Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34302e302f32342d3234203d3e20323633303338.roa
File:                     3137372e32332e34302e302f32342d3234203d3e20323633303338.roa (raw, json)
Hash identifier:          dnBtSfgdn6+fbeihrhtNBTmN7OQaNJBDF0ybf8Ul5wI=
Subject key identifier:   5B:7F:94:AB:77:4D:2E:A6:A0:EE:BB:F1:37:ED:D8:C1:3D:EC:E3:9A
Certificate issuer:       /CN=B72A8A90D6AB4B9DE27857518572E078B4ADF5F5
Certificate serial:       085F0052C3EB92C154CCBB3DE6F2303AA5C38F62
Authority key identifier: B7:2A:8A:90:D6:AB:4B:9D:E2:78:57:51:85:72:E0:78:B4:AD:F5:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B72A8A90D6AB4B9DE27857518572E078B4ADF5F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34302e302f32342d3234203d3e20323633303338.roa
Signing time:             Wed 14 Feb 2024 15:03:03 +0000
ROA not before:           Wed 14 Feb 2024 14:58:03 +0000
ROA not after:            Wed 12 Feb 2025 15:03:03 +0000
asID:                     263038
IP address blocks:        177.23.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5f:00:52:c3:eb:92:c1:54:cc:bb:3d:e6:f2:30:3a:a5:c3:8f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72A8A90D6AB4B9DE27857518572E078B4ADF5F5
        Validity
            Not Before: Feb 14 14:58:03 2024 GMT
            Not After : Feb 12 15:03:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:dc:b8:39:94:7d:5d:91:07:b4:8a:d4:99:
                    b1:60:87:c7:83:ae:56:b6:9b:2f:77:33:80:b4:96:
                    f4:de:cc:4a:8b:82:4c:ef:6f:64:95:2c:2f:b4:03:
                    0d:77:a1:c0:ca:70:29:15:f8:e4:0c:49:9c:67:3f:
                    dd:01:d2:01:e0:bf:6d:3f:7d:99:38:21:8d:92:8a:
                    7b:fe:46:75:32:81:b6:c9:69:fb:d2:51:8f:25:b9:
                    21:de:c1:53:e1:12:fc:65:f5:db:09:05:73:d4:74:
                    dc:79:35:e2:b0:34:2f:52:e7:7d:b4:91:49:68:dc:
                    b7:a8:ad:63:0f:3d:8e:40:d5:cf:3d:8c:38:53:f6:
                    f0:69:29:a1:0c:57:93:2e:29:3a:36:ee:60:39:f4:
                    04:b3:55:ad:75:24:63:f5:5f:e1:25:78:19:eb:f6:
                    9f:d9:b3:df:a2:ca:39:a8:e9:c1:06:4b:2b:08:26:
                    f0:4c:2c:2c:c7:fe:13:53:4c:0f:fb:ae:2f:48:08:
                    8b:8e:eb:9d:64:c3:aa:2e:d5:5e:c6:4e:5d:de:67:
                    4e:27:09:09:1c:76:4a:da:63:6f:e1:71:f4:51:95:
                    e7:32:b9:cf:03:8d:f7:7f:6a:32:d0:57:80:53:3a:
                    6e:04:7c:9d:5a:ee:09:86:50:d9:e8:b5:ae:af:9d:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7F:94:AB:77:4D:2E:A6:A0:EE:BB:F1:37:ED:D8:C1:3D:EC:E3:9A
            X509v3 Authority Key Identifier:
                keyid:B7:2A:8A:90:D6:AB:4B:9D:E2:78:57:51:85:72:E0:78:B4:AD:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/B72A8A90D6AB4B9DE27857518572E078B4ADF5F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B72A8A90D6AB4B9DE27857518572E078B4ADF5F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Jd5fpkjeDmi1tz2qY1Bet6rHRiCfAWVQd64gr6MYK2m/0/3137372e32332e34302e302f32342d3234203d3e20323633303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:4d:70:29:f8:6f:79:a0:b0:73:1c:b2:80:6c:0f:8c:7f:a5:
         65:c8:39:c5:eb:84:e3:7e:3c:91:b4:4c:87:95:37:c1:10:5a:
         16:e7:83:be:11:bd:56:c3:24:95:a8:3a:04:95:2f:e2:ad:2f:
         06:69:cc:0e:0d:b6:4d:0b:04:ff:bb:fd:ef:ad:98:91:08:38:
         aa:2f:14:86:65:37:41:c8:2e:b9:24:f9:6e:44:1a:a9:5a:a0:
         bb:9f:30:00:43:27:70:9b:ef:8f:81:60:cc:47:32:5d:10:2a:
         4a:22:18:9d:d1:3c:60:a4:74:f4:a5:cd:34:5a:83:e8:aa:63:
         7c:ad:8f:70:f9:6a:b9:93:1f:59:4c:0e:9d:a6:14:62:40:f0:
         1b:21:5d:05:d7:41:21:54:43:2c:22:ef:ae:5e:e5:bd:ed:61:
         f8:11:2d:a6:2e:2a:c1:c7:3f:34:07:7f:43:55:ad:51:2d:9b:
         46:a3:6c:51:6f:2b:0d:c6:58:18:8c:a4:29:71:4b:8e:c3:5b:
         93:d7:05:36:ab:d1:25:3e:ce:35:b8:b7:39:7d:ce:10:f7:3c:
         df:2d:01:f3:33:09:50:15:db:54:5b:9d:fa:45:2e:6b:80:f1:
         f1:87:9f:9f:cb:b8:51:3e:2c:53:ce:6d:0d:c6:a7:cc:e8:4a:
         ae:c2:1f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org