Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa
File:                     3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa (raw, json)
Hash identifier:          xxj4Pm1vi5qow9zmBA6dGJYRAzx+910JD0D7aJ6tymQ=
Subject key identifier:   F4:1B:7F:B4:60:4F:C3:11:3C:CA:9C:F2:11:1B:42:13:E9:53:B4:5A
Certificate issuer:       /CN=7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F
Certificate serial:       275A8073494D65ABC52381C1817E2DF46C0A8DEF
Authority key identifier: 7F:3B:2D:35:DB:D8:DD:95:64:A5:F7:41:6C:34:8B:D4:49:B9:3A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa
Signing time:             Thu 11 Jan 2024 18:17:17 +0000
ROA not before:           Thu 11 Jan 2024 18:12:17 +0000
ROA not after:            Thu 09 Jan 2025 18:17:17 +0000
asID:                     262452
IP address blocks:        177.52.216.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5a:80:73:49:4d:65:ab:c5:23:81:c1:81:7e:2d:f4:6c:0a:8d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F
        Validity
            Not Before: Jan 11 18:12:17 2024 GMT
            Not After : Jan  9 18:17:17 2025 GMT
        Subject: CN=F41B7FB4604FC3113CCA9CF2111B4213E953B45A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:c6:b5:73:e9:74:e6:7e:38:a2:20:45:08:
                    9e:37:b8:cf:0e:aa:a8:80:c7:c7:db:a5:8e:0a:29:
                    1c:50:01:93:c9:90:48:0a:9a:9a:e0:e0:20:90:2f:
                    ba:0e:1a:13:6b:58:99:ae:6f:ad:29:54:0a:a5:ee:
                    f6:f8:2c:5e:bf:02:e4:45:ca:d2:b6:c3:06:4a:9b:
                    a2:8a:3b:4b:a1:e3:a6:8c:2d:3d:2a:a1:80:ad:24:
                    a8:39:84:98:06:bd:06:9d:15:9e:f3:25:4d:3e:fb:
                    96:56:62:63:95:8b:61:2a:65:3d:8a:a1:db:0d:41:
                    3a:72:5c:a8:fd:5b:d6:e9:21:2c:d0:c1:80:ad:c6:
                    a3:2d:3e:a1:81:f9:87:11:2f:b9:12:35:07:38:d9:
                    e0:84:e6:c4:5a:0e:a2:be:ea:58:93:d4:7a:2b:5f:
                    9a:e3:30:77:49:ab:0a:94:8d:c1:fc:32:16:8d:61:
                    66:06:cd:e4:60:35:f0:e0:d6:bf:51:72:84:b6:38:
                    b7:45:71:20:50:29:4a:a3:78:36:86:4f:30:58:df:
                    38:da:d2:2d:b0:ba:7c:9f:ee:2d:9d:56:8c:29:d7:
                    36:be:7f:ae:03:4b:17:73:3b:cf:53:e1:1a:a9:ff:
                    9b:b8:53:7a:8d:79:ce:f8:07:de:10:b0:86:6e:62:
                    1f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1B:7F:B4:60:4F:C3:11:3C:CA:9C:F2:11:1B:42:13:E9:53:B4:5A
            X509v3 Authority Key Identifier:
                keyid:7F:3B:2D:35:DB:D8:DD:95:64:A5:F7:41:6C:34:8B:D4:49:B9:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:f8:d2:be:50:e6:9f:85:5c:70:49:f0:cb:31:b8:fc:4e:b6:
         8c:e3:04:e0:8c:75:14:04:c1:24:2c:a7:f8:ee:5d:d8:de:53:
         f6:7d:7b:e9:02:a2:8f:95:2c:fb:d8:fc:63:be:f1:37:1d:a7:
         54:8d:bb:1c:32:56:b0:4b:99:5c:83:1a:43:cf:00:e1:fe:3d:
         29:7d:e9:e7:d5:b1:12:94:c4:ed:2c:33:66:e1:75:cd:c2:49:
         51:d1:da:12:b5:f1:7a:59:66:9c:20:52:c5:28:64:fd:5f:8d:
         24:2d:87:cf:e8:8b:ae:db:14:41:da:cd:56:85:4d:bc:bc:d1:
         04:24:bf:8a:d1:71:77:52:39:f8:7c:96:24:e2:c3:3f:52:5c:
         2f:7c:b0:36:e2:4a:7e:a8:42:aa:64:8a:b6:02:4e:18:d1:88:
         77:42:55:43:e2:99:44:9f:2d:a6:6e:de:f4:fa:d3:ab:bb:0f:
         1a:62:fc:95:0b:d5:f6:9b:d8:9e:d6:4e:85:fe:d7:4d:a9:83:
         0f:e5:a4:c3:fb:96:f4:6b:c8:51:98:c5:f0:83:62:7a:e1:de:
         f3:01:04:bf:63:c5:60:41:fc:e5:16:03:83:61:8c:c9:69:0c:
         0b:e0:e8:84:b6:08:ee:49:81:5b:3d:9c:94:52:69:98:d9:5c:
         45:98:30:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org