Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139382e302f32342d3234203d3e20323632393031.roa
File:                     3137372e32322e3139382e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          D/Sawg/0bZC9A2KL8EcplJaABj6PGVj44thIw13wQuI=
Subject key identifier:   65:75:BC:B5:85:D9:B2:7A:04:E8:84:B4:86:7D:D2:AF:B5:F1:20:A5
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       62798588B4064681439170B1081E876B4E5294CF
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139382e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:20 +0000
ROA not before:           Mon 04 Dec 2023 19:39:20 +0000
ROA not after:            Mon 02 Dec 2024 19:44:20 +0000
asID:                     262901
IP address blocks:        177.22.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:79:85:88:b4:06:46:81:43:91:70:b1:08:1e:87:6b:4e:52:94:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:20 2023 GMT
            Not After : Dec  2 19:44:20 2024 GMT
        Subject: CN=6575BCB585D9B27A04E884B4867DD2AFB5F120A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:f5:a3:09:2a:02:eb:4f:4e:22:01:74:bc:
                    62:c7:73:80:49:0a:19:dd:d7:bd:87:62:90:f3:af:
                    ac:73:48:b6:0f:80:23:51:2a:5c:a3:b8:ce:85:60:
                    82:62:d9:d0:80:2c:a5:d7:e9:d6:0f:a5:97:df:82:
                    96:a9:dc:a0:de:35:45:38:87:67:25:78:4d:f2:20:
                    68:98:46:6e:49:87:e3:8b:45:7d:ca:1e:bd:07:78:
                    af:51:de:e4:b4:c8:be:5c:71:48:15:10:63:4c:bf:
                    c9:4a:74:a2:40:0f:fc:56:09:65:07:1d:7f:47:18:
                    42:54:a3:75:43:78:c6:d8:0a:ed:8b:30:8f:ff:5b:
                    f1:b9:7c:b5:43:bb:9c:76:be:fb:4e:0e:a6:69:3a:
                    e3:64:b8:b8:f6:c0:d9:14:81:02:9d:56:e7:b5:49:
                    4e:74:2d:e6:69:d1:c0:30:6d:17:b5:02:17:11:eb:
                    63:b5:c7:b9:8e:a6:36:a9:69:12:4c:95:d0:09:d2:
                    b5:e9:4c:b7:13:3b:ad:33:59:f7:6b:ad:69:75:4a:
                    7e:6b:c0:58:f6:99:f3:1a:89:ff:08:b4:dd:2d:92:
                    91:1e:6e:ed:c8:08:ab:3f:1f:73:ff:dc:74:a7:13:
                    9a:23:fc:46:61:86:70:36:64:a8:3f:3f:67:62:68:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:75:BC:B5:85:D9:B2:7A:04:E8:84:B4:86:7D:D2:AF:B5:F1:20:A5
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139382e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:d2:8d:3d:66:58:67:c4:f3:e4:c5:ad:49:00:f0:9b:10:f0:
         25:1c:01:2b:7a:ab:25:4c:60:6f:b4:d3:8b:cd:43:e7:0a:c2:
         ea:06:d8:64:0e:2d:13:cf:8a:9b:51:68:e7:25:3b:ae:11:b0:
         f9:2c:74:e3:b5:7c:db:45:16:2c:71:30:2f:64:45:f3:74:c2:
         5d:fd:b0:7b:b3:1b:0c:98:80:33:a4:be:5c:e8:ac:0f:63:57:
         ba:5b:a2:39:7b:74:a2:33:e7:b1:e3:96:0f:33:8b:63:42:1e:
         fa:93:8b:cb:ae:78:70:c1:7c:43:42:f4:7b:9e:0c:bf:f1:4b:
         0c:bc:a8:80:5b:b3:65:58:38:be:8b:f8:65:f1:53:a2:04:39:
         a1:65:ee:74:14:cb:86:d6:0a:ff:5a:c7:6f:84:81:ae:91:3b:
         5b:a6:10:1d:f4:3e:d8:76:10:a4:fe:2e:a8:c5:86:fc:2a:57:
         c5:b1:f7:31:19:56:b5:51:0c:34:b0:9f:a3:5c:90:6c:ae:80:
         54:46:f3:35:16:3b:df:35:3a:13:07:c0:94:09:20:bb:f5:14:
         38:aa:e4:30:b5:31:50:72:14:7a:99:8e:77:8d:fc:98:0d:5a:
         9c:2b:10:05:ff:d6:83:3a:24:36:e7:85:5c:44:44:fe:46:8e:
         a9:14:45:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org