Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132382e302f32322d3232203d3e20323730353134.roa
File:                     3137372e31312e3132382e302f32322d3232203d3e20323730353134.roa (raw, json)
Hash identifier:          R+8qLuaRX8BciVh43fBPl8A5kUbJOy8BophJc6s3Y5E=
Subject key identifier:   86:5C:91:5C:8D:EA:9B:9C:81:33:4B:28:B7:88:01:89:F9:C0:27:97
Certificate issuer:       /CN=35F6CB498D4B581CD56EFC2125053A8C6BF1D329
Certificate serial:       139A705A68A53308B97B90684A60B414968585CF
Authority key identifier: 35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132382e302f32322d3232203d3e20323730353134.roa
Signing time:             Mon 25 Sep 2023 17:00:00 +0000
ROA not before:           Mon 25 Sep 2023 16:55:00 +0000
ROA not after:            Mon 23 Sep 2024 17:00:00 +0000
asID:                     270514
IP address blocks:        177.11.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9a:70:5a:68:a5:33:08:b9:7b:90:68:4a:60:b4:14:96:85:85:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35F6CB498D4B581CD56EFC2125053A8C6BF1D329
        Validity
            Not Before: Sep 25 16:55:00 2023 GMT
            Not After : Sep 23 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:91:46:cf:2a:56:90:fd:70:9d:b2:69:9f:
                    06:66:89:f5:22:0e:bd:7a:3e:6e:b1:f8:00:bc:42:
                    13:d6:fd:b2:c1:33:13:9e:1b:02:92:4a:fc:e0:58:
                    cb:f0:68:d2:4c:47:a2:25:4a:01:16:ed:88:69:9f:
                    9b:59:b4:6b:57:da:49:5d:b2:a0:5f:4a:56:7d:47:
                    13:24:5b:39:e4:bd:fd:7a:e5:a1:89:26:12:da:0b:
                    03:ae:02:e1:0d:5e:11:50:1b:fe:e6:66:1a:e4:3d:
                    ae:9e:6b:14:c5:ca:52:6e:06:5e:4e:3e:b7:68:73:
                    e4:3f:5a:35:e2:87:b8:88:ef:82:37:7e:43:0d:9f:
                    8c:dc:5f:53:2a:5f:3b:74:9e:de:db:f8:03:d7:dc:
                    e2:82:24:98:9e:d2:f3:d1:f5:4a:2d:03:f4:70:e8:
                    b0:b8:0a:30:36:9a:42:14:6a:4e:fe:74:2f:83:4b:
                    93:7a:6b:2b:6b:99:42:f8:a2:8b:3e:b7:55:ac:b5:
                    c3:61:33:16:3a:18:d0:99:d4:49:4d:b3:e2:6b:a6:
                    44:31:ec:c8:f4:f9:32:28:ce:27:8d:95:80:8f:85:
                    d6:00:bd:28:41:25:f8:52:0e:07:3d:02:83:f3:38:
                    8f:89:fc:99:e0:f1:89:56:70:1b:b8:15:c4:d5:96:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5C:91:5C:8D:EA:9B:9C:81:33:4B:28:B7:88:01:89:F9:C0:27:97
            X509v3 Authority Key Identifier:
                keyid:35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132382e302f32322d3232203d3e20323730353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:91:d4:39:30:18:de:a0:39:b6:a7:93:b3:29:8d:ca:76:cb:
         cd:34:03:2b:52:b7:4f:25:b9:45:e9:07:17:1a:40:6f:c8:e2:
         8a:ca:1a:d9:d5:a6:03:59:7e:d1:ff:f0:e5:97:1d:1d:39:6f:
         c2:0d:38:a8:6e:c0:4f:37:13:4a:79:9b:97:d7:15:7b:9d:85:
         35:bf:5e:4d:b9:c1:a2:72:ab:e0:e0:31:ec:81:03:55:21:af:
         91:cf:9f:a0:10:41:fb:94:7b:81:48:bf:3e:9c:b3:48:78:6f:
         11:71:b6:5e:ac:9e:f1:1a:91:b6:a6:9f:0d:83:4f:8b:e7:72:
         90:92:54:e6:f3:0d:94:0c:17:cb:26:18:ee:bd:5e:69:2a:27:
         29:c0:91:41:80:55:f5:8e:d4:ac:01:04:da:cf:02:2b:e7:c6:
         c6:66:f4:7b:e0:2a:3c:45:76:b8:c5:a9:fb:03:4b:e3:79:ac:
         31:70:0b:6d:26:1a:cf:7b:58:50:7b:0a:41:1d:cd:67:20:d1:
         72:ae:1b:f4:5e:80:5d:67:bf:95:51:35:bf:36:4f:57:ff:57:
         b2:93:3b:aa:83:2e:c2:b7:4a:e7:34:4e:ba:cc:ba:c3:3f:d5:
         b9:35:ca:d4:46:39:a4:48:98:58:e0:6f:d5:fc:c1:ea:93:a0:
         8e:a1:9a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org