Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/3137372e3132342e3130382e302f32342d3234203d3e20323731333537.roa
File:                     3137372e3132342e3130382e302f32342d3234203d3e20323731333537.roa (raw, json)
Hash identifier:          HD9qJRa7SEtsCaX4kb+nGe4Zb+OyOr6gIe3zV4h7fM8=
Subject key identifier:   FE:B2:A9:57:34:EF:C0:50:82:B3:E9:14:92:73:03:A4:95:BE:5F:17
Certificate issuer:       /CN=557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A
Certificate serial:       25E481C0D0790FC127E2F92BE596F61BD56B7347
Authority key identifier: 55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/3137372e3132342e3130382e302f32342d3234203d3e20323731333537.roa
Signing time:             Tue 24 Oct 2023 14:35:29 +0000
ROA not before:           Tue 24 Oct 2023 14:30:29 +0000
ROA not after:            Tue 22 Oct 2024 14:35:29 +0000
asID:                     271357
IP address blocks:        177.124.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e4:81:c0:d0:79:0f:c1:27:e2:f9:2b:e5:96:f6:1b:d5:6b:73:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A
        Validity
            Not Before: Oct 24 14:30:29 2023 GMT
            Not After : Oct 22 14:35:29 2024 GMT
        Subject: CN=FEB2A95734EFC05082B3E914927303A495BE5F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:c9:2b:e7:6b:10:93:53:f0:6d:61:26:6a:
                    ab:db:90:8c:22:dd:d8:4c:45:31:22:b9:33:47:df:
                    5e:c3:3c:94:9c:6a:ae:2b:f1:fa:bb:87:70:22:61:
                    e6:3d:42:41:bb:09:a8:bc:65:1b:73:68:d2:f8:00:
                    38:bb:b6:9a:24:9e:89:65:8d:2a:0f:f1:de:cd:a2:
                    6f:80:b7:f7:86:f2:24:b1:35:a9:80:71:e0:7a:b5:
                    ac:d6:01:34:19:46:97:c9:7b:13:2b:69:4a:9a:db:
                    91:dc:5b:11:81:c4:86:8d:d7:4d:56:d1:19:03:c6:
                    ab:bc:26:94:08:03:66:a2:01:d7:40:42:58:69:3c:
                    44:0e:ed:ca:9c:12:d9:9e:3e:97:03:63:3f:4c:1d:
                    6f:5f:3b:aa:c6:2f:eb:e6:67:66:eb:25:c1:88:56:
                    53:6e:4f:f7:52:01:a1:c3:e2:91:e3:67:43:a0:cd:
                    56:9f:6b:1e:5d:bd:b6:cb:9e:b4:69:0b:42:66:78:
                    24:0e:1c:58:a0:d2:21:c5:9d:44:2f:94:09:9d:23:
                    8a:4e:d1:14:98:52:9c:08:08:6b:7a:0b:1e:73:ea:
                    2b:52:f8:96:70:82:b1:f2:94:08:3b:88:cd:38:06:
                    c8:fa:8d:fc:7f:4b:1e:e3:83:da:fd:85:e2:d1:70:
                    53:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B2:A9:57:34:EF:C0:50:82:B3:E9:14:92:73:03:A4:95:BE:5F:17
            X509v3 Authority Key Identifier:
                keyid:55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/3137372e3132342e3130382e302f32342d3234203d3e20323731333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:2f:27:32:5e:ed:e1:b6:75:6f:3d:fa:f4:0d:6a:ed:8c:63:
         8a:21:9e:61:91:31:a3:85:91:9b:e4:38:68:ac:22:25:71:6d:
         3a:84:cc:dd:1e:0a:a0:af:f1:7b:7d:d7:47:c8:c2:18:d5:b2:
         ad:73:db:59:df:39:43:64:16:48:a7:35:e4:15:e5:57:90:e8:
         d3:b6:e0:56:bb:7a:72:fd:ce:e3:f0:2f:f8:76:6c:13:ca:c9:
         5e:b1:0d:60:af:66:d8:4e:6d:66:e0:10:d8:d2:5e:01:22:76:
         b1:ce:5a:28:09:ff:c2:fd:09:b5:65:7e:d3:af:2b:b7:c3:fb:
         30:c0:96:89:7a:f6:23:2d:b9:e2:76:ba:b6:a1:35:91:32:15:
         c1:b9:00:b4:ad:fe:cc:fd:a7:98:4f:50:9a:30:7f:b1:44:be:
         56:b9:e5:c3:5e:a0:15:98:38:c7:88:ea:c1:22:7b:5c:5b:88:
         75:f4:7d:90:85:39:0c:85:a4:98:42:0c:c3:9b:f0:dc:f7:a5:
         d3:05:6a:b6:63:7f:2b:03:32:f9:c2:f7:55:71:36:77:1b:b2:
         03:49:8f:de:d3:41:79:c5:65:8c:21:34:51:30:1a:46:15:f2:
         f5:1e:07:b3:4e:7b:46:e8:10:22:6f:f1:e4:96:cb:78:de:4d:
         7e:28:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org