Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132382e302f32342d3234203d3e20323730353134.roa
File:                     3137372e31312e3132382e302f32342d3234203d3e20323730353134.roa (raw, json)
Hash identifier:          jjuJaHkAmcmFzPCmJexi8pzY7GB3kpTISD9+QkcxM7s=
Subject key identifier:   60:78:3D:9D:34:C4:EF:29:F9:70:CC:C2:CF:07:82:A1:A3:E8:7F:E7
Certificate issuer:       /CN=35F6CB498D4B581CD56EFC2125053A8C6BF1D329
Certificate serial:       7023BFA57A94995BA066D1FFD1E956BE737D0E47
Authority key identifier: 35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132382e302f32342d3234203d3e20323730353134.roa
Signing time:             Mon 25 Sep 2023 17:00:00 +0000
ROA not before:           Mon 25 Sep 2023 16:55:00 +0000
ROA not after:            Mon 23 Sep 2024 17:00:00 +0000
asID:                     270514
IP address blocks:        177.11.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:23:bf:a5:7a:94:99:5b:a0:66:d1:ff:d1:e9:56:be:73:7d:0e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35F6CB498D4B581CD56EFC2125053A8C6BF1D329
        Validity
            Not Before: Sep 25 16:55:00 2023 GMT
            Not After : Sep 23 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:10:51:2e:32:c2:1b:a5:d5:11:07:89:0f:
                    25:71:23:5e:7a:63:21:56:ff:5e:09:f3:fa:c4:10:
                    cb:ba:7c:ed:a4:96:08:90:a7:e7:46:d2:f9:57:1a:
                    f0:ef:b7:04:e3:42:61:12:b4:b4:6c:c1:7b:0c:eb:
                    50:56:e3:5a:e2:00:61:ca:fb:27:a0:56:69:1e:75:
                    ad:5c:64:a5:cc:0f:c0:48:4f:c5:aa:e0:b1:81:7e:
                    b4:55:b9:d5:1d:1c:73:04:83:6c:2d:53:15:97:f4:
                    60:b1:3c:2b:24:a1:cc:de:89:3d:e5:69:cb:de:99:
                    09:c2:54:3d:51:20:47:6a:b3:17:96:4a:ce:5e:37:
                    95:46:25:33:b3:e4:64:a4:2a:c8:65:39:72:57:22:
                    d9:db:7f:9c:c3:32:bd:f2:17:71:d5:0c:60:62:25:
                    45:0e:7a:b5:11:71:fd:99:e2:fd:d9:66:0b:af:cc:
                    37:ea:18:4a:6e:23:d4:e8:ce:bb:a5:f6:e4:91:32:
                    8b:e7:4e:a6:84:f6:c7:9f:c7:b5:54:88:a1:20:7c:
                    33:73:d4:7b:18:28:d5:44:41:9c:0b:67:b3:8f:f1:
                    78:2a:26:bb:16:95:dc:6f:29:23:0e:a6:cd:58:fd:
                    cb:22:42:ed:ac:b8:99:0c:b8:e6:4b:98:9b:07:92:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:78:3D:9D:34:C4:EF:29:F9:70:CC:C2:CF:07:82:A1:A3:E8:7F:E7
            X509v3 Authority Key Identifier:
                keyid:35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132382e302f32342d3234203d3e20323730353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:97:9a:1d:88:c2:19:52:65:28:84:43:ba:24:26:25:01:4b:
         dd:69:bc:3c:c8:d4:4e:8d:a9:85:f7:9f:43:d0:28:7c:8a:45:
         39:61:ee:73:57:f7:00:71:ba:a7:8c:26:c8:30:fe:12:e1:de:
         d9:53:e4:4d:32:c0:ba:8d:18:3a:62:2a:21:50:86:f8:15:c6:
         3f:7b:ee:ee:64:ba:4f:bb:4a:9e:66:45:13:92:10:e2:f4:da:
         63:23:fd:79:be:4f:ff:aa:53:96:0d:6c:82:8c:e3:1e:f3:d9:
         c7:c3:5c:97:a5:09:be:88:73:ae:fa:10:9a:b8:0d:ef:ce:64:
         f5:ff:a8:f3:93:82:48:11:da:c5:c5:4d:ed:56:00:c9:5f:12:
         19:d9:4d:6b:10:99:c6:6e:ba:08:c8:9e:f1:fc:6a:94:7d:a4:
         f0:c6:c4:a6:05:8b:88:75:4a:07:9a:fc:fb:2f:98:a1:dc:eb:
         35:eb:7b:2f:25:54:66:8a:b6:73:9f:9a:e7:00:71:c7:8a:f8:
         e8:b2:bb:82:8e:3b:73:3e:10:40:27:7b:1b:6d:55:2b:f0:bb:
         41:08:eb:a6:a7:f1:18:ac:fc:1e:e5:63:96:1a:4d:90:3a:6e:
         1b:16:77:9c:ab:f4:61:3e:ad:e0:d2:17:4c:d5:79:cf:d5:48:
         5c:a8:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org