Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230302e302f32322d3232203d3e20323632393031.roa
File:                     3137372e32322e3230302e302f32322d3232203d3e20323632393031.roa (raw, json)
Hash identifier:          0wYsV7aJ6tZkvVCJ0hr5m2gCO94eSyAVVRMSUygNKhU=
Subject key identifier:   72:0C:4C:D3:71:85:60:74:93:6E:38:15:0B:DD:43:F8:B7:31:56:FB
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       480AE7B675688D5887D02743F24FD70F5EC4FBF5
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230302e302f32322d3232203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:36 +0000
ROA not before:           Mon 04 Dec 2023 19:39:36 +0000
ROA not after:            Mon 02 Dec 2024 19:44:36 +0000
asID:                     262901
IP address blocks:        177.22.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0a:e7:b6:75:68:8d:58:87:d0:27:43:f2:4f:d7:0f:5e:c4:fb:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:36 2023 GMT
            Not After : Dec  2 19:44:36 2024 GMT
        Subject: CN=720C4CD371856074936E38150BDD43F8B73156FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:4c:69:27:e5:ff:ef:6d:ae:3c:e4:4c:01:
                    0c:29:00:f7:7d:35:2c:02:19:4d:0f:8c:bb:44:5c:
                    a2:d5:bc:6e:3f:59:42:60:19:ce:ad:fa:ac:24:a7:
                    42:59:af:51:aa:83:db:11:84:31:90:23:33:5b:18:
                    46:fb:26:d1:68:90:64:3f:27:21:e7:f0:47:ca:e6:
                    f8:ee:24:3f:9a:ad:ff:f2:38:45:c3:f2:c3:b6:d3:
                    99:d1:2c:16:25:b3:af:d8:59:c9:6a:f7:67:4a:89:
                    c3:bc:f4:6a:87:e1:a2:e5:4d:a7:8d:0e:12:7a:f4:
                    05:db:a5:88:47:a7:a6:35:65:96:04:cb:29:63:36:
                    82:99:0a:36:f3:1e:d4:26:46:57:0d:f3:3d:cb:e0:
                    dc:64:4b:16:cf:5c:c3:d1:63:40:78:e6:8f:87:19:
                    1c:49:97:9f:6f:e9:6c:6d:25:68:f3:68:e5:62:77:
                    26:4e:31:3e:c4:ff:45:0a:41:18:76:25:d0:45:0e:
                    eb:a8:2b:b0:cf:f5:45:ad:01:03:3a:7d:30:07:38:
                    8c:03:04:29:d5:29:29:0e:a7:45:2f:cf:6b:c3:87:
                    e3:3a:33:7d:bf:bf:76:4b:fc:f3:c2:a5:98:62:d8:
                    b7:36:45:0a:68:05:8c:e2:2a:2c:ce:58:bf:20:4b:
                    6d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0C:4C:D3:71:85:60:74:93:6E:38:15:0B:DD:43:F8:B7:31:56:FB
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230302e302f32322d3232203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:a7:c9:01:c3:a7:7d:fe:29:b9:2a:59:a0:d7:28:11:9a:4f:
         98:54:b1:77:e2:c0:33:b4:4e:97:12:f0:54:c5:02:09:c0:af:
         c4:1c:18:f0:e8:0f:7b:6b:7c:2b:bd:8f:3c:6b:7f:a5:f7:eb:
         bf:04:f8:b7:48:08:57:ec:79:06:e8:0e:68:33:56:98:bc:5a:
         46:02:e7:f8:0e:b8:57:76:11:bb:4b:74:b2:f3:77:3b:9a:4f:
         9d:5e:cf:0b:d6:94:03:8c:56:ba:4a:32:f2:6d:43:83:88:8b:
         bf:7d:fe:c1:bf:48:77:9a:74:a1:b1:df:81:1d:b2:2f:ce:49:
         b5:23:3c:2a:45:d1:b4:9c:fb:e6:d9:a5:e3:e1:8e:4f:31:da:
         04:99:64:f9:25:99:13:ce:81:42:c8:6a:60:d7:bd:92:35:f5:
         5e:62:c8:60:f1:e1:7f:0a:0e:4f:21:5f:72:eb:5a:a7:52:c8:
         c3:fb:9b:ad:1d:78:24:f2:fa:e6:19:da:32:05:74:84:e4:b8:
         96:ec:bd:06:49:cc:7a:87:ae:df:3a:61:67:64:58:9c:3b:26:
         d6:16:47:49:ef:be:32:4c:ce:1b:01:d5:59:62:3a:e4:8e:79:
         c1:cc:51:f3:7e:ca:47:d5:83:2a:d8:61:c8:27:28:49:44:4c:
         03:19:9b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org