Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3133312e302f32342d3234203d3e20323730353134.roa
File:                     3137372e31312e3133312e302f32342d3234203d3e20323730353134.roa (raw, json)
Hash identifier:          3GCefBiygXpyWG3luGEvytWhXM0WdN1vTFFTCAbZ/R4=
Subject key identifier:   BC:F3:C2:AE:8C:EE:7A:F8:B6:B3:6C:3D:DF:81:F9:3D:D8:34:71:22
Certificate issuer:       /CN=35F6CB498D4B581CD56EFC2125053A8C6BF1D329
Certificate serial:       750B4272487D33695C3223BE813CCEBC954F59F9
Authority key identifier: 35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3133312e302f32342d3234203d3e20323730353134.roa
Signing time:             Mon 25 Sep 2023 17:00:00 +0000
ROA not before:           Mon 25 Sep 2023 16:55:00 +0000
ROA not after:            Mon 23 Sep 2024 17:00:00 +0000
asID:                     270514
IP address blocks:        177.11.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0b:42:72:48:7d:33:69:5c:32:23:be:81:3c:ce:bc:95:4f:59:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35F6CB498D4B581CD56EFC2125053A8C6BF1D329
        Validity
            Not Before: Sep 25 16:55:00 2023 GMT
            Not After : Sep 23 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:26:2d:01:c7:bf:2d:f3:1e:a5:b6:ac:c6:
                    45:59:b7:25:4d:4d:f0:4b:fa:9f:d3:ac:3e:20:96:
                    60:a0:a2:0d:17:47:df:1e:e3:72:d3:de:5f:1b:0b:
                    47:6c:bb:19:51:2a:f4:26:bb:21:aa:f1:18:e6:b3:
                    d1:05:14:0d:d8:c5:f3:58:eb:5e:5f:67:b7:b9:7e:
                    b9:5b:df:31:53:bb:e3:1c:92:43:46:cc:5f:a8:67:
                    d1:e7:dc:43:a5:02:ad:65:e1:e3:b4:e6:1c:bd:35:
                    7d:fb:6b:ce:b0:5a:c6:11:52:a5:3e:6e:e5:53:32:
                    d6:95:60:42:f8:87:de:a5:27:b5:77:47:38:54:3c:
                    ea:69:4f:70:c1:f8:5f:3f:0b:46:a1:66:5a:8e:d1:
                    9d:8d:7c:c4:66:f8:dd:e1:a0:33:81:38:b7:6d:7b:
                    02:9f:b7:e0:01:52:31:14:20:cd:b8:58:43:74:bd:
                    08:ee:fd:b7:4c:63:f8:47:60:13:16:73:ce:df:75:
                    94:43:8b:b0:b6:b9:3b:1a:38:10:7b:b5:19:04:e5:
                    bb:3e:86:4f:2d:22:b3:b1:27:e4:bd:7e:6e:69:20:
                    bd:ba:94:31:fc:66:ea:b9:96:ac:e2:b3:3f:08:db:
                    79:d8:ee:e3:bb:ca:c3:45:89:93:d7:51:c4:69:a8:
                    59:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F3:C2:AE:8C:EE:7A:F8:B6:B3:6C:3D:DF:81:F9:3D:D8:34:71:22
            X509v3 Authority Key Identifier:
                keyid:35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3133312e302f32342d3234203d3e20323730353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:68:1e:bc:66:b4:08:5e:3e:cf:6e:a3:ef:5b:00:38:b7:a2:
         06:0b:80:ee:a1:7f:21:a0:ea:37:04:7d:1f:06:67:94:dd:32:
         a0:ae:26:c5:0a:00:1a:53:19:31:fd:a1:3e:67:93:67:84:31:
         6e:6c:0d:a9:18:18:70:35:34:d6:3f:25:50:72:c5:13:ce:00:
         c7:18:d0:a7:a7:d6:8b:a8:88:00:72:7d:64:08:46:db:1b:93:
         64:92:cf:62:40:d8:d4:fd:ef:6d:5f:2f:7f:9d:cf:b1:fc:03:
         bb:df:7a:fd:aa:7a:26:3f:35:5c:72:b4:53:5c:f2:ad:f0:6b:
         4c:e9:b4:42:0e:8e:cd:a7:00:6c:be:64:2b:ab:01:bb:d0:fa:
         70:44:89:96:ee:b5:5b:a1:c4:6f:55:8a:bd:6e:69:53:7f:87:
         73:40:8b:d3:9b:61:f7:fd:19:31:39:a7:6b:45:ad:d2:1f:21:
         80:99:be:a7:24:aa:04:e8:aa:5d:0a:0e:69:bc:16:0a:3d:04:
         e8:18:de:15:ad:26:21:98:5f:31:25:23:19:18:a1:80:2b:3b:
         c8:6d:49:9d:04:fa:98:e1:82:b4:96:c3:a6:ab:54:e2:3e:f7:
         b2:12:d8:74:53:86:22:3a:49:b2:df:f1:22:c9:d0:3e:41:b4:
         d9:5e:31:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org