Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32322d3232203d3e20323633353731.roa
File:                     3137372e35352e38382e302f32322d3232203d3e20323633353731.roa (raw, json)
Hash identifier:          iNEPEwe1Zp6uthRlqhgCwisDd2j8tJN4p2AfrhZbw2c=
Subject key identifier:   E2:EE:96:0D:D4:ED:D7:1F:FB:91:BD:DB:EB:2C:F9:2A:A9:A4:93:7A
Certificate issuer:       /CN=41D988C453AB5CA96DA778B690390450C6345EEE
Certificate serial:       511FF1CB53DE56EAAEF2180B1322FACA9E7115CF
Authority key identifier: 41:D9:88:C4:53:AB:5C:A9:6D:A7:78:B6:90:39:04:50:C6:34:5E:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D988C453AB5CA96DA778B690390450C6345EEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32322d3232203d3e20323633353731.roa
Signing time:             Mon 30 Oct 2023 14:43:38 +0000
ROA not before:           Mon 30 Oct 2023 14:38:38 +0000
ROA not after:            Mon 28 Oct 2024 14:43:38 +0000
asID:                     263571
IP address blocks:        177.55.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1f:f1:cb:53:de:56:ea:ae:f2:18:0b:13:22:fa:ca:9e:71:15:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41D988C453AB5CA96DA778B690390450C6345EEE
        Validity
            Not Before: Oct 30 14:38:38 2023 GMT
            Not After : Oct 28 14:43:38 2024 GMT
        Subject: CN=E2EE960DD4EDD71FFB91BDDBEB2CF92AA9A4937A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:0c:9c:c2:ee:19:60:b1:c3:c7:c6:57:eb:
                    a4:03:69:e1:54:91:00:8b:f4:74:da:f7:4e:da:8f:
                    09:3a:79:92:b4:f5:35:2a:6f:20:ef:c0:f3:28:96:
                    7c:16:2c:0a:9a:17:2d:6d:cf:b1:b9:fb:0e:d8:3e:
                    68:ef:ac:ea:16:01:df:16:bf:51:6c:ae:4b:8f:e1:
                    7f:a4:13:67:46:2e:7a:f2:4c:8c:52:f8:97:9e:fd:
                    c8:3b:59:4e:3a:ed:7c:8f:68:2b:00:28:d3:64:99:
                    70:28:70:26:ef:aa:2f:9b:9d:a2:b2:d8:dd:e3:11:
                    81:2c:1a:f5:3d:36:a1:c4:ea:2e:37:ff:47:3a:4f:
                    12:e8:4d:f5:0c:82:ba:d9:26:48:4c:d8:cf:7f:dd:
                    f2:32:46:7a:ab:1e:df:d0:5f:83:fb:2c:49:54:aa:
                    b9:d9:7d:8e:b7:35:7e:40:da:d6:20:3f:45:ee:68:
                    69:aa:ee:9a:95:3c:f4:bc:3a:d4:6d:5e:b6:6b:fb:
                    e9:79:33:b2:96:71:f6:cc:e1:ac:a7:e5:63:87:93:
                    06:fa:e3:7d:69:f6:ef:a2:87:4e:36:c8:99:b2:e5:
                    98:87:18:d2:23:b8:c9:81:75:b1:0f:3b:a0:ce:f9:
                    28:f5:40:ca:e0:64:7d:13:9b:0e:fd:53:31:65:57:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EE:96:0D:D4:ED:D7:1F:FB:91:BD:DB:EB:2C:F9:2A:A9:A4:93:7A
            X509v3 Authority Key Identifier:
                keyid:41:D9:88:C4:53:AB:5C:A9:6D:A7:78:B6:90:39:04:50:C6:34:5E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/41D988C453AB5CA96DA778B690390450C6345EEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D988C453AB5CA96DA778B690390450C6345EEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32322d3232203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:b8:d7:9f:17:98:20:82:8d:74:97:94:ad:4c:4b:96:12:bb:
         80:2a:31:63:c0:18:08:32:0c:35:14:85:99:c6:90:43:a7:3a:
         88:0b:48:5b:f9:00:c3:76:9b:a6:be:05:e5:be:43:31:71:9c:
         61:6b:58:05:aa:08:32:ac:45:a2:2c:db:79:48:ea:23:4a:cf:
         4c:f3:30:fa:f1:7d:c0:ab:10:ab:61:b7:ca:cb:f4:94:06:51:
         4d:ec:bd:34:3b:5e:88:fc:40:34:9d:da:78:f4:c2:12:32:01:
         e3:10:a3:b4:6e:64:3f:3c:99:9e:56:22:40:81:e1:b5:36:a7:
         21:32:01:23:a0:0f:74:cf:2b:6b:3f:35:54:12:1c:da:69:e0:
         ba:2a:ea:c5:ee:00:64:1b:d5:15:e9:4a:7e:69:09:2a:37:6c:
         2d:51:33:de:90:1b:08:07:79:14:18:f2:42:1b:2e:58:33:f8:
         80:f1:d9:d0:60:0f:8c:e9:42:ae:10:7a:44:22:66:a0:05:07:
         21:1a:d9:1d:87:f5:a9:09:97:61:51:92:ba:92:ef:01:db:90:
         e2:87:d0:69:26:a4:40:0c:9c:1c:43:89:55:99:49:9f:7a:6d:
         65:c5:8e:a0:3b:f3:97:04:17:bb:d7:72:ef:55:47:01:a4:1d:
         cf:52:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org