Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139362e302f32322d3232203d3e20323632393031.roa
File:                     3137372e32322e3139362e302f32322d3232203d3e20323632393031.roa (raw, json)
Hash identifier:          2Vqqqy8YlUu+G3yTUYz1kLx5FAOwSU0ZpHrHjJicj2A=
Subject key identifier:   60:D8:0E:8F:77:B8:46:1C:AA:B4:64:73:D8:9D:71:C0:53:FF:26:14
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       757915AA3BFE1CD5387D83838C978B15FCFB9BD0
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139362e302f32322d3232203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:16 +0000
ROA not before:           Mon 04 Dec 2023 19:39:16 +0000
ROA not after:            Mon 02 Dec 2024 19:44:16 +0000
asID:                     262901
IP address blocks:        177.22.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:79:15:aa:3b:fe:1c:d5:38:7d:83:83:8c:97:8b:15:fc:fb:9b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:16 2023 GMT
            Not After : Dec  2 19:44:16 2024 GMT
        Subject: CN=60D80E8F77B8461CAAB46473D89D71C053FF2614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:ba:2e:88:db:3d:6c:14:12:a5:29:c1:f9:
                    a8:31:ff:61:bd:d9:03:6e:ce:25:da:d3:f6:e2:c5:
                    a0:c2:3f:fd:66:af:71:f0:25:14:a6:7e:04:aa:e1:
                    db:b3:22:75:31:ef:8f:49:70:d5:e7:2e:a7:54:d9:
                    49:fa:f8:81:22:01:1c:f5:c2:b8:fd:23:50:0f:d6:
                    9f:01:03:74:66:3b:a6:99:ed:a5:24:c8:ca:fa:68:
                    2b:61:77:e2:5f:52:1f:19:04:cc:7e:c7:96:b7:26:
                    9f:e5:29:56:38:1d:e9:5e:cb:ed:b0:a3:0e:f9:70:
                    14:eb:e6:86:af:f7:32:50:77:2e:49:52:09:93:4a:
                    10:31:c1:dd:0b:cd:8e:ef:36:11:b3:a0:bc:6b:35:
                    76:47:b9:51:0b:8c:df:29:d4:91:fe:8e:70:cc:43:
                    2e:4c:ea:86:f7:87:54:2d:6f:bf:ed:b0:77:98:4f:
                    95:30:20:4e:3b:94:44:3d:74:cb:f7:d2:e3:32:b8:
                    53:01:84:59:09:c9:79:57:05:10:b0:93:0a:b7:d1:
                    07:54:41:ae:40:d5:8d:a0:00:f7:74:96:2b:65:27:
                    3b:06:61:5e:da:d0:bc:fd:6e:a1:bf:89:fc:d4:63:
                    d9:23:e4:b1:b9:c5:33:ec:55:88:dc:6b:dd:5c:1b:
                    b9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D8:0E:8F:77:B8:46:1C:AA:B4:64:73:D8:9D:71:C0:53:FF:26:14
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139362e302f32322d3232203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:f7:6d:97:b5:39:91:96:7e:5b:71:ff:4a:35:55:96:f7:86:
         fe:06:a3:60:bb:6d:9a:73:76:62:bb:40:3d:bd:23:c3:b9:d9:
         86:83:33:f6:e0:66:04:8f:5a:c2:4e:1a:7d:be:36:30:a0:d1:
         76:15:e7:6e:f6:ae:17:f4:95:cc:21:d9:d6:a0:c4:ba:32:1a:
         67:5b:0e:46:bc:32:14:3e:b0:73:dd:c5:cc:f9:c3:a1:a8:e7:
         f7:e9:af:58:97:19:48:0f:82:f7:eb:f5:1a:2a:6e:45:c3:7f:
         c2:f5:53:30:81:71:b8:9e:15:6c:3a:fd:ab:21:e9:f6:25:bd:
         92:4c:71:69:be:d5:65:b4:3a:b8:c4:f9:1b:cb:f5:a3:b4:f7:
         b8:13:07:f0:93:a6:5d:a3:a9:d2:e6:b2:0e:1e:72:8c:fb:d8:
         13:b4:c2:21:b8:cd:24:a6:55:72:10:cb:d7:31:97:0f:37:84:
         fe:63:17:f5:c1:d0:6b:fd:82:e7:da:77:e8:ab:2d:87:fe:25:
         a9:53:36:66:0f:13:48:a2:16:64:a4:16:d9:e4:45:02:f6:a3:
         5a:2d:5b:35:6e:4d:b3:f0:f7:89:eb:0b:ed:14:11:bb:f0:6a:
         9b:eb:19:98:63:bd:b5:18:d3:45:16:c5:b8:1b:19:36:b9:9d:
         fb:85:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org