Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/3137372e35332e382e302f32312d3234203d3e203532393839.roa
File:                     3137372e35332e382e302f32312d3234203d3e203532393839.roa (raw, json)
Hash identifier:          geV4GgFzrU+HznV+43UMtU+JoZ1yvDPTo0sn7CWU05w=
Subject key identifier:   70:38:86:C7:20:78:7E:08:BA:FE:D9:B3:98:78:EB:D2:F5:39:D9:4F
Certificate issuer:       /CN=52F74CD9CD82590FB93E8841BA356D693CF1C4E4
Certificate serial:       17A2FFB5E9E93956CB9EBDB2893EF66ED7459D99
Authority key identifier: 52:F7:4C:D9:CD:82:59:0F:B9:3E:88:41:BA:35:6D:69:3C:F1:C4:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F74CD9CD82590FB93E8841BA356D693CF1C4E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/3137372e35332e382e302f32312d3234203d3e203532393839.roa
Signing time:             Wed 30 Mar 2022 18:00:00 +0000
ROA not before:           Wed 30 Mar 2022 17:55:00 +0000
ROA not after:            Thu 30 Mar 2023 18:00:00 +0000
asID:                     52989
IP address blocks:        177.53.8.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a2:ff:b5:e9:e9:39:56:cb:9e:bd:b2:89:3e:f6:6e:d7:45:9d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52F74CD9CD82590FB93E8841BA356D693CF1C4E4
        Validity
            Not Before: Mar 30 17:55:00 2022 GMT
            Not After : Mar 30 18:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1b:ec:66:47:df:54:22:6d:d2:63:cc:98:b0:
                    6b:74:aa:3d:c1:90:4e:6e:62:ed:61:e9:e8:41:1d:
                    8c:6e:84:e9:8b:6d:1b:23:80:9a:58:40:28:b2:27:
                    3c:66:6a:7f:f8:67:ae:32:6e:58:e6:5f:14:66:f9:
                    5c:e5:87:7a:7c:56:8c:4c:ff:8f:d8:d5:14:28:9f:
                    3d:da:d3:86:c1:9e:84:69:2c:4b:91:f7:5c:87:8a:
                    e2:af:7d:47:8f:fd:17:33:49:53:3d:fa:87:0a:5a:
                    d8:4f:b8:85:3b:3f:e7:e5:7b:44:79:f9:25:d7:9e:
                    26:5b:29:f1:00:40:b4:60:7f:44:a2:24:b5:6a:f8:
                    be:ca:50:56:71:a0:d7:a1:17:c1:50:00:d2:10:06:
                    3f:d0:27:34:2f:26:5c:9d:19:da:29:9d:46:c5:31:
                    3c:22:7e:fa:6d:ee:e0:1a:d7:ca:48:8a:3c:6f:3c:
                    bd:d3:f0:0f:58:93:76:9c:1f:0c:b5:bd:67:37:4d:
                    93:4f:98:54:1b:48:c3:d2:c9:34:30:62:c9:57:98:
                    10:9d:e7:e7:54:2c:8f:6a:07:57:79:ba:78:66:2a:
                    d2:eb:94:83:c8:a1:2b:0d:3b:e4:d4:d1:b1:c8:ef:
                    99:76:30:2f:4a:00:b0:6c:6b:1d:37:d2:76:c1:34:
                    fc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:38:86:C7:20:78:7E:08:BA:FE:D9:B3:98:78:EB:D2:F5:39:D9:4F
            X509v3 Authority Key Identifier:
                keyid:52:F7:4C:D9:CD:82:59:0F:B9:3E:88:41:BA:35:6D:69:3C:F1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/52F74CD9CD82590FB93E8841BA356D693CF1C4E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52F74CD9CD82590FB93E8841BA356D693CF1C4E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cbD581Da4ZvApJ2tuZ8MoH37t9nxJsgSzZYPYa69r4D/0/3137372e35332e382e302f32312d3234203d3e203532393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:99:78:28:f5:9c:61:e4:21:27:6b:c0:1e:fc:fc:86:0e:da:
         cd:2a:17:af:ed:08:23:96:cd:0f:e1:b8:0c:4f:d0:6f:5d:fc:
         20:b6:01:6b:b8:5d:cc:af:37:47:80:fa:9d:74:50:47:f8:8a:
         ba:b2:f4:bb:35:17:67:67:34:ab:7b:cc:89:8b:03:b4:13:71:
         85:20:88:9a:92:f8:c7:ca:23:d3:21:19:b6:8b:85:ca:12:22:
         0e:89:5d:92:32:38:85:67:b6:58:3c:ec:25:1e:58:6b:2e:6a:
         88:e9:a9:4e:94:46:e8:31:64:f9:df:6c:09:d1:02:83:2d:21:
         dc:f4:cc:9e:69:9c:cf:b5:fa:dc:6b:5f:62:0b:e3:17:fe:25:
         e8:2e:8e:de:5a:6c:46:2a:b7:40:72:88:dc:a0:6c:be:5f:29:
         ee:a0:cf:7f:b6:29:c9:e1:2d:28:b3:52:6c:4b:1d:2f:51:3f:
         cf:6a:ff:eb:c2:3c:47:61:d5:0d:b5:cd:92:7e:5c:93:9e:4c:
         b9:be:a6:da:05:e3:92:a5:1c:ac:47:0d:71:5b:96:cf:7d:13:
         bf:b9:93:c2:08:f3:dc:05:79:01:dc:8e:fd:fe:1f:e4:33:ae:
         34:a5:5d:e5:28:f1:cd:c8:b2:aa:91:b1:5e:50:b0:db:5a:2b:
         7b:33:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org