Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139362e302f32342d3234203d3e20323632393031.roa
File:                     3137372e32322e3139362e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          TQgwZL1rtw344bbDIrBrwCxYKU5yx4EHSLWK8XwbU2A=
Subject key identifier:   0F:52:E8:7D:6D:47:03:97:B0:C3:9C:75:00:70:04:A6:2E:5A:F2:DE
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       3E36EECA3F621A9FC0F3C8B606F2377C265D739A
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139362e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:24 +0000
ROA not before:           Mon 04 Dec 2023 19:39:24 +0000
ROA not after:            Mon 02 Dec 2024 19:44:24 +0000
asID:                     262901
IP address blocks:        177.22.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:36:ee:ca:3f:62:1a:9f:c0:f3:c8:b6:06:f2:37:7c:26:5d:73:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:24 2023 GMT
            Not After : Dec  2 19:44:24 2024 GMT
        Subject: CN=0F52E87D6D470397B0C39C75007004A62E5AF2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:2c:38:9d:c4:6c:a5:2e:5e:f4:c2:d1:fb:
                    40:40:3e:02:32:64:1c:47:6a:fb:98:93:b5:3f:49:
                    87:86:c6:f3:32:69:9b:c8:28:4f:89:8f:f4:55:68:
                    ac:fc:ff:2d:7b:d8:54:e8:75:f2:04:ba:ec:6f:94:
                    52:f6:95:df:af:56:98:0a:a7:fc:a2:84:9c:ce:a0:
                    d0:cc:39:79:0d:7c:4d:0a:e8:69:27:23:ff:af:a8:
                    76:91:5a:b2:f6:2a:82:02:5f:ad:ad:bf:15:6b:08:
                    95:2b:bf:1a:64:c5:de:05:77:19:ac:ec:84:ea:c0:
                    1a:05:a3:fb:7e:36:0f:7b:2b:e7:4d:ca:c8:c5:b3:
                    75:a1:a5:54:4b:a7:13:a7:d3:97:b8:31:19:ab:8b:
                    92:e0:b8:ac:1d:87:b9:41:09:cc:b9:98:fc:a8:8b:
                    bc:1d:1c:16:a0:ba:7f:a6:73:df:68:76:44:f1:ab:
                    47:61:1d:a3:46:6c:d5:d0:4c:ed:82:ed:07:ca:d3:
                    30:e4:9c:f7:e5:03:b3:cb:bd:aa:92:9c:44:9d:12:
                    e5:a6:3f:d8:6e:6b:a9:23:10:6b:3d:06:bd:2d:7a:
                    20:25:75:ac:5a:be:8d:bb:8c:ee:1b:70:d4:e0:eb:
                    cc:d5:0b:56:c3:52:e8:e3:ae:98:ee:d3:46:b7:47:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:52:E8:7D:6D:47:03:97:B0:C3:9C:75:00:70:04:A6:2E:5A:F2:DE
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139362e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:62:7e:34:9c:57:40:1a:55:9b:6d:d7:ae:60:80:3a:64:ca:
         56:91:88:3a:ca:ee:7c:41:e9:41:c3:a6:1e:24:89:2c:96:28:
         e0:a2:29:e0:2c:3b:61:93:04:68:84:15:a4:62:65:f8:37:59:
         6a:35:45:59:72:28:91:04:96:e5:d6:7f:dc:c4:75:6a:5a:dc:
         a9:1a:a1:8f:ef:03:a2:78:cc:9a:86:bf:52:4f:91:4d:fd:dd:
         82:c1:b5:ca:29:c5:c7:6b:d9:4a:11:c0:e9:ae:8b:f0:81:f9:
         a8:9d:8d:c5:e5:f8:72:92:59:62:df:48:ef:ee:d0:48:8a:6f:
         9b:31:01:95:f8:c8:3b:af:bb:5a:c5:b7:08:c7:16:b7:6e:10:
         5f:cb:39:4a:77:ca:ac:66:cb:07:ea:9b:fc:f1:87:d2:08:78:
         55:a7:98:a7:9d:da:dc:18:47:56:de:30:80:b3:f9:2d:13:ef:
         db:a0:f7:b7:94:89:c0:96:57:9a:1d:14:44:de:d5:15:ef:7b:
         84:4d:01:8f:b5:2c:55:21:f4:4c:2a:ed:76:42:ba:ce:ec:50:
         9a:01:63:28:71:ad:ae:8b:83:e4:13:47:b6:90:1c:f0:60:db:
         51:af:7f:e9:22:dd:9b:4c:ac:b1:17:18:e3:d7:1c:09:d5:68:
         b9:fb:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org