Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e31342e302f32332d3234203d3e203532383731.roa
File:                     3137372e3133362e31342e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          uRUOMC0+wunB4kDTZooKvMCKC648HhbDkWXiRntj6f0=
Subject key identifier:   E3:86:3A:39:8A:91:AD:26:33:81:F5:68:EB:21:9A:F7:01:C5:68:06
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       6CE363BB6A649CCC3810A418B53C36EFF3CBF8A0
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e31342e302f32332d3234203d3e203532383731.roa
Signing time:             Tue 07 Nov 2023 11:44:33 +0000
ROA not before:           Tue 07 Nov 2023 11:39:33 +0000
ROA not after:            Tue 05 Nov 2024 11:44:33 +0000
asID:                     52871
IP address blocks:        177.136.14.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e3:63:bb:6a:64:9c:cc:38:10:a4:18:b5:3c:36:ef:f3:cb:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Nov  7 11:39:33 2023 GMT
            Not After : Nov  5 11:44:33 2024 GMT
        Subject: CN=E3863A398A91AD263381F568EB219AF701C56806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:28:ca:81:2d:f2:6d:03:b2:1d:d2:9e:36:
                    e4:90:fc:20:c0:c8:41:e5:89:d7:77:75:cf:91:ce:
                    9d:53:92:89:de:1f:24:b1:bb:25:15:96:d6:d6:de:
                    45:41:d8:b2:0a:df:46:20:91:75:52:9c:92:cb:72:
                    69:ae:44:34:a5:aa:a9:a5:ae:2f:8d:b7:8f:a8:a7:
                    fe:27:b9:c0:16:2f:b4:f2:9e:06:a1:7f:1b:f0:65:
                    7e:3d:25:d9:0b:7a:5c:6d:a9:83:81:74:9d:ad:0c:
                    b8:a5:f0:57:d2:73:c4:43:e2:5e:bd:df:ef:bb:58:
                    83:fb:9b:c9:95:4b:e5:f1:66:1f:6b:cd:42:33:bc:
                    36:44:3e:12:4b:49:f9:ef:99:7d:ab:d0:e6:94:89:
                    78:1e:06:cf:35:e4:d4:d4:d6:34:f3:a8:13:a0:bb:
                    aa:5e:da:70:e3:7a:bd:81:d7:31:a0:6d:fa:57:8d:
                    00:64:76:08:84:13:24:7e:c7:de:44:c5:f0:59:70:
                    a3:40:55:0c:2b:cc:34:73:9f:69:41:40:72:75:b6:
                    7b:50:70:81:81:34:bd:f3:df:8c:79:32:e0:52:94:
                    12:9a:9e:d2:89:0b:6a:99:9b:e9:a5:2b:58:d6:0d:
                    b0:2c:4f:ea:e2:ad:b2:f9:0a:63:94:6f:16:d0:23:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:86:3A:39:8A:91:AD:26:33:81:F5:68:EB:21:9A:F7:01:C5:68:06
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e31342e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:95:a3:10:11:1e:27:e1:62:1c:d7:76:ba:0e:65:f4:82:44:
         64:1e:5c:09:b3:44:2a:51:f1:db:e2:0d:9a:0c:80:43:a0:b3:
         6d:98:fe:94:cc:33:3d:ff:22:97:be:70:6f:95:9d:d0:5a:c5:
         5d:cb:f1:bc:d3:5e:b4:67:4f:d6:98:3e:48:58:4a:43:07:83:
         fd:5f:38:5b:ba:43:c3:14:06:23:23:0b:4c:45:ee:d7:94:5a:
         6d:65:fa:ff:9a:4c:e4:fb:7a:68:cf:10:ad:8c:4f:f1:72:bb:
         78:a0:20:2a:b7:a3:c7:42:b1:75:a0:e9:76:36:36:7e:42:77:
         fa:70:d1:5e:a3:76:a1:a2:2b:88:a5:3e:f3:52:4a:72:c4:fa:
         b8:43:0c:dc:62:96:f0:0d:ed:d6:d5:2a:d4:e0:34:6b:98:2e:
         38:dd:f5:85:6d:f5:2c:da:f5:83:6c:b1:85:89:27:36:1a:64:
         1e:b3:f0:b8:30:20:cc:2a:b2:22:80:52:eb:6b:26:c9:ee:17:
         d8:a1:65:e4:0b:c3:b0:96:48:26:18:63:ae:7c:9c:d7:1e:8c:
         76:e3:ee:51:24:a7:91:03:15:06:ac:58:f3:c5:7f:87:6b:f6:
         b4:1c:47:92:2e:2c:f8:81:39:f1:c7:af:f8:b3:2f:df:a7:d9:
         ea:62:79:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org