Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139372e302f32342d3234203d3e20323632393031.roa
File:                     3137372e32322e3139372e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          A33DJLDhUscuK7hpYh5D8vqmVtqBtXLhD+V5Lu6hG68=
Subject key identifier:   9E:7B:79:B8:52:E2:BB:4B:51:01:7E:5C:50:76:35:37:BC:9C:69:8E
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       4C39FB0E61605FEE4A03FFF29C9AF8A38C4B1A9C
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139372e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:23 +0000
ROA not before:           Mon 04 Dec 2023 19:39:23 +0000
ROA not after:            Mon 02 Dec 2024 19:44:23 +0000
asID:                     262901
IP address blocks:        177.22.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:39:fb:0e:61:60:5f:ee:4a:03:ff:f2:9c:9a:f8:a3:8c:4b:1a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:23 2023 GMT
            Not After : Dec  2 19:44:23 2024 GMT
        Subject: CN=9E7B79B852E2BB4B51017E5C50763537BC9C698E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:84:aa:be:77:7b:6c:6a:7d:db:97:64:50:
                    01:25:47:46:a3:df:33:53:7b:57:3a:4b:aa:a7:35:
                    13:fb:01:39:c0:f1:1f:36:87:53:85:55:c2:bb:1e:
                    b2:a1:bf:60:1b:77:e9:94:cc:30:81:63:ae:d7:ca:
                    54:e6:d7:26:3b:2a:fd:48:f3:fb:6d:c1:6a:55:aa:
                    e2:56:38:a3:6a:04:ec:2a:c9:6c:b5:b5:b6:92:17:
                    07:bb:0e:3a:fb:0a:9f:71:07:b9:88:be:f0:9b:83:
                    eb:c0:70:27:e8:4e:b3:cc:9c:bf:af:d0:ac:6c:6b:
                    78:a4:43:7c:38:0a:47:34:7f:ed:62:e2:70:0a:1f:
                    57:33:21:fd:d2:98:83:1d:df:3e:c1:5b:05:6f:86:
                    25:e2:e7:3c:92:44:3c:f8:42:58:e7:ce:1e:ff:cd:
                    ce:f3:8d:41:36:f1:5b:d8:d5:3f:56:7c:f4:b9:4d:
                    8a:64:02:75:3f:17:80:8e:de:9b:33:ad:8e:ab:e5:
                    9e:35:45:f0:6e:9d:dd:78:28:69:5e:b2:89:84:b1:
                    f2:2d:09:5d:01:89:eb:ed:1a:e0:b7:55:7f:fd:44:
                    b7:2b:58:e1:03:6e:50:6a:11:6d:6a:7b:d9:5b:ad:
                    e7:19:84:3d:24:e1:01:4f:2c:9c:57:79:38:12:c0:
                    1a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7B:79:B8:52:E2:BB:4B:51:01:7E:5C:50:76:35:37:BC:9C:69:8E
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139372e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:8f:6e:d3:2d:2d:73:3b:55:0c:a1:18:60:12:87:f4:e2:ae:
         43:d3:2d:8d:68:ff:50:30:96:af:db:66:d1:ba:f6:03:0c:61:
         09:a0:ea:d7:9e:92:fa:8e:e3:39:db:9b:51:8e:26:12:1f:5c:
         3a:d9:01:7e:d7:35:5c:58:13:40:e8:e3:ee:59:17:bd:ed:f1:
         86:89:e9:4d:ac:ae:d8:63:31:ba:8c:78:d6:ec:04:52:57:cb:
         eb:25:60:c5:d7:28:2b:02:47:80:33:b4:af:d1:cd:2a:80:c0:
         a9:5f:54:10:19:56:64:9f:c6:a7:53:67:a3:f7:10:d5:1a:55:
         27:1b:18:7c:71:7c:4e:f1:c2:b9:51:4d:6e:f8:06:3c:80:ff:
         d5:e2:c6:04:4d:8a:89:79:4b:47:9e:21:4b:8a:4b:e3:5e:c9:
         24:d9:a6:c1:85:01:66:89:9f:7f:e3:d5:85:28:b5:ef:d8:91:
         f8:d0:70:7a:5d:d5:d0:2f:fc:47:53:c3:d6:52:f2:23:59:d8:
         62:de:69:f1:35:cb:9c:b1:cf:41:07:81:10:24:92:2c:b2:15:
         d6:e4:35:53:d5:67:da:57:9c:1c:bb:3d:c3:88:30:67:b5:f0:
         cd:9e:ea:eb:19:17:a3:c7:80:a8:7b:07:3e:52:b6:5c:fe:fc:
         ce:97:54:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org