Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230362e302f32342d3234203d3e20323632393031.roa
File:                     3137372e32322e3230362e302f32342d3234203d3e20323632393031.roa (raw, json)
Hash identifier:          6H6yNZOae2Vx/MXn6WoXaLXNm8Q+pjjY5vk5vID1l60=
Subject key identifier:   BC:DC:23:D0:07:00:3D:11:EF:D3:2D:42:BC:3E:C4:82:50:D2:3A:41
Certificate issuer:       /CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
Certificate serial:       6E74507A51CC9116A1C8681EB94313877554C617
Authority key identifier: 15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230362e302f32342d3234203d3e20323632393031.roa
Signing time:             Mon 04 Dec 2023 19:44:19 +0000
ROA not before:           Mon 04 Dec 2023 19:39:19 +0000
ROA not after:            Mon 02 Dec 2024 19:44:19 +0000
asID:                     262901
IP address blocks:        177.22.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:74:50:7a:51:cc:91:16:a1:c8:68:1e:b9:43:13:87:75:54:c6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1523F405B2D6D0F107D4813DBB04B07AC371586E
        Validity
            Not Before: Dec  4 19:39:19 2023 GMT
            Not After : Dec  2 19:44:19 2024 GMT
        Subject: CN=BCDC23D007003D11EFD32D42BC3EC48250D23A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ae:e8:01:3f:bb:84:11:c6:6a:16:6f:98:a2:
                    5c:4f:b4:50:af:46:d9:75:be:78:40:54:10:72:e6:
                    ec:77:10:1f:e3:e8:b7:97:c7:42:c7:00:4b:34:d4:
                    01:9f:0f:38:28:8b:b5:92:35:2d:3c:9d:fe:e4:e0:
                    66:90:23:da:eb:13:22:d8:88:d8:57:f8:b0:a6:98:
                    2d:4a:68:a0:27:f1:77:29:45:78:3a:e2:ac:ad:13:
                    82:72:2b:fb:eb:ea:7e:04:c3:3f:1f:07:7a:3d:d6:
                    5b:02:fe:1c:5c:17:db:75:f6:b4:b1:46:e9:6d:dc:
                    4a:d4:08:04:d1:6d:47:b7:ee:ee:d8:42:8b:fd:f1:
                    99:f5:bb:0f:18:39:0c:e1:e3:3b:e5:be:0c:f7:a1:
                    e4:76:6f:f0:eb:b8:a6:f1:a9:91:a4:fe:1e:9f:9b:
                    bb:10:d8:85:78:ca:6b:18:04:06:4d:33:6e:d7:69:
                    7b:64:67:6e:64:e8:e8:f9:e9:86:71:63:24:b7:19:
                    a5:b7:8c:27:08:54:3e:c4:47:78:f9:e7:6e:14:88:
                    bd:7f:6c:35:d9:e2:04:ac:a9:38:35:22:a8:1c:d6:
                    4c:fb:62:1b:1f:f4:99:91:1c:c8:ad:63:46:eb:0d:
                    c7:30:65:91:97:80:d6:67:b3:1a:ce:18:98:ce:2c:
                    e5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DC:23:D0:07:00:3D:11:EF:D3:2D:42:BC:3E:C4:82:50:D2:3A:41
            X509v3 Authority Key Identifier:
                keyid:15:23:F4:05:B2:D6:D0:F1:07:D4:81:3D:BB:04:B0:7A:C3:71:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1523F405B2D6D0F107D4813DBB04B07AC371586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3230362e302f32342d3234203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:cd:4f:1f:8b:db:c3:0e:29:ff:73:57:d2:55:c5:50:48:c7:
         f7:3f:65:ea:62:5d:c7:51:d1:41:6f:52:88:9d:d9:0a:3d:60:
         9f:74:75:1b:6e:95:da:50:36:25:ab:29:42:73:c2:bd:00:a3:
         9e:e3:81:46:5c:e9:f3:54:d6:8d:a8:bc:a7:87:9c:eb:e3:ce:
         92:4c:c9:94:41:57:2a:be:8d:34:29:80:ef:d9:0f:e9:63:9d:
         15:b3:77:2c:39:14:e6:d1:66:ad:5b:55:5b:b0:a6:40:7f:32:
         b7:7d:98:5d:36:f0:95:75:d9:f1:96:ab:a8:60:16:45:21:c3:
         97:88:4b:8f:16:9a:fc:83:40:04:18:e8:3c:b5:f9:55:e0:fa:
         84:47:d1:12:65:04:be:e8:c1:df:a3:55:48:64:11:33:7c:8c:
         6d:15:d1:76:f1:8c:4c:04:a6:25:63:63:6a:4a:05:de:a6:f3:
         d8:db:67:8c:79:c8:1f:93:79:54:b5:0f:f8:b3:95:94:8e:4a:
         07:02:83:b5:05:53:b7:48:48:32:16:9c:b1:95:4e:ee:52:d0:
         09:41:6f:67:23:3a:14:26:9b:3a:74:62:35:d4:a3:70:74:05:
         f8:aa:79:10:e4:04:b7:d2:59:1c:6d:36:45:60:da:ce:60:fb:
         b4:ae:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org