Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139352e302f32342d3234203d3e20323632393031.roa
File:                     3137372e32322e3139352e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          jNnbHCpGrL39vgKlRFeXKQ4ZGTIwmhQxLAsMVgzcw2E=
Subject key identifier:   D7:4E:91:26:E0:C6:75:00:3B:9D:F3:F8:8D:CB:2D:A3:7B:C1:7C:DA
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       4EBE7E479D3DB7807E68DFB6D09F16DB1F147055
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139352e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:40 +0000
ROA not before:           Mon 04 Dec 2023 19:39:40 +0000
ROA not after:            Mon 02 Dec 2024 19:44:40 +0000
asID:                     262901
IP address blocks:        177.22.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:be:7e:47:9d:3d:b7:80:7e:68:df:b6:d0:9f:16:db:1f:14:70:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:40 2023 GMT
            Not After : Dec  2 19:44:40 2024 GMT
        Subject: CN=D74E9126E0C675003B9DF3F88DCB2DA37BC17CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d0:18:89:16:b5:04:5d:2e:18:97:b1:1c:32:
                    be:0e:e0:c6:ca:75:30:ab:82:ec:ad:a2:ec:8c:b5:
                    be:ee:ca:c1:e0:f9:59:f0:03:2f:c3:f4:cd:39:6c:
                    05:a8:ac:d8:ed:d3:ee:05:a2:07:f7:06:f2:dd:73:
                    f8:d5:e3:94:6d:63:89:e8:66:96:e1:4e:61:5b:79:
                    c2:90:56:31:fa:3a:11:29:b4:cc:ab:3a:54:35:7d:
                    ac:c3:e3:1c:c6:27:fa:01:54:cc:6f:ba:5c:13:91:
                    1d:f9:7b:29:dc:16:13:d1:e2:86:9a:cb:fb:34:7e:
                    39:7d:63:db:7e:e9:c0:50:7c:f6:fb:1b:6b:64:15:
                    b3:14:0d:e3:2a:96:2d:5a:50:cd:9a:be:b2:95:b8:
                    a5:64:e5:1b:8f:7e:e9:cc:f9:92:16:69:50:6f:1e:
                    fe:5e:0a:19:2e:f3:2c:a7:c7:1b:f3:f7:04:00:29:
                    b2:ee:c4:28:3a:2f:17:95:72:cc:21:7c:f2:8f:b5:
                    f1:16:1c:1e:bf:e7:63:09:f8:9a:8e:35:56:e3:82:
                    b8:45:51:6d:72:d7:04:3e:db:33:0f:62:db:83:2a:
                    0c:fc:ef:e4:7b:ba:35:27:e2:08:37:17:b2:d8:ca:
                    56:12:14:f7:fd:0c:eb:79:cd:43:aa:18:73:96:04:
                    fa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4E:91:26:E0:C6:75:00:3B:9D:F3:F8:8D:CB:2D:A3:7B:C1:7C:DA
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139352e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:46:64:8c:ad:5b:9f:8b:f6:e2:ab:13:91:13:ba:7f:7b:e2:
         a7:e8:03:da:b0:65:5e:a7:44:9a:c6:ee:78:57:b4:dd:80:ec:
         c0:a8:27:4e:61:26:37:0d:52:c1:0c:f0:9d:44:7e:c2:d1:67:
         cc:f3:d7:7a:c5:ec:a9:89:f4:e4:5b:21:d5:69:34:45:2b:95:
         6d:b5:bb:ba:83:5a:2c:71:2a:cd:6a:c9:b3:98:11:40:4a:e1:
         37:72:e0:53:ed:6f:80:7c:99:0b:62:d3:0b:47:66:62:53:1d:
         a0:40:85:3b:c1:64:ec:65:4b:f2:a1:3c:6c:14:9e:aa:d7:85:
         44:bb:79:23:8b:bc:7c:7c:53:16:5c:05:8f:e0:33:ba:c8:63:
         40:2d:a6:b9:fe:f7:6d:0b:01:db:6d:3f:db:dd:53:92:18:42:
         e6:0a:ca:dd:6f:18:ea:bb:94:3e:c9:45:eb:a2:2b:97:d5:30:
         6d:82:ae:4c:ac:84:eb:94:d4:f4:78:5f:d0:22:4c:5a:f4:36:
         4d:56:f2:b3:a6:75:f0:9f:30:88:7c:7d:42:71:97:0f:76:77:
         5d:ba:31:52:52:6f:4b:a3:e8:0c:aa:10:38:05:eb:d8:3b:b8:
         7e:75:94:c2:5c:9e:15:4c:81:b2:11:1e:1d:7d:3d:70:11:89:
         75:37:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org