Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/3137372e3132342e3130392e302f32342d3234203d3e20323731333537.roa
File:                     3137372e3132342e3130392e302f32342d3234203d3e20323731333537.roa (raw, json)
Hash identifier:          qvoD14qDS+daK1/flVGQenw6IlkAVT5oiqKJ8kCTo7s=
Subject key identifier:   D3:9A:17:A8:5C:E9:22:F5:70:DE:DF:FF:D2:C4:DF:96:6A:78:6A:E1
Certificate issuer:       /CN=557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A
Certificate serial:       5E5BB2322E34F9D94670F0E5A47647886E4DE24A
Authority key identifier: 55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/3137372e3132342e3130392e302f32342d3234203d3e20323731333537.roa
Signing time:             Tue 24 Oct 2023 14:35:28 +0000
ROA not before:           Tue 24 Oct 2023 14:30:28 +0000
ROA not after:            Tue 22 Oct 2024 14:35:28 +0000
asID:                     271357
IP address blocks:        177.124.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5b:b2:32:2e:34:f9:d9:46:70:f0:e5:a4:76:47:88:6e:4d:e2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A
        Validity
            Not Before: Oct 24 14:30:28 2023 GMT
            Not After : Oct 22 14:35:28 2024 GMT
        Subject: CN=D39A17A85CE922F570DEDFFFD2C4DF966A786AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:d5:1d:0a:67:62:a1:03:d3:a0:32:dd:ac:
                    cd:9a:0c:cb:9b:cb:25:a2:ce:35:4d:40:01:95:38:
                    f4:5b:ee:29:b0:c3:2f:b8:89:65:16:48:05:ef:a1:
                    dd:be:82:b1:8c:a2:4f:5d:75:75:a5:5c:f5:ae:e0:
                    a2:6c:f8:4f:aa:a4:db:ea:ac:f5:7a:01:a6:70:ea:
                    0d:0f:78:01:fa:b6:16:d4:88:7e:e9:e9:43:85:fd:
                    e2:14:ec:64:08:fa:be:15:7d:b8:8d:84:2c:80:5f:
                    17:5e:65:64:a5:2c:e6:0d:03:1a:9b:7e:e0:ce:a7:
                    6a:e4:c5:cb:22:c0:62:df:40:b1:d4:18:16:bf:65:
                    6d:93:01:51:78:c1:27:d7:3e:eb:2d:df:5e:81:5a:
                    69:f9:71:af:83:6f:a3:3f:02:01:38:9b:3a:a5:11:
                    08:75:75:a6:d9:15:b2:24:eb:40:a3:eb:1d:d5:76:
                    2f:a7:60:4b:93:09:71:43:a8:3c:f2:0a:4d:2f:34:
                    1b:36:7e:e4:b4:ca:8a:71:22:0b:62:2f:c4:9e:94:
                    63:93:fa:9a:94:05:f0:de:03:bf:4e:cf:2a:71:9e:
                    8d:d0:d5:3c:dc:af:2e:25:7c:06:14:84:6f:76:3e:
                    e3:28:e6:f0:34:03:ed:d6:95:60:c4:a4:32:1a:34:
                    1b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9A:17:A8:5C:E9:22:F5:70:DE:DF:FF:D2:C4:DF:96:6A:78:6A:E1
            X509v3 Authority Key Identifier:
                keyid:55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/3137372e3132342e3130392e302f32342d3234203d3e20323731333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:11:3c:c7:f3:1d:bf:c7:5c:3e:9e:92:18:ba:b5:eb:86:bd:
         0e:54:c3:de:9a:e9:66:48:8f:73:97:59:dc:f9:8c:25:de:29:
         ad:81:3a:fc:fd:53:be:73:01:df:62:d7:6e:68:ab:b8:8f:54:
         61:1a:b3:b6:51:38:6f:b9:5c:9d:5a:cc:cf:25:b4:3d:4a:8d:
         21:73:ff:27:95:38:a2:8d:da:1c:7c:49:03:03:4b:15:e7:c1:
         7c:53:12:81:78:98:0d:4d:5b:b8:6a:08:ee:66:fc:6c:2d:d7:
         cb:eb:38:33:e2:d1:d0:7a:78:91:fb:6c:ec:ac:b0:18:fb:33:
         85:9b:9a:94:9d:b8:e9:cc:5e:c6:8f:d4:db:82:61:2b:79:36:
         dd:3e:a6:1d:a0:58:aa:62:18:ff:e9:76:96:cd:07:f7:4a:0c:
         24:ce:63:ae:c3:f2:88:e7:8d:72:62:74:12:f5:90:16:c4:87:
         f1:e7:1f:51:75:f2:97:6d:4a:55:73:64:c3:68:0a:a2:06:5d:
         3b:d7:60:84:51:15:dd:37:45:7d:d5:65:69:e3:a1:81:29:c4:
         3f:81:70:0e:d4:fa:6a:46:c5:10:8c:62:44:6c:47:60:6e:e1:
         af:4a:fe:df:89:1f:63:db:df:d8:cf:ec:2a:72:83:67:91:41:
         ea:96:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org