Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e302e302f32302d3234203d3e203532383731.roa
File:                     3137372e3133362e302e302f32302d3234203d3e203532383731.roa (raw, json)
Hash identifier:          PDJ3IEYf6e+ma4espiuaf04YjVNIHzWjWx27u2ER6cw=
Subject key identifier:   5C:85:B8:82:CB:67:E6:6C:D1:D8:CB:17:FF:8D:34:0E:C4:59:26:AB
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       52FEE79C00A6AB7E0A7FC63F20AB9437B8515B88
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e302e302f32302d3234203d3e203532383731.roa
Signing time:             Tue 11 Oct 2022 20:09:03 +0000
ROA not before:           Tue 11 Oct 2022 20:04:03 +0000
ROA not after:            Tue 10 Oct 2023 20:09:03 +0000
asID:                     52871
IP address blocks:        177.136.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fe:e7:9c:00:a6:ab:7e:0a:7f:c6:3f:20:ab:94:37:b8:51:5b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Oct 11 20:04:03 2022 GMT
            Not After : Oct 10 20:09:03 2023 GMT
        Subject: CN=5C85B882CB67E66CD1D8CB17FF8D340EC45926AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c8:d2:dd:b7:ac:47:e9:da:a3:3b:ea:0a:fa:
                    29:b4:0d:90:35:68:64:12:4d:d6:7e:f0:16:69:90:
                    59:7d:d7:76:26:3e:7e:9a:05:8e:de:9d:c9:87:29:
                    a2:f3:03:00:d1:9e:b5:4d:83:a7:cf:3c:0c:92:f5:
                    0f:f6:b4:29:56:53:a5:f3:d8:bc:f0:10:40:4a:cc:
                    46:4d:f2:51:87:76:9f:b0:eb:5a:74:a0:cd:c4:d3:
                    dd:27:89:5b:0e:06:bc:90:bb:e7:d0:39:3a:98:6e:
                    42:d2:81:80:33:b6:9c:44:36:65:a0:ae:70:48:e0:
                    e7:ec:12:54:68:8b:a3:f0:e2:1b:12:1a:ff:46:bc:
                    4e:30:72:e9:7f:34:65:92:6c:40:03:32:6f:b9:df:
                    0a:5a:28:66:e9:8d:16:b8:a4:90:a9:fb:56:dd:00:
                    5c:11:2c:43:03:29:c3:17:ed:fe:c1:cb:8e:45:0b:
                    38:82:d2:55:eb:a2:6a:06:4a:fc:24:1b:9a:cd:fb:
                    24:48:0f:bf:d2:c8:22:8c:fa:d5:df:de:3a:6c:19:
                    36:d8:e8:ba:26:44:93:99:3a:90:a8:55:9d:d6:68:
                    1e:27:10:4d:cb:ec:ed:c8:4c:17:ea:61:56:a3:db:
                    f8:90:a7:ce:d6:98:04:c9:ec:ac:8d:c0:60:56:47:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:85:B8:82:CB:67:E6:6C:D1:D8:CB:17:FF:8D:34:0E:C4:59:26:AB
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e302e302f32302d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:82:71:1d:da:da:bb:42:0d:5b:f3:12:19:7b:db:50:97:24:
         cc:db:9a:37:26:9b:2d:e1:b4:df:42:82:ed:b3:ba:1f:5b:01:
         77:05:d2:d7:7c:eb:01:3b:c1:ef:8e:bb:78:99:41:c8:8b:89:
         47:26:79:b7:72:2d:7d:4e:2f:70:f4:8c:cd:6f:bb:80:3a:54:
         98:b2:a1:4a:14:4e:be:29:f3:99:6e:53:8d:b0:d6:56:72:8b:
         84:f7:18:24:f9:0f:eb:65:d3:04:7b:b3:26:c6:f2:3b:ce:01:
         7e:66:a5:a4:d7:90:b0:3b:12:89:4f:84:f3:3d:d0:66:dd:fc:
         68:99:33:6c:ba:4f:60:f3:60:2a:c7:6e:65:9d:94:ef:00:6c:
         79:01:b6:d3:3a:7b:01:60:2d:8e:92:9b:15:10:ac:a6:54:38:
         0f:70:e5:47:ea:c1:2c:b7:c6:2e:56:f5:c7:64:20:1a:f2:87:
         e9:ca:4e:86:8f:ad:f5:39:62:af:b1:73:05:33:1f:a4:1e:d2:
         7d:c5:e3:39:c5:4e:1a:16:c7:02:4b:f7:b0:01:4e:0f:90:d3:
         d9:0b:4d:25:72:80:56:d5:f1:4e:8e:13:69:96:e8:ed:4c:d7:
         ab:d8:27:0a:c3:7d:34:1f:01:d5:a6:e8:25:1a:d0:07:08:c5:
         3f:7e:c5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org