Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa
File:                     3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa (raw, json)
Hash identifier:          y21B+gWIkELHnM0Uw6++DsawimQVGRnRTUdHF5hZ4oE=
Subject key identifier:   FD:D6:60:C7:04:86:A1:04:7C:CF:EE:F4:23:A7:2F:E4:FF:69:6B:58
Certificate issuer:       /CN=7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F
Certificate serial:       0DD9851667186DA875B7341CE7A537E069EEEAEC
Authority key identifier: 7F:3B:2D:35:DB:D8:DD:95:64:A5:F7:41:6C:34:8B:D4:49:B9:3A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa
Signing time:             Thu 09 Nov 2023 13:54:01 +0000
ROA not before:           Thu 09 Nov 2023 13:49:01 +0000
ROA not after:            Thu 07 Nov 2024 13:54:01 +0000
asID:                     262452
IP address blocks:        177.52.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d9:85:16:67:18:6d:a8:75:b7:34:1c:e7:a5:37:e0:69:ee:ea:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F
        Validity
            Not Before: Nov  9 13:49:01 2023 GMT
            Not After : Nov  7 13:54:01 2024 GMT
        Subject: CN=FDD660C70486A1047CCFEEF423A72FE4FF696B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:4a:95:c7:e4:d2:18:cc:62:d3:bc:c7:d2:
                    a9:54:bb:9d:87:fb:7b:63:5f:32:df:00:80:b2:18:
                    93:0c:92:76:b5:1f:b8:f7:25:1f:5f:b9:ae:ba:a9:
                    eb:06:e7:4e:48:18:d8:5c:26:1c:ad:d7:8b:fc:30:
                    e6:64:55:b4:e5:1b:e2:0c:7f:d9:f9:fb:ee:2f:ac:
                    21:3b:0b:46:24:9c:d2:31:45:b9:59:f1:42:a1:3f:
                    e0:f7:c2:b6:d2:17:c6:ca:dc:84:c5:25:29:08:d6:
                    5b:cf:5f:b4:36:9d:ae:c3:4d:e4:98:23:59:fb:5c:
                    69:47:3f:46:7f:b3:05:7e:ec:e5:9f:b4:79:91:2e:
                    45:b7:73:b9:f4:45:94:73:bf:6b:3e:4f:79:01:2d:
                    0f:0c:fc:04:01:03:45:25:b1:48:ee:d9:6b:14:81:
                    30:68:78:53:75:8f:d4:ec:9c:e1:a6:41:88:07:be:
                    45:79:88:4f:86:7e:9a:db:10:35:10:76:b5:61:6b:
                    c9:ff:6b:82:62:98:b2:6a:f8:d7:08:6b:40:8d:3c:
                    b5:45:b6:d6:85:2c:17:e2:d6:5a:91:1a:69:e2:37:
                    d8:59:98:af:f3:2d:e8:42:7a:37:8c:85:6f:b1:2e:
                    c3:2e:fc:c5:0e:4c:c6:c7:93:df:ba:78:33:a3:96:
                    a4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D6:60:C7:04:86:A1:04:7C:CF:EE:F4:23:A7:2F:E4:FF:69:6B:58
            X509v3 Authority Key Identifier:
                keyid:7F:3B:2D:35:DB:D8:DD:95:64:A5:F7:41:6C:34:8B:D4:49:B9:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F3B2D35DBD8DD9564A5F7416C348BD449B93A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:b8:f5:4b:0d:35:5f:a3:b5:fe:b8:49:b0:1a:e3:b9:1f:b7:
         f3:19:d8:a2:61:2c:5f:28:95:d9:2f:d9:9b:c3:97:b8:66:63:
         50:7b:25:9c:42:76:e0:33:50:8e:54:d9:a7:63:1d:7f:f9:6a:
         cd:7d:4a:4f:d5:3f:4c:0d:cd:11:8f:59:37:b7:7e:1b:0b:34:
         ee:3b:83:5b:66:5d:3f:a6:c6:07:77:90:9e:85:23:1d:f7:60:
         19:34:ae:86:49:07:eb:0a:ee:71:6b:c9:a7:cf:30:92:c7:d8:
         a6:a6:79:b3:b7:cf:ac:36:9b:7c:98:e2:7a:1b:67:b6:e8:fc:
         0d:60:08:04:cd:46:59:b5:f4:97:03:ab:e9:ce:2d:2b:17:a3:
         97:1f:32:37:b2:97:7b:3e:25:b1:13:22:76:59:9a:42:01:63:
         c2:c1:6e:d5:92:0b:1d:e5:4e:af:8d:80:67:06:e5:b8:db:ef:
         3c:ad:e5:07:a9:4e:c9:ea:ba:31:ed:92:fb:86:dd:0d:2d:f0:
         d4:59:84:20:57:8e:5e:0a:33:ce:9a:1c:b6:e2:05:fa:79:31:
         1d:c1:01:ec:11:51:21:dd:2b:d5:7d:87:24:34:74:7f:92:f0:
         5f:1a:01:4f:74:ac:3a:38:84:d8:4d:48:ca:c0:45:6d:25:ea:
         75:da:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-ams.rpki-client.org