Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137372e38362e37322e302f32322d3234203d3e203532353733.roa
File:                     3137372e38362e37322e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          Vrh+w9MlA9zhb+c96ZOFwXGsHd+LLlyHgCcG6+UK7jU=
Subject key identifier:   C3:37:D9:5C:F4:6E:C2:7E:D1:7A:93:E8:54:32:DF:7A:33:2E:F0:A9
Certificate issuer:       /CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
Certificate serial:       53DEDC5A7E104E1287D00679156CFF722369058C
Authority key identifier: 35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137372e38362e37322e302f32322d3234203d3e203532353733.roa
Signing time:             Fri 19 Jan 2024 17:04:10 +0000
ROA not before:           Fri 19 Jan 2024 16:59:10 +0000
ROA not after:            Fri 17 Jan 2025 17:04:10 +0000
asID:                     52573
IP address blocks:        177.86.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:de:dc:5a:7e:10:4e:12:87:d0:06:79:15:6c:ff:72:23:69:05:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
        Validity
            Not Before: Jan 19 16:59:10 2024 GMT
            Not After : Jan 17 17:04:10 2025 GMT
        Subject: CN=C337D95CF46EC27ED17A93E85432DF7A332EF0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:7f:24:19:f9:4e:03:d5:d1:53:a1:c2:fe:
                    9a:23:01:83:88:bb:b0:7f:ef:7b:4f:68:5c:bf:bd:
                    e1:ca:5f:70:14:95:30:38:e7:92:07:df:09:e4:81:
                    06:7c:24:76:f3:e5:a8:f7:10:03:13:9c:95:b9:f0:
                    7d:48:2e:40:bc:04:6d:2a:e4:1b:ad:4c:24:e4:bd:
                    3b:c3:d4:db:0d:58:c1:44:90:c0:75:f0:15:c7:1c:
                    51:7f:c3:e6:8b:87:e8:f6:c7:8b:45:a2:b3:d9:f2:
                    63:03:ad:97:31:83:42:04:82:bf:c6:9f:85:4c:34:
                    81:c9:1e:01:57:4f:77:9d:18:be:99:77:23:b4:34:
                    4b:bd:f9:ff:8c:f7:9d:08:11:06:e5:41:d2:5e:3c:
                    5a:2d:20:e8:e9:71:04:62:d7:9b:d0:09:a0:0c:ba:
                    7d:d0:a1:89:26:64:2e:cb:1a:74:e1:2f:48:c2:cb:
                    fa:71:be:1b:3e:e3:3a:95:a7:cb:11:d8:1c:26:11:
                    fd:80:48:63:78:fb:c8:08:eb:fc:00:8a:1a:8b:08:
                    36:97:11:06:dd:1a:b0:5d:0e:af:15:65:fd:50:42:
                    a6:e7:6d:27:f0:b8:2e:65:28:a3:88:fa:e2:d8:e3:
                    41:74:e8:d9:17:e3:e6:bd:71:6a:c0:0a:61:27:8e:
                    8a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:37:D9:5C:F4:6E:C2:7E:D1:7A:93:E8:54:32:DF:7A:33:2E:F0:A9
            X509v3 Authority Key Identifier:
                keyid:35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137372e38362e37322e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:e5:58:17:d9:79:12:a1:ee:32:b0:20:f8:5a:e7:4e:cc:d6:
         a6:f7:3d:07:90:a6:1d:f4:b5:38:ab:68:fe:09:85:4f:2a:f9:
         6a:21:53:66:85:d4:25:3c:84:30:cb:94:67:15:cb:dc:15:4f:
         22:8b:9f:05:71:92:20:81:f8:be:ad:06:5b:c7:8f:fc:96:11:
         49:0c:42:15:11:a9:67:70:ed:39:04:61:9d:b0:b3:ee:c0:64:
         b6:79:a5:1d:f0:1e:d9:08:41:18:d1:14:f6:c0:e4:3f:4b:34:
         9a:81:08:1a:9b:55:3e:9f:d5:1c:e2:55:ce:e4:48:6f:ba:64:
         da:e9:a6:ef:b0:73:52:94:ce:ec:43:5c:f3:bb:1c:59:f0:d1:
         26:7a:dd:21:14:3d:8a:42:b4:7e:9f:45:58:cf:cb:8d:f2:2e:
         f5:a4:6b:a8:2c:45:93:8a:c6:44:d9:10:ae:a7:16:d5:f2:8e:
         bb:b3:fd:ce:df:1c:b0:37:c4:ff:c3:21:48:4c:da:63:5b:43:
         4f:d5:b6:cf:a8:49:58:fe:61:3e:26:b6:71:b1:59:06:f5:42:
         1d:ae:62:b6:54:bc:1f:f4:08:63:e1:50:26:c6:b0:fb:2e:fe:
         9d:ae:86:6f:b3:82:a7:bc:63:7d:77:70:18:72:7a:87:48:9c:
         d4:8a:a1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-ams.rpki-client.org