Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230302e302f32342d3234203d3e20323632393031.roa
File:                     3137372e32322e3230302e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          Gii+J+C6h/BkQTodeCTdKPL83o0oVsmPVf/ew9HG8A8=
Subject key identifier:   AC:1F:C4:14:F8:5D:F1:87:E0:91:8E:AA:0E:F5:E9:DA:B2:4B:D8:F8
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       2EFD1C2A4B5AA8C6730F22104F1AAC893974C412
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230302e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:35 +0000
ROA not before:           Mon 04 Dec 2023 19:39:35 +0000
ROA not after:            Mon 02 Dec 2024 19:44:35 +0000
asID:                     262901
IP address blocks:        177.22.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fd:1c:2a:4b:5a:a8:c6:73:0f:22:10:4f:1a:ac:89:39:74:c4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:35 2023 GMT
            Not After : Dec  2 19:44:35 2024 GMT
        Subject: CN=AC1FC414F85DF187E0918EAA0EF5E9DAB24BD8F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:ad:82:7a:f6:a6:85:1c:86:89:bd:d5:f0:
                    b7:f7:b9:05:64:0e:3c:dc:8c:5e:5c:f1:9f:48:7f:
                    0b:01:53:ed:7d:9b:5c:e8:e9:08:5d:50:cb:58:65:
                    44:66:74:77:15:37:8a:8a:3e:d4:7c:23:85:28:d2:
                    50:41:e4:f7:7c:ae:cd:4b:27:0d:c5:2a:ff:eb:73:
                    be:1a:21:a9:99:b9:89:0b:50:c3:9e:98:d6:14:92:
                    2b:b9:e8:e9:0a:60:a8:39:ea:e6:27:76:36:97:f4:
                    9f:d4:5b:0f:c8:42:68:8a:dd:bc:dc:21:e2:df:a6:
                    92:ec:bc:c3:57:ab:ae:59:ad:f3:9e:49:d4:9e:92:
                    d9:e3:25:4f:f0:1c:60:88:3d:3a:37:1b:e4:ca:79:
                    46:5f:b8:59:1e:be:b9:c7:55:04:c6:ca:1d:52:e6:
                    ad:92:ad:8f:aa:2b:c5:86:81:8b:c9:2a:d9:65:ba:
                    06:bc:90:12:c2:2b:c9:dd:78:0e:8e:41:de:15:5f:
                    5b:9a:4d:35:4d:f3:02:b1:80:d2:7c:dc:77:52:4e:
                    13:51:cb:1c:c2:7a:9d:ee:9c:ac:a0:93:db:9a:44:
                    fc:dd:1c:84:02:81:07:88:ae:19:2e:b4:ba:45:1e:
                    f2:a2:11:72:72:73:9e:05:f4:7c:b7:2f:02:f7:7a:
                    7e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1F:C4:14:F8:5D:F1:87:E0:91:8E:AA:0E:F5:E9:DA:B2:4B:D8:F8
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230302e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:31:6d:34:6c:44:f4:93:ea:22:50:25:3c:b0:19:0c:e8:95:
         7c:13:f9:56:a8:69:c7:d5:08:40:67:32:fe:6b:a5:d7:be:88:
         7b:e4:5f:81:22:aa:d6:6d:59:0c:34:b6:40:dd:de:61:b3:f8:
         d0:1b:ed:23:9b:a7:d3:02:4e:e9:00:af:04:ae:71:00:ee:d3:
         37:95:6c:6c:43:73:00:bc:6b:f4:1f:60:12:b5:f8:29:b5:f8:
         96:65:63:ae:95:40:e8:2b:ec:d9:f7:66:4c:34:37:b6:2d:7c:
         ed:95:75:c3:91:a6:04:fb:dc:97:83:2b:2a:49:8d:27:dc:df:
         00:c0:8f:61:d9:ed:76:5d:d8:80:30:e4:54:c4:50:60:18:58:
         9e:74:d4:4a:55:2c:64:5b:df:79:53:23:35:ad:8d:bb:22:6e:
         71:5e:a2:e3:66:67:22:2e:6e:86:62:7e:b6:24:35:cd:ca:8e:
         01:d9:0e:bb:21:01:ee:a7:45:7e:c2:56:c2:f4:d0:40:60:43:
         47:2b:b9:bd:ac:c3:4e:db:56:0f:3b:ac:eb:65:cd:92:ef:37:
         c9:96:cd:27:10:70:6e:a6:6a:84:8e:88:d2:de:46:9c:43:d8:
         26:34:fb:2d:5a:8e:65:7e:47:89:57:c7:e7:c8:1f:e4:3d:83:
         e7:66:a8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org