7:bb:14:d1:
         31:c6:5d:11:d1:4b:5d:08:1b:fc:d5:71:a3:7a:36:83:f2:f5:
         9d:0b:98:59:73:e2:20:8e:b4:7b:10:23:3d:ec:8f:e4:26:89:
         65:8e:cf:b9:33:6f:ab:fc:8a:cd:0c:bb:25:55:96:06:9a:51:
         89:d0:04:86:85:70:2b:2c:5c:0c:e1:43:d0:9d:5d:94:a0:c1:
         c4:58:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org