Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231382e302f32342d3234203d3e20323632343532.roa
File:                     3137372e35322e3231382e302f32342d3234203d3e20323632343532.roa (raw, json)
Hash identifier:          zEQagJ42vdU5/mBu06XJl8PpdC554yZar/v6DAmCWmI=
Subject key identifier:   3B:10:78:55:7E:59:07:68:BE:40:26:6F:E7:DA:A1:DC:A6:17:BB:D1
Certificate issuer:       /CN=7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F
Certificate serial:       671D0958A017B48FA090CA05E0AF16136B8A8D02
Authority key identifier: 7F:3B:2D:35:DB:D8:DD:95:64:A5:F7:41:6C:34:8B:D4:49:B9:3A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231382e302f32342d3234203d3e20323632343532.roa
Signing time:             Thu 09 Nov 2023 13:54:01 +0000
ROA not before:           Thu 09 Nov 2023 13:49:01 +0000
ROA not after:            Thu 07 Nov 2024 13:54:01 +0000
asID:                     262452
IP address blocks:        177.52.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1d:09:58:a0:17:b4:8f:a0:90:ca:05:e0:af:16:13:6b:8a:8d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F
        Validity
            Not Before: Nov  9 13:49:01 2023 GMT
            Not After : Nov  7 13:54:01 2024 GMT
        Subject: CN=3B1078557E590768BE40266FE7DAA1DCA617BBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b1:30:9f:b6:ba:4f:28:bd:45:69:e3:1c:d7:
                    a1:83:c6:f3:3f:ff:d5:02:0d:74:2a:93:c2:51:d7:
                    ea:ef:69:5a:74:39:98:0a:e5:3f:16:41:44:e5:a3:
                    9e:83:32:40:5d:30:8e:b7:6b:da:f4:57:59:8d:ca:
                    20:ab:21:dc:09:ce:22:8e:95:e1:6b:7a:ac:ab:e0:
                    3c:dc:ca:ed:f6:87:27:d1:b5:bc:71:cc:aa:db:f1:
                    83:22:a0:b2:7b:96:3b:e7:c1:5b:81:a7:bb:e4:3f:
                    71:26:fa:e6:9a:7c:de:f1:51:ba:08:32:d5:d0:fa:
                    3a:b6:e5:b7:08:6e:16:5a:97:c8:5e:ad:d1:08:1d:
                    16:ef:78:dc:e4:65:cd:27:a5:fc:5a:7c:5e:29:ac:
                    de:b0:ad:97:65:68:06:82:bf:88:d4:89:4b:62:f0:
                    84:b9:06:cf:6d:42:ab:40:0a:02:6a:7e:b1:04:69:
                    a9:86:84:f4:83:4d:d8:86:cc:10:f5:90:8b:44:0b:
                    e2:ed:3f:ad:34:5e:77:66:c3:1f:47:34:e9:a8:9c:
                    ed:24:de:fc:4e:05:2d:60:ae:87:2f:a8:e5:b1:4b:
                    f3:1d:22:67:34:d9:72:a2:97:25:bc:98:0a:b3:a4:
                    13:be:47:33:dd:98:3b:c4:ef:d6:b4:bf:f6:e4:44:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:10:78:55:7E:59:07:68:BE:40:26:6F:E7:DA:A1:DC:A6:17:BB:D1
            X509v3 Authority Key Identifier:
                keyid:7F:3B:2D:35:DB:D8:DD:95:64:A5:F7:41:6C:34:8B:D4:49:B9:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231382e302f32342d3234203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:de:d1:ac:c4:f8:7d:1b:a6:1b:fe:91:90:3f:63:a9:d9:19:
         b7:c9:10:27:2a:8d:c8:5d:5b:37:88:ea:39:a9:f0:37:3d:2d:
         f9:bf:ed:d8:3a:21:2c:ea:71:47:95:5e:78:b1:ba:6e:ce:79:
         98:a2:92:c2:7d:22:47:db:9c:b7:cd:24:9a:f5:18:f7:42:b8:
         11:47:6b:55:47:c9:42:7f:a8:1f:84:ae:51:dd:17:27:54:b2:
         e0:03:6a:65:a2:d5:07:b1:0c:ef:d6:82:fe:1e:e7:96:44:e3:
         3a:06:fc:b2:f5:0c:b3:69:07:c0:97:84:47:1c:3b:d2:6c:fe:
         ba:59:c9:8d:2b:38:be:e0:d6:a1:0d:ee:52:7c:aa:29:c8:6a:
         3e:cc:a9:53:e9:65:c1:64:8a:90:6d:fa:29:1d:7b:29:f6:61:
         7c:84:a5:27:25:6b:16:1d:c0:eb:ce:0c:2b:78:cb:71:aa:7a:
         d3:b6:53:4c:ce:98:5a:1c:db:74:71:a8:25:e0:af:51:a4:1b:
         07:ab:e2:bc:35:75:dc:14:a5:68:ec:13:e9:04:74:ea:2f:43:
         ac:9a:bb:12:2f:f0:65:0f:cf:6b:2b:50:23:1f:ed:0e:91:12:
         7d:6f:d9:16:fd:b0:b7:98:b1:4e:a0:ae:df:ef:ff:c0:de:04:
         5a:a2:60:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org