Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e34302e302f32332d3234203d3e203532383731.roa
File:                     3137372e3133362e34302e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          io7IHWJjW9eaZvYoa/zdES1ZxzvSB2bivW/7mwK1vT0=
Subject key identifier:   5A:39:05:0C:49:F1:B7:5D:33:72:47:D2:8D:9D:EA:83:4A:44:83:B3
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       6250676EA1920B987839282009E6BA54AE548216
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e34302e302f32332d3234203d3e203532383731.roa
Signing time:             Tue 07 Nov 2023 11:44:34 +0000
ROA not before:           Tue 07 Nov 2023 11:39:34 +0000
ROA not after:            Tue 05 Nov 2024 11:44:34 +0000
asID:                     52871
IP address blocks:        177.136.40.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:50:67:6e:a1:92:0b:98:78:39:28:20:09:e6:ba:54:ae:54:82:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Nov  7 11:39:34 2023 GMT
            Not After : Nov  5 11:44:34 2024 GMT
        Subject: CN=5A39050C49F1B75D337247D28D9DEA834A4483B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:fc:4b:5b:3b:45:c9:a9:3e:0a:51:ad:1b:
                    96:a9:5b:1b:60:a8:34:79:c5:c4:96:af:d2:a8:cd:
                    59:cd:8c:61:90:1c:2d:b2:cb:74:00:c3:fd:28:48:
                    17:b3:47:b9:fc:f8:99:33:6d:c7:99:ab:10:f3:5c:
                    c8:40:6f:0c:b3:9f:e9:64:3f:59:bb:7f:de:af:14:
                    04:db:b5:0c:0b:ac:95:fe:a8:0e:2c:35:98:44:a5:
                    14:67:85:1b:b3:4d:21:4e:aa:2a:db:dc:4e:6a:98:
                    e6:16:c9:71:c2:83:2a:43:a3:e1:ba:2c:6b:fb:40:
                    4f:d3:54:b1:0a:90:d6:c2:b1:09:a3:95:27:89:aa:
                    d0:40:08:82:7f:d3:2f:08:3f:e3:a4:ad:4b:64:58:
                    8a:e4:b4:76:66:51:7e:62:bb:2b:c9:52:e0:a0:fb:
                    4e:a7:fc:bd:4b:83:9c:7a:59:5a:a8:5f:c4:f3:76:
                    6f:69:a4:07:c1:a9:a9:7c:12:60:66:4e:e7:e3:03:
                    6f:01:95:88:13:16:60:14:92:44:82:1f:b9:1e:71:
                    9b:6b:17:8f:a7:d7:d6:8e:ca:0c:82:4a:ce:d4:13:
                    3f:af:db:82:81:19:e1:45:e7:bc:18:96:08:df:c3:
                    b2:0b:7f:b3:8d:3b:d3:e9:4f:c7:87:8d:0d:06:6a:
                    d5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:39:05:0C:49:F1:B7:5D:33:72:47:D2:8D:9D:EA:83:4A:44:83:B3
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3137372e3133362e34302e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:30:47:28:0d:89:20:6b:7a:7f:8a:ab:b0:4d:4a:7d:fb:80:
         9f:94:b0:bd:24:ba:47:82:bd:20:e3:a6:26:ee:d8:ba:e5:e6:
         35:95:a9:9e:49:2b:07:30:22:5d:4a:9f:02:64:f8:d2:71:b7:
         15:c8:27:fa:21:1a:8a:fb:0b:29:5b:bc:a0:e8:b8:2e:3e:2d:
         f3:72:65:50:9a:c9:24:83:c3:01:38:4a:52:16:58:ad:95:3e:
         34:a6:ef:0d:03:58:63:2d:34:b0:c1:14:c1:79:23:83:08:4f:
         91:08:68:66:31:2a:4a:30:c6:a4:46:fa:5a:f0:fa:eb:18:fd:
         bf:83:1a:f5:cf:26:d2:c1:dd:70:26:8e:3f:d2:d0:a3:4d:6a:
         87:5c:3a:10:6a:ec:9a:e7:de:ae:bc:a0:11:3f:16:b8:70:eb:
         5c:e7:ce:ba:14:09:4f:e1:2e:b8:d8:d7:8f:69:ff:10:7e:63:
         ce:dc:20:6c:a3:df:17:b5:8e:ad:f3:f1:d1:2c:e2:ca:03:bd:
         75:ec:f4:a6:1c:38:4b:fd:71:55:fe:a3:82:29:b0:c0:35:d9:
         01:5e:3a:47:5d:0e:3d:38:b2:ae:1d:b7:30:92:59:b7:ad:75:
         87:eb:04:49:10:bc:b1:aa:1e:4e:21:0b:61:98:b1:12:46:93:
         85:f2:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org