Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137372e38362e37322e302f32322d3234203d3e203532353733.roa
File:                     3137372e38362e37322e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          QJ1D6ojuZt4AYhbWerrq0xvPlwu/jg1q2IXADnFEg3w=
Subject key identifier:   8E:0E:51:72:1A:CE:E5:83:A9:87:73:92:45:DC:B2:01:A9:55:85:30
Certificate issuer:       /CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
Certificate serial:       1EB3746CED9D53A80F991B5BDF1D8330189B6C55
Authority key identifier: 85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137372e38362e37322e302f32322d3234203d3e203532353733.roa
Signing time:             Wed 03 Apr 2024 23:58:32 +0000
ROA not before:           Wed 03 Apr 2024 23:53:32 +0000
ROA not after:            Wed 02 Apr 2025 23:58:32 +0000
asID:                     52573
IP address blocks:        177.86.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b3:74:6c:ed:9d:53:a8:0f:99:1b:5b:df:1d:83:30:18:9b:6c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
        Validity
            Not Before: Apr  3 23:53:32 2024 GMT
            Not After : Apr  2 23:58:32 2025 GMT
        Subject: CN=8E0E51721ACEE583A987739245DCB201A9558530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:25:37:3b:5a:2d:48:2f:a3:b6:0e:6a:08:
                    ae:9f:32:0e:95:29:4b:ba:e5:d4:6a:6a:ae:38:a8:
                    35:4e:87:e5:0e:f6:a0:34:2d:68:27:95:f8:c4:13:
                    d3:87:26:77:27:80:7e:fa:bf:2a:d4:0d:aa:4e:19:
                    56:34:5c:71:67:98:97:94:eb:89:da:a7:9d:c9:57:
                    e8:5c:c2:da:67:21:ef:5c:6b:68:04:f3:08:da:d5:
                    4f:9b:97:64:04:13:8c:5d:db:3c:04:28:8d:37:a3:
                    ef:35:84:f6:5b:90:0b:82:df:26:60:c8:f5:1f:69:
                    8d:7c:7b:45:ed:a2:06:f5:f3:bf:69:47:b0:e4:a2:
                    33:8e:2f:4b:38:96:a7:60:38:25:07:ff:ff:99:06:
                    93:a5:ce:2b:0d:25:30:6c:04:ba:10:27:7b:71:b9:
                    8b:ab:c1:3a:95:88:9b:8a:6b:f1:3a:30:74:55:33:
                    80:fa:4a:52:22:b2:32:d9:41:96:60:7f:2a:59:96:
                    63:71:35:d8:b8:3a:13:7c:f6:33:9c:00:59:ea:96:
                    f5:6f:ab:3c:2b:2c:42:4d:a8:0c:7f:81:4b:45:ba:
                    7f:30:e9:42:3f:bc:40:bb:82:4b:32:d5:2c:eb:4b:
                    ff:e0:1d:c1:d3:ec:e8:7c:bd:c5:76:1e:34:e3:b7:
                    9c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0E:51:72:1A:CE:E5:83:A9:87:73:92:45:DC:B2:01:A9:55:85:30
            X509v3 Authority Key Identifier:
                keyid:85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137372e38362e37322e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:28:bb:e6:cf:86:0e:8f:c2:a1:ff:bc:f8:94:6f:79:fb:e0:
         9c:d8:47:f7:74:c0:67:5d:34:5f:dc:b1:ee:27:d5:97:de:de:
         51:6f:c4:a9:90:c1:bc:2d:06:37:b5:50:af:2a:17:85:c6:64:
         12:d2:96:ab:78:5e:5b:67:0e:b7:bd:45:ea:af:f1:01:4a:43:
         28:91:00:ad:67:79:34:e7:1a:28:5d:0b:60:2d:1a:52:0e:6b:
         18:c2:c1:1f:ed:b3:a6:20:52:d5:b3:9b:18:33:80:92:bd:fa:
         47:83:2e:c4:c3:71:01:af:2c:2c:51:ce:c0:a4:e0:af:be:67:
         cd:d1:d4:b7:0f:90:45:1a:f4:c2:a7:b2:7b:88:15:7b:e3:fb:
         a3:58:4a:77:27:50:ab:46:48:18:c8:5d:85:11:d5:48:a9:1a:
         15:4d:31:17:e4:b1:3c:88:8e:d8:a9:95:57:2a:8e:99:fa:e6:
         ec:bf:48:fb:9a:45:36:18:65:26:f1:b3:07:55:58:d4:47:50:
         98:59:b2:59:72:c5:8c:2c:ba:83:53:b2:ec:53:ee:51:d1:65:
         ec:33:f2:2d:89:df:a1:92:14:83:b3:48:cd:72:56:47:b0:fc:
         92:08:50:ad:fa:1a:50:9c:4f:8a:ba:8a:5b:7b:47:b4:32:8e:
         b7:e9:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 02:17:08 2024 by rpki-client on console-fra.rpki-client.org