Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3133302e302f32342d3234203d3e20323730353134.roa
File:                     3137372e31312e3133302e302f32342d3234203d3e20323730353134.roa (raw, json)
Hash identifier:          hKo6huK3hd4xb7DY3SEj6KpDh3KUOWj4+e4QKyx6Djo=
Subject key identifier:   B1:C5:5E:F9:26:D8:D1:A6:32:8E:CF:C8:9C:74:EB:94:81:8C:72:05
Certificate issuer:       /CN=35F6CB498D4B581CD56EFC2125053A8C6BF1D329
Certificate serial:       05A937075BAB6E24FA55932B2AFA80E256BB430A
Authority key identifier: 35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3133302e302f32342d3234203d3e20323730353134.roa
Signing time:             Mon 25 Sep 2023 17:00:00 +0000
ROA not before:           Mon 25 Sep 2023 16:55:00 +0000
ROA not after:            Mon 23 Sep 2024 17:00:00 +0000
asID:                     270514
IP address blocks:        177.11.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a9:37:07:5b:ab:6e:24:fa:55:93:2b:2a:fa:80:e2:56:bb:43:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35F6CB498D4B581CD56EFC2125053A8C6BF1D329
        Validity
            Not Before: Sep 25 16:55:00 2023 GMT
            Not After : Sep 23 17:00:00 2024 GMT
        Subject: CN=3082010A0282010100B623EEC74F9E79663C0EE178975271E4A67E97C492D47CC25022761BC47BFF53DD5D371E01F45D2829F555A445B15C4DC38F4D92DC78A57B5DE8F25A165B8555078D22D958F2A65355F4DDA3A9A6977103B67DC9606E37D68D96893E8D5210496A4795C14CB5EB9BEF8E0F61F91084FBF0870FDCB15D406DF361A200CE69F9D3552771A9BD815F506A518EAA65F2BE2CBC58604DEEE67D043F30141A438CB9F9F0C354967EE0D5262D130CB80B55311DF80D8CEF004F2CDBA7B9F70C4BBC4EC5AAD033BBD47F37C28407DBB79DDA44DF2A149616790F918C0FD9DAFE4AFA3E6675D4F5BA70A31BBFFF7209872DE0AA0B995C06B1D129C19E2144B326FC0EFD810203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:ee:c7:4f:9e:79:66:3c:0e:e1:78:97:52:
                    71:e4:a6:7e:97:c4:92:d4:7c:c2:50:22:76:1b:c4:
                    7b:ff:53:dd:5d:37:1e:01:f4:5d:28:29:f5:55:a4:
                    45:b1:5c:4d:c3:8f:4d:92:dc:78:a5:7b:5d:e8:f2:
                    5a:16:5b:85:55:07:8d:22:d9:58:f2:a6:53:55:f4:
                    dd:a3:a9:a6:97:71:03:b6:7d:c9:60:6e:37:d6:8d:
                    96:89:3e:8d:52:10:49:6a:47:95:c1:4c:b5:eb:9b:
                    ef:8e:0f:61:f9:10:84:fb:f0:87:0f:dc:b1:5d:40:
                    6d:f3:61:a2:00:ce:69:f9:d3:55:27:71:a9:bd:81:
                    5f:50:6a:51:8e:aa:65:f2:be:2c:bc:58:60:4d:ee:
                    e6:7d:04:3f:30:14:1a:43:8c:b9:f9:f0:c3:54:96:
                    7e:e0:d5:26:2d:13:0c:b8:0b:55:31:1d:f8:0d:8c:
                    ef:00:4f:2c:db:a7:b9:f7:0c:4b:bc:4e:c5:aa:d0:
                    33:bb:d4:7f:37:c2:84:07:db:b7:9d:da:44:df:2a:
                    14:96:16:79:0f:91:8c:0f:d9:da:fe:4a:fa:3e:66:
                    75:d4:f5:ba:70:a3:1b:bf:ff:72:09:87:2d:e0:aa:
                    0b:99:5c:06:b1:d1:29:c1:9e:21:44:b3:26:fc:0e:
                    fd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C5:5E:F9:26:D8:D1:A6:32:8E:CF:C8:9C:74:EB:94:81:8C:72:05
            X509v3 Authority Key Identifier:
                keyid:35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3133302e302f32342d3234203d3e20323730353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:3a:ab:fa:6c:9e:cd:22:b2:59:63:97:a0:5d:3c:8d:58:a5:
         c1:9b:a2:0b:08:90:55:51:14:8f:5d:d1:66:53:80:39:94:2a:
         f9:0e:b7:f7:77:3e:29:e0:2d:f0:fa:3a:f4:f6:b2:c6:f2:c2:
         a7:fb:75:a4:44:22:8a:44:2a:35:ff:6a:82:82:64:f6:75:04:
         23:e0:ae:2c:7a:36:bc:f0:8d:82:c0:5c:2c:2a:0d:06:d7:62:
         e6:8e:21:af:e8:3f:65:6c:0b:fd:1a:17:b1:18:43:16:b3:67:
         c5:c5:04:c3:7a:e3:25:c8:cc:f6:39:3e:d4:db:9f:f0:b1:09:
         6e:b8:7d:d3:fd:9f:ba:da:0e:89:7f:58:c8:c4:89:3b:2f:ca:
         86:04:70:bd:c0:09:37:b0:3e:4c:6b:7d:0a:6f:69:1a:18:49:
         a4:f7:8c:47:77:5e:0b:c4:58:12:ed:4f:ba:ae:94:47:ba:aa:
         fb:6c:73:27:7f:b3:ff:d3:95:f2:42:69:b0:82:93:f7:a8:c5:
         ba:77:1f:0a:10:4a:65:56:90:47:de:76:2a:dc:21:91:b5:5a:
         f5:08:a6:fe:26:ba:f2:7e:0b:00:25:b1:a8:75:3c:6c:07:9f:
         e7:0d:04:ac:4f:55:26:04:36:74:73:6e:e2:40:b0:8d:c5:a9:
         9d:0d:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org