Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230352e302f32342d3234203d3e20323632393031.roa
File:                     3137372e32322e3230352e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          N2+BIUKL6lzND1vfL5Z5oYUNX937UXRa2Sn9XVumS3Y=
Subject key identifier:   97:16:FD:A7:FE:F2:06:68:87:CC:09:1C:E1:1A:D1:61:5E:A4:F4:9A
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       46F8C95242BC0F4A99D186B75FCBCCD78E2B9C
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230352e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:40 +0000
ROA not before:           Mon 04 Dec 2023 19:39:40 +0000
ROA not after:            Mon 02 Dec 2024 19:44:40 +0000
asID:                     262901
IP address blocks:        177.22.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f8:c9:52:42:bc:0f:4a:99:d1:86:b7:5f:cb:cc:d7:8e:2b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:40 2023 GMT
            Not After : Dec  2 19:44:40 2024 GMT
        Subject: CN=9716FDA7FEF2066887CC091CE11AD1615EA4F49A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:c8:25:2a:1a:82:92:61:8a:41:25:3b:9b:
                    a1:6a:0c:17:5e:f1:f5:fc:95:f2:2b:20:7e:0b:b7:
                    f6:2f:eb:ba:c4:c2:20:32:0a:e8:10:e2:15:09:24:
                    88:eb:99:53:7b:e1:b3:b5:59:9b:8a:95:3f:30:76:
                    94:7d:d1:90:cc:3c:81:94:54:9a:0e:d6:74:f6:c3:
                    b4:74:24:f9:8a:63:56:cc:36:7a:35:6c:3c:18:fa:
                    45:87:81:78:b2:78:f6:61:8e:dd:db:11:2c:8d:a8:
                    f1:cd:a1:40:75:f1:af:22:9a:0f:be:96:24:96:9f:
                    8b:f6:bd:43:b0:be:7d:7c:7f:ce:a1:bc:cc:31:6f:
                    51:82:33:14:44:65:91:3c:8f:09:64:0d:f9:1b:16:
                    97:09:00:9d:70:9d:9f:b0:f6:57:d3:68:25:8b:74:
                    29:5f:16:59:35:63:f9:e7:f8:bc:dd:d0:49:e8:7a:
                    43:8e:d8:2b:6e:fe:e4:b8:bc:87:97:e1:40:cc:c9:
                    4f:0d:ba:c4:86:6f:0c:e8:73:07:3a:27:f1:00:a9:
                    b4:61:96:fa:b7:ac:c2:90:59:31:07:fe:3d:41:50:
                    55:be:04:7c:d2:5b:86:03:6f:fa:aa:5f:0a:74:b4:
                    d2:e2:55:0d:09:f2:92:eb:46:8a:96:a5:72:16:13:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:16:FD:A7:FE:F2:06:68:87:CC:09:1C:E1:1A:D1:61:5E:A4:F4:9A
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230352e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:bb:c2:a3:ad:65:39:ba:ae:d6:6e:22:c1:6a:3d:62:c9:24:
         73:dd:a5:f7:60:f5:55:18:7a:17:3d:45:b0:39:05:83:a7:2c:
         d5:bc:c1:56:4d:d8:3f:09:ec:a5:e8:6f:96:56:36:f8:36:b9:
         37:49:a5:4b:3f:39:d9:97:97:4a:0f:01:9d:a9:d6:39:b5:d2:
         2c:7a:64:1c:2a:5a:3f:ce:31:6d:79:9e:71:86:33:f8:db:a5:
         20:1a:28:5d:88:bb:de:88:fe:fd:dc:d0:58:ba:38:20:91:9d:
         32:c3:d2:2e:79:43:3a:09:f7:8b:ab:fb:b1:98:38:56:f0:59:
         40:90:ca:49:e1:fc:1b:db:9e:ac:5f:85:d2:6a:33:b1:b6:43:
         6f:69:51:f5:06:db:af:19:8d:e4:6d:ea:80:92:73:bb:d2:7e:
         c1:23:2c:45:b5:21:29:ea:a7:57:54:a6:4c:f8:26:0a:70:af:
         40:4f:17:ed:dd:04:a9:13:33:e9:f4:e3:39:af:a4:89:79:cd:
         9b:74:29:92:67:62:88:ad:e1:9f:d0:8c:f4:b7:73:9e:07:dd:
         c6:a0:a9:d4:28:5b:e1:b3:07:83:e4:b6:c0:9a:81:46:63:bc:
         af:89:46:b3:34:27:00:99:c8:79:97:c9:ca:61:38:ce:50:89:
         38:d0:2a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org