Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32332d3233203d3e20323633363034.roa
File:                     3137372e37312e38382e302f32332d3233203d3e20323633363034.roa (raw, json)
Hash identifier:          sEDYK7Z/Au/1jm3q0sFJhxVI5xxIOpTGiJBQKY1FdCg=
Subject key identifier:   A1:67:35:EC:BD:EB:3F:6E:AA:AC:03:9E:9A:C6:16:BD:C4:47:51:A4
Certificate issuer:       /CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
Certificate serial:       5B26F8179F7960A4A5BC366B0FDCB11CFFF72818
Authority key identifier: 49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32332d3233203d3e20323633363034.roa
Signing time:             Tue 19 Dec 2023 17:10:16 +0000
ROA not before:           Tue 19 Dec 2023 17:05:16 +0000
ROA not after:            Tue 17 Dec 2024 17:10:16 +0000
asID:                     263604
IP address blocks:        177.71.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:26:f8:17:9f:79:60:a4:a5:bc:36:6b:0f:dc:b1:1c:ff:f7:28:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
        Validity
            Not Before: Dec 19 17:05:16 2023 GMT
            Not After : Dec 17 17:10:16 2024 GMT
        Subject: CN=A16735ECBDEB3F6EAAAC039E9AC616BDC44751A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:81:9a:4c:f1:62:7a:6a:ac:be:7e:cf:a0:
                    ac:81:99:d6:0d:c7:23:27:60:f0:e3:8a:3d:e5:61:
                    fb:10:34:4b:91:54:db:dd:de:3d:a0:89:8f:96:c1:
                    41:de:27:b9:bd:90:55:d6:4c:61:45:25:fe:6c:90:
                    63:47:ed:22:16:6c:f2:97:72:e9:c7:b5:0b:ef:13:
                    29:72:8a:11:84:9f:cd:6f:1a:06:e3:68:12:19:db:
                    b3:91:be:e7:8e:ad:b7:d0:3f:6f:74:ed:a0:59:ed:
                    81:92:9b:af:87:17:32:da:d6:66:69:6e:52:66:6c:
                    15:f5:56:30:4b:30:a3:ef:0c:61:76:71:1a:51:6a:
                    58:a3:21:48:c3:18:a0:6d:3e:54:72:fd:92:78:59:
                    59:cc:59:a4:82:74:1f:10:70:1d:5c:cf:09:89:14:
                    4d:17:69:9e:c4:ec:77:95:b9:38:24:c6:c4:28:97:
                    60:c7:d2:34:f2:42:4f:05:8a:02:92:b5:5e:5c:a9:
                    03:f9:fa:85:14:57:8a:91:95:a4:9c:ca:6e:f7:bc:
                    8c:d0:f7:91:cb:c3:32:26:2c:7b:86:59:74:2f:12:
                    57:c1:0a:8f:e6:fa:50:59:cd:a0:ce:d2:03:ff:61:
                    69:59:d2:5e:2d:b9:e1:7c:62:40:5d:c3:2c:24:40:
                    f9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:67:35:EC:BD:EB:3F:6E:AA:AC:03:9E:9A:C6:16:BD:C4:47:51:A4
            X509v3 Authority Key Identifier:
                keyid:49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32332d3233203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:f5:38:8e:85:fb:9e:0b:50:75:1a:e6:e9:8f:9e:09:f5:80:
         8f:01:6b:9f:29:6c:21:e1:a5:14:51:89:bc:a8:ee:5c:7d:40:
         c5:6a:4f:70:7f:17:20:60:77:26:9b:86:5d:81:09:af:ff:e8:
         18:35:34:f2:1d:12:21:df:d7:50:84:f2:4d:6a:60:6c:86:86:
         ee:42:35:be:5a:2d:17:74:f3:0a:3d:ce:48:e5:58:90:f4:50:
         04:e4:fb:4f:ae:0d:64:f0:97:81:94:69:81:ac:a8:a2:15:49:
         9e:22:91:60:4c:84:ea:2f:55:86:83:9d:a8:e5:03:79:af:8c:
         88:d2:a8:0a:1f:79:de:6c:e7:60:57:ae:ea:a5:6e:69:cb:a9:
         a8:4b:06:0d:a4:76:7f:17:81:21:a6:5f:6e:b6:42:53:19:6f:
         86:c9:c0:71:1d:13:23:3a:5e:a6:66:83:20:ae:5b:17:d8:63:
         2c:c9:32:88:fb:16:59:76:c5:86:c5:68:9d:f6:7c:5a:cc:85:
         d8:1b:03:1d:fd:95:98:4e:40:38:15:a8:f2:f8:9a:bd:e2:3e:
         a0:51:25:95:b8:1b:7d:94:78:44:43:06:1f:4f:ab:5e:06:96:
         e8:a7:54:10:4d:5a:19:cc:dd:b5:a6:87:3c:61:4b:55:30:69:
         9b:37:96:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org